C_NLA_PROP_MTU={0x8, 0x4, 0x4d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d07}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbef}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20004840}, 0x14) 00:11:05 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6, 0x0) [ 666.495145][T13435] binder: 13411:13435 unknown command 0 [ 666.554098][T13435] binder: 13411:13435 ioctl c0306201 20000080 returned -22 [ 666.563099][T13641] binder: 13637:13641 unknown command 1074094853 [ 666.588973][T13641] binder: 13637:13641 ioctl c0306201 20000080 returned -22 00:11:05 executing program 2 (fault-call:6 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056306400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:06 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2f64e5762f6db0db5b108d0356410e9de0643022"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000180)=0x40, 0x4) r2 = dup(r1) statx(r2, &(0x7f0000000080)='./file0\x00', 0x0, 0x900b0411c0b7c788, &(0x7f0000000240)) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000140)=@sha1={0x1, "f30af3c8d66b64d63609d22e4843c0d93e517366"}, 0x15, 0x1) 00:11:06 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7, 0x0) 00:11:06 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) statx(r2, &(0x7f0000000080)='./bus\x00', 0x645ba04c75e8d1f4, 0x80, &(0x7f0000000200)) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r3, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 666.687912][T13653] UBIFS error (pid: 13653): cannot open "ubifs", error -22 [ 666.883429][T13695] FAULT_INJECTION: forcing a failure. [ 666.883429][T13695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 666.903856][T13695] CPU: 1 PID: 13695 Comm: syz-executor.2 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 666.913760][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 666.923840][T13695] Call Trace: [ 666.927151][T13695] dump_stack+0x197/0x210 [ 666.931740][T13695] should_fail.cold+0x5/0xf [ 666.936274][T13695] ? setup_fault_attr+0x1f0/0x1f0 [ 666.941323][T13695] ? mark_lock+0xc2/0x1220 [ 666.945779][T13695] should_fail_alloc_page+0x50/0x60 [ 666.951001][T13695] __alloc_pages_nodemask+0x1a1/0x910 [ 666.956407][T13695] ? __alloc_pages_slowpath+0x2900/0x2900 [ 666.962305][T13695] ? mark_lock+0xc2/0x1220 [ 666.966741][T13695] ? aa_file_perm+0x601/0x1600 [ 666.970062][T13777] UBIFS error (pid: 13777): cannot open "ubifs", error -22 [ 666.971557][T13695] cache_grow_begin+0x90/0xc60 [ 666.983631][T13695] ? trace_hardirqs_off+0x62/0x240 [ 666.988785][T13695] __kmalloc+0x6b2/0x770 [ 666.993149][T13695] ? mark_held_locks+0xf0/0xf0 [ 666.997939][T13695] ? tomoyo_realpath_from_path+0xc5/0x660 [ 667.003802][T13695] tomoyo_realpath_from_path+0xc5/0x660 [ 667.009368][T13695] ? tomoyo_path_number_perm+0x193/0x520 [ 667.015026][T13695] tomoyo_path_number_perm+0x1dd/0x520 [ 667.020532][T13695] ? tomoyo_path_number_perm+0x193/0x520 [ 667.026186][T13695] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 667.032022][T13695] ? __f_unlock_pos+0x19/0x20 [ 667.036753][T13695] ? __fget_files+0x359/0x520 [ 667.041622][T13695] ? do_dup2+0x4f0/0x4f0 [ 667.045879][T13695] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 667.052132][T13695] ? fput_many+0x12c/0x1a0 [ 667.056577][T13695] tomoyo_file_ioctl+0x23/0x30 [ 667.061358][T13695] security_file_ioctl+0x77/0xc0 [ 667.066313][T13695] ksys_ioctl+0x56/0x180 [ 667.070576][T13695] __x64_sys_ioctl+0x73/0xb0 [ 667.075182][T13695] do_syscall_64+0xfa/0x790 [ 667.079706][T13695] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.085704][T13695] RIP: 0033:0x45c449 [ 667.089606][T13695] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 667.109218][T13695] RSP: 002b:00007f6e2514ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.117643][T13695] RAX: ffffffffffffffda RBX: 00007f6e2514b6d4 RCX: 000000000045c449 [ 667.125724][T13695] RDX: 0000000020000080 RSI: 00000000c0306201 RDI: 0000000000000003 00:11:06 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x8, 0x0) 00:11:06 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000900)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, r2) ioctl$KVM_RUN(r1, 0xae80, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) request_key(&(0x7f00000000c0)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000180)='%eths0\'posix_acl_accesseth1lo,[ppp0v\x9b\xbe*(\xee', r3) 00:11:06 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x10, 0x0) [ 667.133704][T13695] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 667.134475][T13781] UBIFS error (pid: 13781): cannot open "ubifs", error -22 [ 667.141684][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 667.156858][T13695] R13: 0000000000000212 R14: 00000000004c3f57 R15: 0000000000000001 [ 667.190331][T13728] binder: 13694:13728 unknown command 1074160389 [ 667.204972][T13728] binder: 13694:13728 ioctl c0306201 20000080 returned -22 00:11:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056307400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 667.205584][T13785] UBIFS error (pid: 13785): cannot open "/dv/m[VAd0"", error -22 [ 667.235864][T13785] UBIFS error (pid: 13785): cannot open "/dv/m[VAd0"", error -22 [ 667.265520][T13695] binder: 13686:13695 unknown command 0 [ 667.317509][T13695] binder: 13686:13695 ioctl c0306201 20000080 returned -22 00:11:06 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0611e56da7cc590431aaae657023e269e3"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:06 executing program 2 (fault-call:6 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 667.372062][T13826] binder: 13814:13826 unknown command 1074225925 [ 667.400008][T13826] binder: 13814:13826 ioctl c0306201 20000080 returned -22 00:11:06 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x48, 0x0) 00:11:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056308400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:06 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) r2 = syz_open_dev$usbfs(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x521080) write$binfmt_misc(r2, &(0x7f00000000c0)={'syz0', "7df54b6d2bc85e54eeb0f186dbc6c35426cca6c1ff60b70fcaa72904a65c6872b3"}, 0x25) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) [ 667.405615][T13842] UBIFS error (pid: 13842): cannot open "ubifs", error -22 [ 667.665720][T13910] UBIFS error (pid: 13910): cannot open "mY1ep#i", error -22 [ 667.684558][T13911] UBIFS error (pid: 13911): cannot open "ubifs", error -22 [ 667.719895][T13915] FAULT_INJECTION: forcing a failure. [ 667.719895][T13915] name failslab, interval 1, probability 0, space 0, times 0 00:11:07 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmmsg(r1, &(0x7f0000007580)=[{{&(0x7f0000000200)=@l2tp={0x2, 0x0, @multicast2, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="d367c90d208973f8536d6d49d826bd907c2e7b3fc360d05b0dee276c59b04b", 0x1f}, {&(0x7f00000002c0)="d48d3315ec7273374661d1c1de202e3b93e85c34185d430dedc81730e880f9b67b3f28f5dbe437fea7dadbedba881f44f0f6c677b9ceb091312ec189e113ca9cb93fd28c45ec402dbf47e996c1c5b5ac7e0543de7e7c707295ee83339725f391c1601aed1678e06a", 0x68}, {&(0x7f0000000340)="fc0ecb1c54832cd7161b71f482bf2a3cd5e85f89f1c26c11be1c68d8fccb5750d3ccd380a944b132f1eefef04437a5a2cb3bf9bfbcf0ca9a00b3f8120a9ffa40bbc54d634b64aca68da04f3ccc6b28ff9a4f8a4e593267334e0e061e7ca4e3e23b0d7169bf6c2374f935b80e332f2d73b9", 0x71}], 0x3, &(0x7f0000000500)=[{0xd0, 0x108, 0x0, "b630d95d3b5418f6f74606fa0b16689434d6b73ad4c9bb28765b6fcc599095a78c5277a739ad44ca3456527c592c00dfad841f1ca02fdfb8cd2cf17057f8dac95b62d70cd4d8be1db77a6c34ed15c540e9ec33abed4eb53465975d74c6f1dc7e4b26e0c9e5514ebee96a5190806d81f30f2ee3081ec1a06072ceba0e28ef793179cae165d6dbb6f367a2866b761f497bee471758bc3975b5c1a8655d2662429ab527502d7492ff5b0911f7bfc33907403118a6ecca7143ad7b"}, {0xd8, 0x102, 0x5, "27e9e9bde8f0f530d5f1e89f8ca75c5da402e8b0d1c5ec9d3eeb05742eebdacc57a2a8e38ee291502d83cbefa4ada00f2fb9785f97b5a6a02563c03cd3db6589947ad98c34092ba0b2c5d027c9e60232ff4e474735a5b15023c19dca8232717956bc4c50fcba1b578d4a15f7ad1429adf188eaa694a8be4fd64ccc66d34ae8ff7b394147faa27a2e8b90e721e256a039f7df3ba2cb3e41ee64885b820f180faac3281ccaf4f8c668b881b51848d7fc71c7d54e26dbf2fe56c403b8b3e3c4d00c03"}], 0x1a8}}, {{&(0x7f0000000400)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @mcast2, 0x8}}, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)="002a6c7c3962330db894705c3e0964f8104b3f2d9657e300f0f84f29c8d96ba177ef48f15a3ddbd1955e51637efde61b7bab1d02de0ca8b65ca366fda46b28c1566cdda8db080e336dc59e6ac0c32be1946a4fa0a1adb8057f9647f5816de3b062bd10c9a7949e15a8f8e275a7a1835337ca56cf0adf99", 0x77}, {&(0x7f0000000740)="2209a1c87f6299abf4dc3251a05f8d08f381ccc104a4157fb82f09295eacc7bada8f4f371f5b4857ca08a2f308e47ffb93460378eb03e4c80a8c5e7e169181a1d71230fd754cf8329911453cf97bf1efb6e5cf497e8ce34440506792c149175da59a4fa3aa7519185b32457bb0f104", 0x6f}, {&(0x7f00000007c0)="e3edad32151222b6ae173e102cfe37a320b6863a1caa0f7087916b8069b5b0108a87efee2d348f04d9ad2924ea36e0963c08efb646cf35a97f26d85181e4077d0cd0f72d42d76216ab6865ca4ac6d71b45e3d3c2d16e12bf894982c8ffd791ad14fd2762370c2d85", 0x68}, {&(0x7f0000000480)="7175087ac6bbee37bee0f07361986171f20dc0c75f9b6d3854f31038d02808b7677889434836ce8b6c101fba4cff", 0x2e}, {&(0x7f0000000840)="655c167e6746ca68136a70e179713da5d3bcf3ce4d2463ac87a462497f36ad2a9b6b677b9f7ff098badf0c70a9c757c92153d7f9d097f3c59019d1352d1144e6b94b87d944304cbc942dd74a6268fd97457322285f2506cbdddffe5ca8f5ddd740c471ce47402c951cadc119821bc87c57d7e249675f26ee7a10b49ce439a826310e", 0x82}], 0x5, &(0x7f0000000980)=[{0xd8, 0x9f35c0962bf6fee4, 0x7fff, "0278cec0ba4daf0bb8212c556c922fdf3d330edc0803dd3ddd22c23400442a910465a8d88910065282cc9409fdc3ba9aa78b0f81cda742601ac78a6f3df4edf78f232e6daeb475278da38866e84146e605e664b8d020e6480a201d0ab87c6162ea5cea8f38070faf443b01930d04d94cc5c9ecc1451dea06172e229958a8962d25cb59bbea900721d5f0134cea88a4aa6a7227b4917905f717d74503f7383c2dc0e260e8e9832f5355cba9b40547dd00c104c87f9b53eb2b8fe7e8dc14c6d71456db5429a1c4"}, {0x18, 0x4, 0x10001, "a1a5911b54c1"}, {0x58, 0x10f, 0xffffffff, "78eb1de6c152630bb7849c131bfbcb2ac7082184d552648ef476fa2e8d58670bb6b95e9e0a38da924ff97194e82edc463ce2cd5d80b279f756385507b0b0352e2965cd8cc537431c"}, {0xf0, 0x11, 0x1, "2f303853e15f0b29381100a87456ad3f34b8f49da3a25c1ca862141166311de57da0c1bfd62d173fc99d3091cde246f2d9f65f30355187a652acfb73cf24139de432a519e0bb752aeeace3da719604b7786eb811f23e2d0276218519f919b2e438e3a2c837e6e88b38dd65682a4aed8841fc5521d822638e9bd2bcbcaf5589054cfe4d26c0fc4b4a33e8bce5493c706d5abb6f6c2da650d96a837bd9a89b48930742124d1051c1acdf8e3f34303d10f996f440f7ff5655f9565f2b6454229b50e4ee7eb517f32489bac9255fe285754fe266b4210ff9bcccc05c968bf0ad"}, {0x60, 0x0, 0x1, "56198ac6061c0baeb1159eac4895a51752d722782d8d060caf34ecec26be2c1941677cc96204f5edb60c49ce15be47f47a97fe1b6f77cf7b00ee06a3a85cc3897214f544f0a4642bc185a49ffcb4"}, {0x1010, 0x102, 0x400, "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"}, {0x1010, 0x10d, 0xfffff31f, "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"}, {0x10, 0x100, 0x5}, {0x98, 0x1, 0x8, "aa8383e860a33a8844d3430aaf3047a9c034d1ea2d46579d7bc1eb05f867b01be5006d4fce2c29433a3647a0f6823eba4fb51b36e6a4b54ae15be95c6a756231e91edfb31e2f97b793a366d3af05ccbb43cfd06f18499985272a7c0b0ed537c01af676ad2fd2386b7263fa60069404a405ce7869d1d1270689513053daadc85497"}, {0xe0, 0x103, 0x7fff, "f6c442084221e7f5c692d8ceb5ca9459660e1cb912b801c7a4cd913597efd1571f0e12a59d522fe39d93f698f51c77fc517355eabce752dc3c4a6c9e4519a79c238f4bd1777511cd5284f1ca9a735f5b802b7647ba81d90f945ec0c602d0ff3cc6f65d5f896c238b7fb0a4a2c35e62c32b1a4ae68c7a468aafeb06b315a60df4834c2987181e6ff8a696659324184e037bcfa036420a9f75bd57a08f2f6b3ecb5e58d91ae5f3862ae230d92423f683fd30c78447b04dc6502d4896e9a0014aa3ce1eaa6235fd2924db"}], 0x2440}}, {{&(0x7f0000002dc0)=@ipx={0x4, 0xd3, 0x5, "d640c20c9d40", 0x5}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002e40)="4ec37b97a2", 0x5}, {&(0x7f0000002e80)="5a7304f49e5a72d6fc392ba389b938a03c106de6d937a793ba1779c7f3d268f2cd589c50d6d2b33e63403b4bbf69ee0d1f7b291ae50c578758054d8728cef90c63e3e344483c9465e2222517bbaa3574ba7964ca4027107d7b0d119e5a2b6c0f941aebc2737f7e0c2f8d8c11d0f301af9f9bf8a2803c94e7f4d43c8f34fde196a8a49662735c5cfc650c18584e8e3ab5d3310f9c6c1f739277bd1d64e7eaa727dd5e3670e11d7b3a7d57fd05d727fdce824e656a08198adece27548ef44680fdd11408991e4a3fa003925addf0ae85ae4fd969831365b2c673ed0beffad0687d754fc82ee51d", 0xe6}, {&(0x7f0000002f80)="64bbd0c2d03cfa39a96f83324f88ca80a05201ad1195a844512c4af6bcaf432e91fdb2df42c8312414c3b910d440178c461a878de523ad036df98cc68d56d72b72aa1c2dc7816ebe899b6c2146eafdd7e86766c7ca77c444e0952091933c2abfc377b08289d48d1008e8b2bdb10e658de9ac77480e85e23d0e10955880c7be395d68d7f9a3f563d3d6222ee45b75459e075c42db644d67bebb540b5a820338b48509d37f055400a4ba4a34b4a23ff98f5ba50d75c58a8b28281bcc83befcb0dde45c637d8e86cab7292faee6f3eacebe6f21977936827df9f99520ece2281f3c8eee575ef38346f32f74910541d6be51a8341e3b5372b0c89abff6fe5af062b279a1209608c4ecc99fd6e14c55160363c4f7dfe810d4b8cad9e0b18dd1c446212130826cebdcf4011d6b123d7ce7927308b621a86340f9f8a95c7306d6256e602330bb88d789f1ccaed02f89efb1324e28f070aaf7b8821d0de900c6a46fedd417aa7404085ead0b8d690201a7988bed3b5b198331702f0014fc860c30880a9eb98d353080afc1f3aaf5eacd001382d6b3255ba96195c2bc6f27f9009799d885da521babca716de3e8d53a18b2095b3d010d31a27811b8e488ff92704808221cb57260b8aa3944058df25cf4943c78beee82b68eea9d1be5a3eba32d64ff1a5c4b80f28b7ae62119f19b165d80c91df3781e225440892beb8a91e7ee613e3bcb690083ac750845e1d8362c1571ed671fcfde890a3d2fa24b0010b8fec88f945b60cace07e5df56073044e8cb17b0936d76af24c9ece9ae090ab78a5c7c1dea24cde5a7d02d1190d3612d70d9b99d995b6b122b8bf154ff4094dcb64de7bd10960af8b341e7f2f12b8d901b504f6ff08d271958869ab0a3ff38d75fbeb1ebc71debed3a5c4c629543c3ce0d5b4d471450b9401a1a542db22fed36bb7723d73ff480d053222bcf544b58db483feb9571c0ed411ae6238eb54d780866ce54dcc91fb4b290bb770621c1cc3abc447eae950cc82cba6f3d8d775216224bdcbc5376d526c67b5a834d71f207d1cffea3a99e22b88e5c56d8e2a4dc6efdf69861b97da2fc4c9e28a9412ee635be46892d5bcd97707776483601316efda4baeb1222ca4c7b335c189108e7cb7baef6ace9964e037df843058963d94f9d5130caf437ed215ccd0e184c33dcde7d9cbccc323b6e9259ec21fa42ddda2a93572bcac91b4f12fd8ca83350de1d9e1776280b63eb21d48eeae1c315a0bdca0b3f1ded14959012bda98644638fb2c16b4a15dba5445ed0d30c959e9c455b3e9f37d5e380bba8388174c9f2a345f961001dc0ab29562667e5f17a4bdaaded613558a2edafd869896b62452345d19943b67b0a0e67dfca047ace35c12ba60736bd5347edcd894d4f9afd5d3b1eff80214700ef4bf03e2929fa8170ddf0460ae01901d267987b2f7875d43926c846c58cb2a915a9a1bcf77fb02eef17396225b7e5c82f8e915077820ad12f20827a07be6059984e278ae0b9ce32c146b6aded8bb71edc5aab03f29a846f83beebaa7ccbebb3aeb194112a66407e224ea2771e666f648a1e0a6e06d893dc98970288bfb361bf6d9db7313b1ff08696e663f2291eaed074f09bf746829f5df1c7a36ba7ed0ff40a359da70307c2e272722d1298bc78f6a691f990682cb67adcc3b02d18bd6c0f108e811917134aacffbb46a3868e3db66aa76839ed30609832623eccd97af251a8f25ca06590a3c3e9dfd4e8d0d11b163abcf92ffdb5f1b52b8124c0e9cb04cbae9435e2d9068fb517b169d12e6e58037813232f33aaf94da49bad449262bc6241bdfd0a3c1dba90ba5db57d933e9519776a856adcac3240ea661d5b23f1f1a20cae3d275c3fafc5406dadf9cd1de1ab3655a29e60067f4a8c4594279ff55d871d7f044926aa28e0c65ca09087ebc8e24b0f6a11b327b3dea6cc8fd15e5425b6eeb779d805764f0925cf9834f6bc581baa80bf827db7534d9e28ee4abda4cda47c5e86eafbc37ae2627a2a7cbb453e3fbffe6c8ac960d4d0fabfa609f0165834c2d9cc6723c218d8751ea08a57ab1597d9daaad12c149ff3df4f9964419e0565c1cd92890e7b1a425c4702fb96e4ba0f3ebd88edb2233a29074d6f86a93c1b30f2e00058ffd0c18754c8c780ff8802d9ae2f4fdd1a5a7a58a7bbf762322e8b18aea1694996199b74987f499aa6c7bb5f50f1966693a780ffb3ff2e4fc14ab9a027de4a506f577b6702150d2491e145388fd9378a76f73c0c005e6c2e1b151ed1f72693cbc75a88ef277d8c9e07b9f62feeb5fb34c29b7f62078ea2661d3994dd8bedcc62916456a2f6e02eb488441c55448007f05a10477f29a84aa0f35716f16ad20a9f3b4ce9149354d5dbd575c3a9ff276279847f33fea14e25a747a7f8edf0530f97f10adef71f9c36c570607be252cd47d240b69fb06f78a75f3eb86b8334910be6f01d9b36d94241c283f06e79565dc5d90badd80b0900b3aae9a5d9c445dc658cf47406ac9c345f07422132c2c1eb706984b64b9d4a04f5e03d6b981368304966f065077913ee5e7df16fe5f5bf17db5679f7b2ced6d74b221598186451ac91fcf7366b69df87e8ff21dc61f35c210d4705610da6e926d6f6ef95acf3ccc4bc119005ac54bd692f9b9c731897e41a55c775c1a82d8bd4c21e01c41b38edebbf37517c2b39bfbd0c36a4b2530b481157a90fc3a44009133b52a679e7290482a864300ad587ecd7a217bdd4024c460c706aa5bb96765a287b74d033fce02904718824ad60f95b41deac92108944fd5b65c3bfa4e885c3ae6d951995166a9acca54d498fc0c48008ac9d1c96d41603f413899d436a3a5ec78dff675094ead8dc47c19d86903b86347d6fef28e598c2b2672eecc945006b423e501e9b56f49b8e53932b9c8ec0bceb8f4c8b530372ed1201767b9058e6c9ad53a01bf6d5a6c352a1e9d294390f15d8d2e207cfa85721da9a441f316072b74e0d913b3d0c53d35d790d17c6e8616eb1a7d57ff26f5b231ca2d66c0a5e5410b5cc62c9278cc7384e63ece0113641acd56f68e5bc246b29835253dfd17cde39ee0ccd815e537aea9261c7008a2ba6561638cd34ebb277033c0c1e5b6d16d5e65805bd2cdca5fa73d9d838c52eabbef3e6c6832dc762eb9525383424a30f6788fea8fbe627ee1531cabef6271546df65f163f5d936ea5beaa1bd005d910fe96ccaa89ff432873ee80e934fd68658fe8f33a363752afa94123a56cc40d0853189acdbc517e815d6ebd1495838cac0649da207aeb0997da9c2e3609349cb4dfd38634bcd05f7d63803f9f8f29317c732280b70d69089702b03892bad97aba0430fc983bb88e093ee3386668fb925defca7175650b36dffce3e44c6fdc3636432656391e4411805d78b6c83933b738472426f32bed1ae1d4bde13a5dde492df0c18f8f88501fe207618bb7f4a8a4a3b5b6521ed2daae252af9cf7d966280d3015cd2c0d2862e0df7f3cbf4d9d2408c2d43f16f3a13145738a14c8a04ef96e5b3692b505c74849ff50d7555d89b14fddcf2494344cae393236268973cdbacb564ff3a1440a6fc15fefdd9206ee0a3219fbc10ee16673f77fcd4b5879390a6cfcb3260aa87396710a239984c27a79a0cae07368596ed5a02c1231509408fc215083130b382044c70418766731aa230a8fcd05e5016763d90dda2c17839536fe5125f9b60bd727257448084b4ac83327e627778c3972e36d7956a09ab55258ff264a3ee56774eb0a629b5c91d7f29a5124211ef4b01d38448af3e98de2ff23935a4e1f96104eb5a755e09e7ffd77721da1f5e5ebdbff55aa554150b2ff9f7beabdf2aa73b3286ab735260d1504f12d106e9fc674028c1bd13c029bde95baa7835cd3890b78bdc9bd0cacd978b5815f30b0080c021eeb846cb428d429a93c5b2d2e17bd3162b6ab01b41cc888507357e572ac662b6e78f52138622beab1615b2008ff54c7cc0e4219f2f2a723913f67b52af09aed8ed53af85da049d1b8e61e890852de1b643f95c3b65ddcf047bb1e4201b675760012562f22eeba33688f3b32f3fc97ae84f699ea18f5e8bf66591c8ffce0599d19800221ba86835e178b99b8596fd35351505bf9436428e9f3ee1d1963c3ed4694180e69b3247fbd2521bde74e5c8569c1b5140e7c8eede27f7616eac682598f6da0d826d25969ca2c94231361b1bf68a664e0e99889c8b641b9c55ae7640901c467966a85746ad313c8549243d403575943a421a9c86f1f71d12d2cf59f43bcc94a6ce609ebbf7e5699143f3cc90104871fe9a4e3cde35473338696899438aa5e0d98fdb15014a1ef788088fa3fd87354d159d5a174227887d6691ef547154869fd53b6a406bb48728badc2ecbda59fb5d71e3a4934f5a65b6a36fb582de713681279c8f9dce650bd01877492f457b98070d3b61e0081c02172c2542eb50b7914f8ee19b7644e61f870c6194223eb0110aff20c45530b45d9912c6398ccd72cc127f1870c75b5bcf2ef106d9c76ce2566d8df1282298cb067482b4db4544187d0248f21e8a8a57078b5746810c039656794c64c6edba4b49260bc093ad83df8db8ad2593f38237e099ab8eca5254a7176b071f905e20642c6ad1978b361c8b37491872f149255511e9565877a1535530a7ef1c2c7a76bbdf6c8b7b53522b4dc04dcc93fe63380e3f4ef1e43883408ecd3c9c4ce23be6619931c88ef27c0b4db006fa395d73c52b8322f59c6f17e538e0632ba60627d7f70c9d2bb5ecbf8bfc38a3944d3621d5d9ee2b7986412155e4ac913142ee5c26436c315e6f920f820c63276920b1949ea33227d93ca54837cd7885712e00b5f88dfa06026f009dd107ad64ba84fac8e25c42cf71a35b677e83c6c57eaa7e5e965fc781032112312edcf37bd0702013c5df43fa27a1f4a4c02c67d6a0fa816d1680cca95447148695d52e669b580d3f239bc3f2b1915790d2b8f48378316be6722166d26b31cb0926cdf89841a241d849f2b64849468d539ca8a6988a004bd0275d4c835802b0ad4a5a2f4e3a4c41b3071985119db1867f48b5b41e4c561c8afeac29db94a05a89235cc5369334a438e9279e2e8afccc32a180e1ea5904c5e475bc389605b4f65343a1cd87219c34b22fcd50add11f727ccfc47e374dd27a04672d1d2694d21f94bbfbd576210c67ffa6453af449de139f96c74978b4b337f3bc272098c9b881269cbe5d5db0eb6e7c7a7fa6a4e2312aeaf7cc552f585f183a234812e62f272629d8a504ee61fe484cc3923fd0085c4067bcc6e400b73250283fc7f6601f7a8d556c517be6c83c70c6532607d90ae8794346b6d01d875fad4de37134d6b8fb2e2513aedb639bf8f8b732415067e9450937fb8d2b769979c4eaa35077390d249bd17c09baff9a989ad6373ed8a3d9d90eb43390c37ba30139fc0e404f80e2316f0a4ed66e6133e059aec2ef45c56a6ef2bf303ab7cc463392c49d15927fb60622d8cde8ca0a6d4a5dfb3997a59eee8d6659b88459bc935e06bb6dff29dc193471adca90024acb3c45b202966c1f1add556013793861c313484e613f7703834c4a2edd56ce43b212370d2f3f5a163528d0665f8d2188f3c7034663870cc26acee0a6e7307fe96c9e80fe1411738c6c70587c0e85364631405a7e903fc38e4f9a6bd2641fee4d2168d6fedb61ffcf9cc4b2b512d4d6ed14d8f269444d3c1a381b864a5ae41b9a9282288f9a3640a67a04529cb8da644a1e1a578f16f9d25388fb863804ef090be6b99d8ac9e75a9edb01c", 0x1000}, {&(0x7f0000003f80)="3e05bea1c05a15703d82ceaee6fa48951f75ec3a0306d97d243011239c241c34359e6929fc6cbc039b1b1072568197d28c3096e980becc7435ddbb64369cf817481540ab92a8548861afd919f3ab0a3d7c28408d5011dd4e310c79dafa3ba538eae5e90e7b7446e2c7200bf755688bcd8afcba6674c3175ff5df1f04f8efbafbf31175877f6acc967c55fdb3b8c24181d04431538893303b424ede1ed4bb06b5567cdcbe692e81b3148085e8c150477e3fb6752994ff0b3cb241d5c633a0299bd989300696c8315fc0ab9782deb5f73703297c873457cd8faf21e4b52f", 0xdd}, {&(0x7f0000004080)="01373e9bacc5bd7bd1c7fdda03e3b31bdc8d64856571b1156d9dabfd95332fee8ffb04e46e1cd52b0577a09685725ad79caa8986ae258d75edce3155431a65b697f8ebe70fe23eecca90bfc406ed5e09ea6f5df9b56f90d10919af6106d53a6a89f6c832382bf4d3e7c6", 0x6a}, {&(0x7f0000004100)="4d5c93c641bfca58f61b42129e4c690436e516753758542d11f5e1473f2f8fcb9f", 0x21}, {&(0x7f0000004140)="fd23efa967a23b3f1dc6fa23496b374a4f60f493bd947087f140823284cd", 0x1e}], 0x7, &(0x7f0000004200)=[{0xe8, 0x102, 0x5, "18534a861d9a7a11bf3f7323d904e12538b16407da032fa11a8a58e875052d5b3ec288da055be7a9ae7a1203adea759a682075957f14aa537668bc260023fe258944adc94f9365edbc9a8f3e5cd6ced3c09edbe869970027aa8d06d4b3988f0261c4cb07803fa2692d4e75ae4d519751babc752ed3611291535cd3f427ff43ecc2d7a0a8456df718ac436a6037914fe9b9e8c9a76f40200e700885a2f6323105edd17a054e8b510272a6df2ef741a968c486242afb4862610ae4c9697dd576cc9ae12b9a9885e37f256d6659c5e04d32644dcc04"}, {0x70, 0x1, 0x0, "63cbb4e7d35eaa88261f5b666a3e5650901c7cbb1bf768e038e1b35f31ca4d4355771e2a9c165ddc4578c2bbbb65f6c884317f2291c7af5d28cb229c8da42f53dfdb60dde94eecc412ab15616d1f0880fc83c3c99012d7bfc2"}, {0xb8, 0x107, 0x7caf, "f49b2abe42ff387cfed7b6e7cac67d0e81e7ee80edd5d28c3af4a38ec754316446566a552c411b5439805053a9420abef5693668388b28ef2318caf2e4574eb70467a85a84bb93a0bf8122a1b90fa4d1c2f52b6f7ad21a821c477f519a53cadfaedbcdd32d835769f30c34e8a1ed5792b211b67424bb4ccba33f3f9cf475b326002dd07ee00fcee01e6bfc3ff4b8c745210b92a5b2e35428f636914dc90363fd7749813f98f259"}, {0x18, 0x108, 0x7, "81db8fec387457"}, {0x20, 0x119, 0x300000, "a7331990fd4877c57bbe6258"}], 0x248}}, {{&(0x7f0000004480)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f00000045c0)=[{&(0x7f0000004500)="68643806fe08b155dc187ed5e45ee3aa7a89ea084c10b3bb13b79cac3dcf7b20cc2e01da6137b45519013661f9245021f2576bb8038c0f025dc289eea3bad2ef093151e3188893a62df410afd76d5f2c54f3ce2e3594e871f5ae15b6208295be13db834766a59f18b07b3c391364bd80eb677ad7636257de1116abbcb79ee40a664f835e3737b0b1c6", 0x89}], 0x1, &(0x7f0000004600)=[{0xf0, 0x1, 0x2, "d5865bda0237eff8f66ef8b3a86d97341b3e05e9d2099d63f5f9fb112249153892812d51d436cd240a2ed4e09dfd353c3ab8d510131ae578e0ef79167173a41e85b98ac53ae98cdbd70a3a33183e491f0af3826e1a30b6016e761d16e121ed50911e54d510b0ee07cae258f01557e83b9ccb0ad538c3ae517596d73569c46870650c5b6b33902e472a97914ee8949072300e217ef5f2fccdebf8dbe72669bb9a1867b54acc83a44f9b6e4c8e6dc8944805d2bd18277fb728eb51129af901414053b642bb984002b649c00a3e41bbf2473ffdd262cd1d371d055888a3ed5a07"}], 0xf0}}, {{&(0x7f0000004700)=@sco={0x1f, @fixed={[], 0x11}}, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000004780)="104e27ba8e54ccd52dcd91e01e25319e9cd14469e4f47ecf725ee703b94a2bb29c", 0x21}, {&(0x7f00000047c0)="6f4949173abe6662006b84779012c12cb52de7dd5260da4d7ce1ec05e8e474f64f47ace8e3856ec02a68aa32a82a95362df7328acce150227feb59e70d1da4dd9910bfab278aabf15ad67e173ebae6d3f5400b6a92c908211a2110fe63a4f1cf5a040ad710b85a79f4ce427eed2960ba", 0x70}, {&(0x7f0000004840)="60da98673cb2f2a5a44ec5dd624bb1e3aa820bb69c114ebffb5af24df9ae63deaf018c1599ce0a240ee8645d81ecc660ea0bf0c5e53be673b0bbe52bc2e9b154b64aa0f709f39530cfc1907d9fe560c449f4468ecba50352b56f0f0aecb33dd287897e4f92bb7e1b0e14ec7d435624c49f10c0d4addb01ead8aafef2e18c7e5efe2710e51a73c45325af4ba8b2c81148719ea0947beb2a3fd9c75316d9052e5c249a82250c02191cffb3c92526ea36194f5829c33da55bf202b1a49c13da5aadfb6b", 0xc2}, {&(0x7f0000004940)="70db2ea9ead71be62534155e0d894330f8054634e9450c9dd3070972549521e00d99db68ea475849c8ee3b1c8ddcde40b39b4e61d29a7216d988d9eb740eed97b4aca35291080fd89ad45cd8d14e3d85c26b7c6adf3852b93956eb17c2c155d6a605d12e168aa84e682480f491227a652bec5ffa1f9952654ccf1e51ff62d9018107f148e97f947c377f88891f0f09686ffff19c0251bfc5c97cf1123289d600fbb425d0ab620cd7d8ab19b9aef339eaaa233466da9891cddfc571520dd9551db3adbf02002ab51acdde90f8f72852256d29070ebeef4d5efb891b87b25992dbbbe9fca1a7e58a34de5eb6ff12f5894e0e0ef7a783d3d028f832db212079f5c2cabc7c0251d85f2a68a62fdac8fc23dbcca17acb7a2f41ffdaa40488bdf58dfc7a24b8e32940b57ce61c1e4431bbf8224b91106c7aac740e77b0cc8e7d682a5b22a0a136454790c15d8670bd70e3ce17005edf4c7c273e3cd0cc5f29b92171bc711b538a878316ebcaf90213a26db2afac251d0fe8fc5d9d8f738f13be994495873bebc39e1168ac6957a62e095adccdcfc386df724939795ffadf6322864cbb5a14a34061e0b40b76ac26741ee825e84fbbaf7fc2f95bba3bb65a1a46c38d08f4cf321cca371a7e9440af7c43d3bf9104265e7be82ced9fcc2194db99ef3245ba9ef8c89e3b8e33bfc0d310cd412538de0d9f6bb1b2d23d72b1e6407e628745cc2a1d0b940017274cbcd1ece2f427d1c4b495270144baeba8c6a456ebad1796a01fc62a1623e109112315a22851707926bafd80374019bbaa4241b9c656c8fa3c6790c3369fd35e4591ff24b841a5cfb614a253dbe15a6b1b0b81dcff2d893ff32f07ca24970d6471e62b6cb2fd5269c2b84f3dcf9420e9f2d36b57a9c34dbf49878d07564146268cca901def9ddaf831d59dbd5d1027423542421a3df6f2907a731618e78121d44dbbd3b1b25f0c0e27d77e8379b49aee6162c4e93573becced20e9c5096b48c3dfbbabeb3dc029b9f554c952b61c9d664db291afdf1cd54099f56f47fa7ca9251e55abb4eba357a145ac3afa1a5e0058afb1d20599a44121ec04de4bcdbd89aae98b6b9434b84c32680090f7a425cef6edbe0edfc53812da7e83b79551b75e88ca38bf9c7f3dd384bfa82e851a6481dd922daac8fcbb2d2b63235ba466c175f819614253af4fa4d609330e139606c7cb9120b31f9dae046f8b3316f42b3a0cc2114be64ad9220856e06efa82f96597e708756ee96240f9cc8d7b9b797d8510070611179d12a1e6985059f407b4cb4fbdd658590d8519f9fc98d20ce305edd284c8a6ffb3fd0b0ef2ee5ac0933f26bdf2a1ade48dd2231c7d2a7a6106068f9f64e764766656e8236bf10b2fd2c26708d7366ece69858255b0f5e01767631ec906bdf3e19a0abbeaa5041fd4e19134f5081ffeb9cd3b375eb2b5e9ec9cdbcf697605d625f1edbf8c91dd9b83a1442977c46143a6b158c1c041029a1d5a2fbea362369c3b51b284ca1601ddff9fc13e562ba95f13598bb1838e23b870cdc0a997409d653d780922f30c39028f0c5638ffe7a900a1c1b537957100263fa314ad2e1488630d9514c47fc924205a1838e626b589b6a2d1f8f0b9a975a79810a5db6fa80a1d18973bd2b920868bfcd2ba9640bb4a48cbdef3da9c2200e11d2aa7872a944ed67d114f2ae9b0103b26e8c55f58ed8f4a82ffe0874a0121f524e52a4c8a2ed8cd1a978a258ddf357ab7309b2779913853bb1f2aa4a76cf27e138613088e94a2c68bbe07607a8686929e74788b61ff49000e1e91fc4b65181a37bb63b30843c3f2af6b2c4746858a346c655075bdcbd9c9bf5b64ac8b7ab1c6618c0c8dec57800c2fe372827ab695cbedd477cc25f015c84c1a6e88c5630b7025f91c6a6474815513fefce353c83a5db38b2bc00147f26f6bd71c4b43df10174d5ccae0e3e8731494d579026afd72911ee3c8e2a41bd39642d3ce269ffd4cdbb6accf976ef1ed4853210fcb757951a42cb27526b802d5b5e6145268fe1c43e23062942f8f5a1c8d9b7a2d97b1a6560ff5b4316f53bbb502f51bbf549a75e3272f5123d1226a3876945b22e9dd2b701b781e4bc23493a446b67cd784f11b5ad1f435b6ac2e7fa350f0cdc1103df8c6e786c75163c664edfbd410d8005c13599375a3624a0f29a549b30b2a9fee3abfd9ad76e120a5aaf1a87f828f48c47100eb3b72f4efdaa42f4f2f164388177d86e19924f4146423c64e76b565c8337096ac3350f241d3e3e4f76256d6582dca82df52b62d117383733a224e365a9608b127fa8e5a9437071d17615896a9dc207b93b9928642a5442c19c6ed973a436c988fec4ea26c45dbb80ee8f558983ca0db4c7b78eb25c2185001a1ded392599831c271ed5b0c675568132def364674381fd3ef879b9416385abd4e51b2c209b2cc95b209625f84db1ec29709e03e1dbe953d3f67374986ab21db478d4bdb9253d3082c1df9ba6b3fb1bcdef14f91a578a657a3aecbf66779c86e2ee3a85d333dd9e3112d4f7bf8153b6b0d243bc1b06d4f7f7b3a03bb389f742849949374a10f30e3bed8c36c4f7d770b3f0aa71c27faebb71cd69a6d8112f8ea6e5abaeaf50afc9968ad2c82a906ea510d7d15e04fba023521abdb54411de3f215f45222bd45e5ba9bb6693655377622a54f967cdf203c1e8c4b03185f10d1dd72c50421248ee7dd20c51f729925515cfc387011f0d9378563641bc75d5aa30529577d1efb4711004597e34f9a436d64009dc1265b94f6e44d9cae5d545ac5d3ea4a3a7a2685506d30b9677e7d894def93c8531cc07b43eb797bec067b5772609666307f3c6a9a4cea0efea63b74f474fc5758c054e3f700bba144b2bd40f497d0305a4eaee95bd6b938dd5b51830663e95b7b59038a4dcf97439ca237ad173086cd79d53794957ed19e0c2625711508836c7d71a0112ba802099bf800f4c42e87178f993782cbe0ecd282c8ed2462e8b8306bf8e3bbf18261ba10f3e79602be62e57e72f4a94d78d983f6eb7ee66696fe4093415c7d1f93317dd70ee046dff5a434985beee00b7790813addbd8e6001f3b54e1c9faa70810114da84965f74c7126201a38186866bd656a5efaa4251065bffafaae87e2763b773a856d20d7d8fb336f8582f0dbbf072a831e5647171262c80f3179ba1180900b6fc0dc3aaa313dd2a029788580a2f3a1ce831e233655a55eefe6c1f18b615c4d534c1be8b769653d0eab25886a569ed17aeac07255421860777ce86cebc4b5d55ccf493ab4155b59b1e840bd02000d8faa2207e5570af3a660b9694ccd2d5e609e893d2474c5d95cf4710c5731957c5fcc40637b1b0a21fd7a93411ded96f8eb8c9e942b59390cb608d9e36bd9e03b0b036080822010fe39ea72fdf4329c9b3dd3e2e8bf20fb02b91b534518c60dd6cf5ea268c58511f004b51c055d997274e2aefbcf0b579ce5baea043269b44d82e2e97838b80b182442742505e84bca717b1aae70c8e3467faae216df0ce39c31921aafe8d482f23de49b3d8786c2b483b76c090f6364fe4ec31a218a5837f39cf1f29953314079f4c4d3cf370c0de6e9455e4458c85388fb2d20cfab43019fcaca724ce052bf0763315f746464e6af3059b740206cdf93e6bc1829d53d73bec04c5d34a7ee19bd41e09b7dfff4fbc997bc5011d77f0b606156ae648012f19bce4e5af2308c6bc49b5ee8f9cf3bd73d5f909ae81472c4981d37925581d6db493a76c141a6d49197cec47ba9128838c36464c536db6205388dc5c74dec375c2fa68c003649fa0fa921ca80255467c3563e707edea1b5186d9378fe4894220b984fad0f3dde1529d31fec6a683fe171da5933f217e1a8d3f1467c39a36f9abfc952b0d9d29ce732532a78df07eea0f616b40f0308b456d3ed45876a4a1b884e4bcca76547e1f5637439a3a4d41c31504804ea9a4bff5a8db19014ef1be7af62cb4c539448e87dd8b948e617df479dc94d07055fef7db83bba3ad2c6d2653013fdd9c3681d97377f425bf5fd81d3f6ce03ba201d396f421f578ff20a040370a7ff6b663f7e351dd4b0bf514d70661b845dd9118a76eaf7e5c0f199fa0e822992660eca7b5b6a79b4dd0884a48ac26d9b812e87460a8c6ae9ecf180bcbc66248836531e86dd1c227cf8defe8f308ab954aa8045053d5acebfe906164b8c7c960d4fa5fac0e259ccbf3a6b0e1c3f6671c8f483dc3ba369374e369928c65dd409d1acd56c9472aa01c9c22b20ff27a792274b0726a3c281bdd2350c45cc2410a4bedcd602a17bce3978d3f20a936f97b4fab32e7ba334433982592f13a7d74dc07ee32afe52d2f3fa62a2041449e4f43369e43667021511cbc448543b0cf6dc3b29faef11b548b400ba799ed6104e5927f4a7b535dc7770fc35ce05661787ea0bea6af5bcb9606abfbc141c63b1311011679134c9aa983688a6cfdde010f8c367ab4f284b6e6ac999ff4902410e5e7378d8c2cfc61a9bb83a0dab9920be89c8361c5bcd8bcbede896182bcd8d0eacb151ee2ff2a3206e5c2782ee5f8d531f538c4512e8db4745b9c6834b37ff100ac853d35cd040d2d5551e64cc720d639e0631bb037b451dd277fadf1d0b04c1e8d60ccd4611aa936fe4af3a4797f26eeb5ef3b1ddc7075cfdcc9166f40f8c7b209be3faed5d54d15320d6970c4ce0533791a35d4a603db971497d0ca245898be7c8cfaac8171d06347bc7ebb92e3db7a98fb40cbca510499efc441eeec13332eba7c241de09f22a699f97ee0ff109103bc69763b14f2a7dbe6ce4706f61ba4a33b94a53ff459ff8a8cae8614c390b8fa8d082dca3e4d91293060f31efb5f5bf68868cb4a254783adc22f5443a2bc923739e9766b28627d3b1d3378c699196a282709649d68beab53b3007eda82dd791022d694159963211558c20d8423f9d0db92ad7da2e346342223d9f9774e5220d92345ab9e2275b9c4d5f19fb6d511688260ba1b2e99ab15f9a4d51e7c0adb7c1280d6e4320549877bf9251a819361732f9a4a39e4222dc44b7bc7c7a7d1a4b18f7c69933a0e81e373b2fe010f21a692fb9a96aa7d1269bd112b897a3a5db1bd75ff19a6c8024ab9fb036459a16ea1d555f4bb70f03d348d2cb4cce892b349d67538066af27e0bb7de893087be00a9478b7e0c15a922ce25ec0e7ff4d9f7319918804282d8eed9862fca33d9a755072e073dc4a67031ae6ee245eda57961ab2fc9b93b077a3c409c0eedced6ee3003c078cab833f2bf862af54be090591dfb91e8c9e6af13f83354b2feaec1c0a0bef18a11384fa761330ca57de22f0b6324085c120c626f27992de1bcc3ce899c5f380710b1d2d79a831e754875cb5848e1f90505c27fd806556af3830558db55dac547289eb9e35c37506c3d7253ff7a699268685e9c6872d6a11fe8e3fc7b26c2a55e14b99e613e1baf39c4984bc830f7df735fb646e1326447e590d87b4aeaaacf4bd6cbed08e2ac81b845f709d22094908a4430d94c60b30469f6ca3b288b7afcdf3378b53fc7cc20e9ecf3a14b8c05dcc0a6b4e0bbacfe663a83df4a183290ef15a47aee044abf3dceeb48ee6b8a3182c7027d8f71c235485da787db918c95d9e946dd59e7195ee635086caed6ffc2067ce140f348e4666110c392e68774c19ecc7d6f25a46df8bee16085c3845058b87f923e038df5f25c3d0571002b6abf1a91c4dd5787b7aa47f011110670462e9771f0871cfb3a17bf3ca9c03c6571b309210e695fe796b2a91df401e0dab8ceeae71ebdb4", 0x1000}, {&(0x7f0000005940)="4da82f4af677f94a442515e5017faea7f9c5f9e15b4bce469cc9a4bf57c1d6f8e0842a634f21da9879402d7ae4df8d475eebbaae55852567bc5022bafef3516a277bdd60789d3493c42ad57e14fb7a24ff7f31bd720dcc3c097848c7b3c3c0ab3fd3e8ed03c3f21f0176565031f3256a0f91c3fd19a7caef06ee2f4b43f1", 0x7e}, {&(0x7f00000059c0)="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", 0x1000}, {&(0x7f00000069c0)="865bba0606860e81a14e9e", 0xb}, {&(0x7f0000006a00)="e9c48ed69862f8c07acb4cfbc505390bce1c591d58e07759690e2bd15fe5ea636a36741c53fb5e9deb250bdca4114124a50630df2adb8d3bbc4af5efcec40d7d8c3665bf42b0af93888b4fdf6cc86bb92697737e71d213f30c7a54591b456ccc699e83376cfe72912b1898f887cf48d468f82276cbf222d047636d98627e4d8438d26d129ce64796a396339ea0240e9bc57ff0175551f801fe8ca47f67075f91e86a4ad058a78bff9237b227e33e51c390610332d793a6257277b20c7a500e900e503c42bcdda988300106c98c8b7e7b32230797", 0xd4}, {&(0x7f0000006b00)="98cd9a34a6659bf34a15318e91eb705f804367ad78fa386bd922ff61ad7224ea00c0a3e4d1b2ec20fcc366b13da46ec58678f0d688c00b5825d1c6f6e4d1b42c2eea503426d93cafa026dac6377e049b227d24c8d26f5158630b94a6efacc77725a12185735428d7a77d879cdd13b7016c9603c59adbb7be8b9e0b7dd3a3ddcb81e9d35783ec82056e9d0af9db2374a8df1063eba6df4c", 0x97}], 0x9, &(0x7f0000006c80)=[{0x110, 0x10a, 0xfffc0000, "ae6db16ff64e6b5aab5fb456458fa7aa048c3531b63f9f4f2f86506a6c4021c4d9239708b8123c58565972d36b0c190fe747bef079ef092027dd17fe2fc9f057c6f66d762675a1a3eca3910ec295c8e1ee554467b51d47cd33a3cf0f169edcd1f84527933bfc3e5dff8d4d214c8b9ef437becc10946508d33026fa5d50d4d4581f50073f818dea7b99baef57de7f8a90e707ddb52c7a2496c9d3dc79a0a1fc24a50d9fff6f8f797b66bf9330ce736677b37f9b9e542a479f64e7ce0570a30aa0826c541746c8ac518c239fea0318c9b290b304e257e31a3e0fed3752631f438ca7502de215369b9e454c35cf1c89258dd48af62851bb9bce12"}], 0x110}}, {{0x0, 0x0, &(0x7f0000007240)=[{&(0x7f0000006dc0)="af3e136af2f45691d6367a7bc4d61ed4b49eb59e909ad1dba616f554a325099c25373bf2f47367ef33d7bad530d635abdaea719615798a263065d0aecbefb178e57985cbf55d77629b4c40760f85ff11c4bfbf18e342189771eb4f112a7040e34c19c0c357039b64de70cad76eaf3aad779678353ee88df43f5b8c32cc8953eb30dda1099d683bf1086667d822418f2597e881533a1714330fee106cfbd22e8d1b9f384420710a23adc7cbd9a5062c1f7856c814360e9f26124901f439966a66b18ce50e2d89c589c8e2", 0xca}, {&(0x7f0000006ec0)="ffa80fe4c281cd01896ab2ad112f07709def38c675f6654187c6a9a1b700c3bf126f77695d6e4711b4ca62ca8896805ba85838c6b3ae512ea75657be4b37b60da49de42dbbd2", 0x46}, {&(0x7f0000006f40)="bcceb7775800ee18fef67c3126527ba452d3473c1abbef7fdcc828c342b9c6975132701cab12591d593b1978f56b7238ee330540b1c8bc55ab3b8455db4e27262895c2b70b347283a115f9c032702f0e31ad7242d09fa656b918ebe8d94ff27a97a2eb9465c13443aed0ff879a2d80ed5125e64b99ce5f9dd8a263d2779b92828d725c18e67d6507eb31e6ec8d56f87aafb8b71fb37f1f2f919a107b71e3", 0x9e}, {&(0x7f0000007000)="d7575096daef44e2fd18bd7e5c4f324cfd26a0962240c5345f9e7059f6a2929298baeedd29e51bd3012f34cac14e8e73e54c680187e5f0288020ce53ac92bbac5d7274937a64610f931d76fc6db6a12d46c98a1bc64fcf0fd0ec454f4ca658eef5bba51a3c26b1ae3d67990fe9ff224b0e5ada17430306e2b087303609aa5fbe90e235746c1e0ec3697079f025cefc33ef78bd527a2fe242e60fa46f1dbd2dd4bc45f37cfd07e175ebc36846401c7db96cf93286f848a275ca", 0xb9}, {&(0x7f00000070c0)="01cae00c5389372443cb60563d2224cc4365e286d6c24f3af20b785aabe9f93143fa7777554b1c47994f4f5188dd584391f0faef0da9585c8ceb07fdf6a5aca6393a93462aa26fc5aa8f7074e72a3c353ba295a398482127058a2af15a9490f2bd44dd278b58b2d262ac94b0643c4079f75ede839bfe22c6ff6b74406beab08805d863c283d35cd4fd59147e441f5812741e9cde59243e4d3980918187eae68b327b56c7408fca7e555cb936c05dd2547cd66be2b6d8873a603ccfc09200e96711736ad4f91f8ae188e1f33fa9257d96", 0xd0}, {&(0x7f00000071c0)="085f48e2f9337e8e862dc6dec102d9995efd770e3eae23881b099abef59dc4138492087ca989a1a5c6a3a695229fdfd84b70e3523375114698f2fcbec94ca61cb35490a3f313c3a8287e0065dd92dbb615f7f36e61940f64b37324de64a37ce8aa7d9613d89d458bd4a7632c7f6ab985bd", 0x71}], 0x6, &(0x7f00000072c0)=[{0xc8, 0x117, 0x5, "6ae70588fa42151c63a85b5dc1792eafd2458037fd09556ab45b2979f4c211e00e6ac373242612703b4ef882dcd8d3fb84d13b9b817b88ceeb9d5b2df940a902b4911be237537c038ef424fab502f80bb2d77436aabb193d7d638f99446842db65c853eee025edbf1a9118d430b6c8f70e68049ca5b5b1207c10d0efc7cbaab69fe65021612112c7780a735f77782a28333dce7bd3db5c5e948e21a4a4c34b77a307df278793d58d7e3258084fea0b9bf5b2093f38"}, {0xd8, 0x102, 0x10000, "2be6a54afb95367bf4f61f2232c773ac64ad968a04101122871198f8f18aac8e0ea68db445e89177524bc31793fc21d150a5f0701211e07fbb76970faa6d9be772f1b6d99fd61382a4cc9834f918a595773b8fc01f86e07cb9e57e818dbc9492581c438738fc61e30e07137226050b5886c00e8f6cc062bf8dd6d6da206ac3f673dfe4f4dd0874d6e89301d9a079e395fbbbbe51fcfd0b7403db4f37eb3d9aa1566fbc57d1c0a3686fbd232a372587b88d54aca1b3889954cbf65515a9ae27d692"}, {0xd0, 0x104, 0x7, "a04fd083196269237d361e6cdcf74e92b789ed48c51296f3b92114ddef16150b8a2ff5c7cd6b476ef206e93247b4f2b5daa366e107d769e2c77383f59ffbe3e417a5c6f28b962506302c83772aba9e1c9db8aa58e4b4c4f57884388fa0a9b4d776b9f36445ec0c1d9cf3f40c19935ce5820d30c03456e3ad6d1a9cb285465e1c2d31494d7432e3d5090c14e8591b96c857fd46bec249cccc33b3334a88a438e6e35f1f974ba74f0fb1e9cc0bc597812bf1d6ca81f40203562268"}, {0x38, 0x107, 0x2, "49b31af8c2bfbd3676d7a6bb17b455e4cb9b84b600661861b4cf619cc8669b10e0218e"}], 0x2a8}}], 0x6, 0x8001) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r2, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) accept4$netrom(r2, &(0x7f0000000040)={{0x3, @null}, [@remote, @netrom, @null, @rose, @netrom, @null, @netrom, @null]}, &(0x7f00000000c0)=0x48, 0x80800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$cgroup_type(r4, &(0x7f0000000140)='threaded\x00', 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r7, @in={{0x2, 0x4e23, @multicast2}}, [0x32, 0xc6, 0x5, 0x1, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0x6, 0x67, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r7, @in6={{0xa, 0x4e23, 0x80000001, @loopback, 0x2}}, 0xfffffffd, 0x7, 0x20, 0x5, 0x4, 0x4, 0x7}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000007800)={r7, 0x6, 0x48d}, 0x8) r8 = dup(r5) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(r8, &(0x7f00000077c0)={&(0x7f0000007700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000007780)={&(0x7f0000007740)={0x28, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) [ 667.760667][T13911] UBIFS error (pid: 13911): cannot open "ubifs", error -22 [ 667.764932][T13916] binder: 13912:13916 unknown command 1074291461 00:11:07 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="f9afc0"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file1\x00', 0x8, 0x3) 00:11:07 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x4c, 0x0) [ 667.815200][T13916] binder: 13912:13916 ioctl c0306201 20000080 returned -22 [ 667.914984][T13915] CPU: 1 PID: 13915 Comm: syz-executor.2 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 667.925002][T13915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.935070][T13915] Call Trace: [ 667.938391][T13915] dump_stack+0x197/0x210 [ 667.942758][T13915] should_fail.cold+0x5/0xf [ 667.947290][T13915] ? setup_fault_attr+0x1f0/0x1f0 [ 667.952357][T13915] ? ___might_sleep+0x163/0x2c0 [ 667.957348][T13915] __should_failslab+0xb7/0x100 [ 667.962225][T13915] should_failslab+0x9/0x14 [ 667.966754][T13915] __kmalloc+0x2e0/0x770 [ 667.971027][T13915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 667.977414][T13915] ? d_absolute_path+0x11b/0x170 [ 667.982358][T13915] ? __d_path+0x140/0x140 [ 667.986703][T13915] ? tomoyo_encode2.part.0+0xf5/0x400 [ 667.992113][T13915] tomoyo_encode2.part.0+0xf5/0x400 [ 667.997347][T13915] tomoyo_encode+0x2b/0x50 [ 668.001800][T13915] tomoyo_realpath_from_path+0x19c/0x660 [ 668.007468][T13915] tomoyo_path_number_perm+0x1dd/0x520 [ 668.012928][T13915] ? tomoyo_path_number_perm+0x193/0x520 [ 668.018585][T13915] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 668.024411][T13915] ? __f_unlock_pos+0x19/0x20 [ 668.029175][T13915] ? __fget_files+0x359/0x520 [ 668.033886][T13915] ? do_dup2+0x4f0/0x4f0 [ 668.038155][T13915] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 668.044590][T13915] ? fput_many+0x12c/0x1a0 [ 668.049031][T13915] tomoyo_file_ioctl+0x23/0x30 [ 668.054544][T13915] security_file_ioctl+0x77/0xc0 [ 668.059504][T13915] ksys_ioctl+0x56/0x180 [ 668.063764][T13915] __x64_sys_ioctl+0x73/0xb0 [ 668.068384][T13915] do_syscall_64+0xfa/0x790 [ 668.072913][T13915] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.078824][T13915] RIP: 0033:0x45c449 [ 668.082730][T13915] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 668.102608][T13915] RSP: 002b:00007f6e2514ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 00:11:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2(&(0x7f0000000080), 0x400) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x15c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x110, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40010}, 0x90) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630c400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 668.111914][T13915] RAX: ffffffffffffffda RBX: 00007f6e2514b6d4 RCX: 000000000045c449 [ 668.119906][T13915] RDX: 0000000020000080 RSI: 00000000c0306201 RDI: 0000000000000003 [ 668.127905][T13915] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 668.135898][T13915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 668.143889][T13915] R13: 0000000000000212 R14: 00000000004c3f57 R15: 0000000000000002 00:11:07 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x68, 0x0) [ 668.200155][T13930] UBIFS error (pid: 13930): cannot open "ubifs", error -22 00:11:07 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20}, 0x40000, 0x0, 0x2000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r1, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x128, 0x1403, 0x300, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_batadv\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x240400c4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x204100) ioctl$SIOCGIFHWADDR(r7, 0x8927, &(0x7f0000000140)) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r6, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) 00:11:07 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6c, 0x0) [ 668.259412][T13933] UBIFS error (pid: 13933): cannot open "", error -22 [ 668.367492][T13933] UBIFS error (pid: 13933): cannot open "", error -22 [ 668.412568][T13956] binder: 13938:13956 unknown command 1074553605 [ 668.485799][T13956] binder: 13938:13956 ioctl c0306201 20000080 returned -22 [ 668.609405][T13915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 668.616467][T13915] binder: 13903:13915 unknown command 0 [ 668.622219][T13915] binder: 13903:13915 ioctl c0306201 20000080 returned -22 00:11:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:07 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fstatfs(r1, &(0x7f0000000140)=""/204) 00:11:07 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x74, 0x0) 00:11:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056310400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) read$snddsp(r3, &(0x7f0000000180)=""/4096, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:07 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 668.809924][T14069] binder: 14066:14069 unknown command 1074815749 00:11:08 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7a, 0x0) 00:11:08 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="5fdfeb7c6f0c3c7581bbe7ede35776d5626125c01d8593cf7bb21aa5be620355e204c60d50439245df1bd24614cf6a4b927a91067eac6a7c126244515767b65b271d3e11e079c91fd4082aa9e646049ea2c59e7da6a30d08475552453293271500a472a864b1527603f996b9463e404b36475ea5367ab451d0d7faf3ce5c15a3e319e7ce8f98c943a125c03a3ce6b42b3b245f6901bc8b036ce0e1a479b0a693bae4c4bd562e44e95c0eeed8ea6831c1b4bd8b7e5d6dbe6190d4e7f6de49f2705d5ba35244f6add4db117afe88f8055025cad667ae9c4894"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x1a9d874, 0x0) [ 668.853893][T14069] binder: 14066:14069 ioctl c0306201 20000080 returned -22 00:11:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056312400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:08 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = getpgrp(r1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x52002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40800, 0x0, 0x0, 0x1, 0x0, 0xd1}, r2, 0x0, 0xffffffffffffffff, 0xd) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r3, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r7}, 0x14) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r7, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={&(0x7f0000000500)="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", &(0x7f0000000240)=""/203, &(0x7f0000000340)="0a1cb8927df9cd9e5eda73ce750dedb51232f28fdf935a851b77087bd1799d6cf50299cd7febb98dd6840ea403c8684e41db6af2d029b1cf84a109ebbdd88dc287a1126a1da4670d0e81ad5bf9a8", &(0x7f00000003c0)="d8d159216cd0f472981b10931740288f3360f6f970e68afc373be33be314472727c00fc3fdd668148fc36d37b69abb9683a323b19df6cf78be3c48d577e37041bb7f2c35d46c0ce3ca3dff22ed95b18bae5c30e5ffe6c3a7ed6b9b79be579613566f48269ebc8d54053bf771fb5ce0f37436dfa562f901f89f37bfa61081891f4a9e43424bcda00af5ab9d986b3641f592ef34af668ef08257357ddd800e7576e6", 0x9, r3, 0x4}, 0x38) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r8, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 669.004797][T14076] binder: 14073:14076 unknown command 0 [ 669.041970][T14076] binder: 14073:14076 ioctl c0306201 20000080 returned -22 00:11:08 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf0, 0x0) 00:11:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:08 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 669.163161][T14149] binder: 14148:14149 unknown command 1074946821 [ 669.184249][T14149] binder: 14148:14149 ioctl c0306201 20000080 returned -22 00:11:08 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7f72) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304020000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:08 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) fcntl$lock(r4, 0x24, &(0x7f0000000200)={0x1, 0x2, 0x5, 0x4, r7}) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000040)=0x4, 0x4) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x101800, 0x0) 00:11:08 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x300, 0x0) 00:11:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:08 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x190) r3 = dup(r0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000500)='./file0\x00', &(0x7f00000004c0)='fuse\x00', 0x2820c30, 0x0) [ 669.446921][T14202] UBIFS error (pid: 14202): cannot open "", error -22 [ 669.600553][T14207] binder: 14205:14207 unknown command 33841925 [ 669.632196][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 669.632211][ T27] audit: type=1804 audit(668.869:536): pid=14231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/461/bus" dev="sda1" ino=16557 res=1 [ 669.695213][T14207] binder: 14205:14207 ioctl c0306201 20000080 returned -22 00:11:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400200000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:09 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x500, 0x0) [ 669.710079][T14290] UBIFS error (pid: 14290): cannot open "ubifs", error -22 [ 669.745158][T14314] binder: 14238:14314 ioctl 10 20000080 returned -22 [ 669.762400][ T27] audit: type=1804 audit(668.959:537): pid=14231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/461/bus" dev="sda1" ino=16557 res=1 00:11:09 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @sack_perm], 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) epoll_wait(r3, &(0x7f0000000080)=[{}, {}, {}, {}, {}], 0x5, 0x2) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x101ff, 0x0, &(0x7f0000738000/0x2000)=nil}) 00:11:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c00, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:09 executing program 4: r0 = socket$caif_stream(0x25, 0x1, 0x3) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r5 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r8}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r11 = fcntl$dupfd(r5, 0x406, r10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x148, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_OURS={0x84, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "b183cb02ec8cad533fe1d8b74ce183177085b862ec431837b288eb177d142a653db87e327b5cbb07a9c843d2595b3d18d626b8ab58076522da0181dfa1e940f4d39a9b8784f86ee8675605171e81c3d9c991b29e69fa40e41d2df7b4991e29"}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}, @ETHTOOL_A_LINKMODES_OURS={0xa0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x64, 0x5, "d7a592adcb4449d6cb3ae186269b3e75c936cd442e4c88df26b23d2c333291f8ee22544f44477643e3aad3b03425cdea4e1e0873ed53ae047cd6a36612dba2b898cfb9f04ae9b29285aba9e5ef5b15f5ec1c3de4482d548c388057dc07126a38"}, @ETHTOOL_A_BITSET_VALUE={0x35, 0x4, "f34dd165abc6d3b208c57798abd94af034215a49e49188ddfae053ff9aea90c0b926086faac94f7ad5cdb7f056db079758"}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x144, r4, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x25}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x20004010) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x10) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, "829148fe28cecc4c", "e47f16591ae9b97ae92d84eed850cf315da0c8d4c2b76ea9032c0da220123811", "942c59f1", "0c5a3d1653a1146f"}, 0x38) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 669.924284][ T27] audit: type=1804 audit(668.959:538): pid=14231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/461/bus" dev="sda1" ino=16557 res=1 [ 670.073172][T14343] binder: 14338:14343 unknown command 0 [ 670.076471][T14345] UBIFS error (pid: 14345): cannot open "ubifs", error -22 [ 670.082140][T14344] UBIFS error (pid: 14344): cannot open "wg0", error -22 [ 670.110822][T14343] binder: 14338:14343 ioctl c0306201 20000080 returned -22 [ 670.130384][ T27] audit: type=1804 audit(668.979:539): pid=14231 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/461/bus" dev="sda1" ino=16557 res=1 00:11:09 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x600, 0x0) [ 670.173934][T14356] binder: 14351:14356 ioctl 4c00 20000080 returned -22 00:11:09 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000140)) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="74fdebcc73b9066cb9"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 670.257792][ T27] audit: type=1804 audit(669.429:540): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/462/bus" dev="sda1" ino=17193 res=1 00:11:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400300000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:09 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp, 0x8c40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 670.333904][T14364] UBIFS error (pid: 14364): cannot open "ubifs", error -22 [ 670.423521][ T27] audit: type=1804 audit(669.439:541): pid=14353 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/462/bus" dev="sda1" ino=17193 res=1 00:11:09 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x700, 0x0) [ 670.507025][T14432] binder: 14393:14432 unknown command 0 [ 670.512728][T14432] binder: 14393:14432 ioctl c0306201 20000080 returned -22 [ 670.536896][T14447] binder: 14401:14447 ioctl 4c01 20000080 returned -22 00:11:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400400000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 670.583745][T14455] UBIFS error (pid: 14455): cannot open "tsl", error -22 [ 670.614919][ T27] audit: type=1804 audit(669.449:542): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/462/bus" dev="sda1" ino=17193 res=1 [ 670.629075][T14455] UBIFS error (pid: 14455): cannot open "tsl", error -22 [ 670.745227][ T27] audit: type=1804 audit(669.469:543): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/462/bus" dev="sda1" ino=17193 res=1 00:11:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="00042dbd7000fcdbdf2502000000050004000200000014000700fe8800000000000000000000000001011400090000000000000000000000000000000001050003008700000008000800e0000001"], 0x54}, 0x1, 0x0, 0x0, 0x24008800}, 0x40) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) r3 = semget(0x3, 0x2, 0x2c) semctl$IPC_RMID(r3, 0x0, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:10 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt(r1, 0x1, 0x6, &(0x7f0000000200)=""/66, &(0x7f0000000280)=0x42) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:10 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x1020, 0x0) [ 670.870388][T14614] binder: 14560:14614 ioctl 541b 20000080 returned -22 [ 670.878267][T14616] binder: 14568:14616 unknown command 0 [ 670.918417][T14616] binder: 14568:14616 ioctl c0306201 20000080 returned -22 00:11:10 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000007c0)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) sendmsg(r2, &(0x7f0000000780)={&(0x7f00000003c0)=@can={0x1d, r6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000500)="111f7d2e5adc0dad060c0b3b0f849e0e8ac37ee6b1f73477727b1871014fe416ff27f0fe44af2432463da75f750bc481672367b2bb59c9b79cea7960b1fe4588c0bfb744cfe720c1895825cd9f636367250a0856427b1a06ae81e31885e48b066ee34bb411710b8f915cfb60e3e17f556be6781ff826113b9b763de34acd2649d8f9b728856ccd6af3f65ecb63a7e5a37c46e7b0619108e5ea71507442f91128755496e34d4251cf4f9114442e4fcb72fdadcda5cbb84df8cb69d758ed6608f1f096bd24fe4c74a672305577a6b3d266a14caab6bb90941e3d84eccab87c11e0564abc198720436e", 0xe8}, {&(0x7f0000000600)="0225f0caa0f89fdbf196372bb10f7842b61e4f2a4239dec1e1b3900e515fc90be05a857e1582adf08b5301149943c774c384a77bba41ddf4b7c1f34f8c39c43dc53bd043b16b38ba91dd3e77a2b3ff11f079ddabe4ac4d7711c43948f24da3b46391d6e94f8499ff60d512f6f20b87ac307329481f49bd8d8532989d754891f0fd9ff32734ef6f079915e301a235dc2b6dbbc8f53d8be09ba11600fd497163", 0x9f}, {&(0x7f0000000440)="a98c231281e5dc4ce5f2ae1683370d158cf6ab96f5782ab2e82244bd9603a2215902ba09aaa85f8b41daff0025e6c7cf8210f8940166db2ee0c49ace5f63f4", 0x3f}, {&(0x7f00000006c0)="612b923a55de4b58953a333f3956282ac0ae86b22f95a39edd5e00d3b13311b716f9f36cb2ad08067df618d4b5efa76ecdf012ff2ca00ecca49414a918c2d34b8bbf2456ae9ab061ac1b2b75a724c0d88c88b648eca60a8bd786974898ef001c52638a40662f87bc56494c615384b1729467ee17bc8effeffe969c17fcac1891b2ee7b9310cdf70b86a28b320d20a7bffb6e02c75a3de2c0fdfe16c2bbb51238d2e2c7a3", 0xa4}], 0x4}, 0x4) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000280)={@fixed={[], 0x11}, 0x200}) dup(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r11, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r11, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e23, @rand_addr=0xffff}, 0x10) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x9, &(0x7f0000000040)=[r7, r8]}, 0x2) r12 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r12, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) 00:11:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400500000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 671.015490][T14619] UBIFS error (pid: 14619): cannot open "", error -22 [ 671.031808][ T27] audit: type=1804 audit(669.899:544): pid=14464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/463/bus" dev="sda1" ino=17195 res=1 00:11:10 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$UHID_CREATE(r1, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000140)=""/204, 0xcc, 0x2, 0x800, 0x8f, 0x6, 0x7}}, 0x120) 00:11:10 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x2000, 0x0) [ 671.246989][T14754] binder: 14678:14754 unknown command 0 [ 671.260755][ T27] audit: type=1804 audit(670.019:545): pid=14464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/463/bus" dev="sda1" ino=17195 res=1 [ 671.273240][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 671.302790][T14754] binder: 14678:14754 ioctl c0306201 20000080 returned -22 00:11:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 671.349041][T14808] UBIFS error (pid: 14808): cannot open "", error -22 00:11:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400600000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 671.357101][T14808] UBIFS error (pid: 14808): cannot open "", error -22 [ 671.424377][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:11:10 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="fe6689f9ea9deb345f2b65136358528907c4829bca8f6f65688a1f01d14a6d361d77488e41afe2cc19fb4b4b951d846b56c25ae8aa29880000fb3ec0fe9a1c063e3aef5833d4745093340a8571841f2c9eb078b47668e3aa995d893fefe2ad625a2ba005cbc7430900000032c8cd667f3aaf2cf5cf5c74a0670e011f"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:10 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x2a000400) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) readv(r2, &(0x7f0000000040), 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000200)=""/46) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom$netrom(r3, &(0x7f00000000c0)=""/50, 0x32, 0x10000, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:10 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x2010, 0x0) [ 671.578895][T14864] binder: 14862:14864 unknown command 0 [ 671.598972][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 671.628303][T14864] binder: 14862:14864 ioctl c0306201 20000080 returned -22 00:11:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 671.679968][T14867] UBIFS error (pid: 14867): cannot open "f4_+ecXRĂʏoehJm6wHAKKkVZ)", error -22 [ 671.709634][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:11:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400700000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:11 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0xfffffe6d, 0x0, 0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0), 0x0) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) 00:11:11 executing program 4: r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x9e93, 0x4) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:11 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x2639, 0x0) 00:11:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 671.954250][T14881] binder: 14878:14881 unknown command 0 [ 671.992210][T14881] binder: 14878:14881 ioctl c0306201 20000080 returned -22 00:11:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400800000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 672.079293][T14899] UBIFS error (pid: 14899): cannot open "", error -22 00:11:11 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x3926, 0x0) 00:11:11 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0x101, 0x8000, 0x4, 0x80000001, 0x9}) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x8, 0x0) 00:11:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 672.094753][T14912] UBIFS error (pid: 14912): cannot open "", error -22 [ 672.336201][T14975] binder: 14954:14975 unknown command 0 [ 672.396211][T14975] binder: 14954:14975 ioctl c0306201 20000080 returned -22 00:11:11 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x4800, 0x0) 00:11:11 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) 00:11:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400a00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x54e3, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:11 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="7776be316e4b5ccf52a9380d6115515464c0061d1e6db66376bdb947d5f9d550a2d042c46767f0559cd92082cbf89fd3b7b9c338fc5d6a4d0276d4f1a04916feac5a1359011ff9c45f69b4f72db2d1063b1a08526207f9b0f4c40fe9bfd9faf1d882b30aecdee56fd4775f8c284a1e3b170364ad4875c8092e456e2f587581b07e17e1428b84adfa3daa667b3b090023994674f6cf68ae5c79c8d31d011ab363"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 672.447591][T15006] UBIFS error (pid: 15006): cannot open "", error -22 [ 672.657830][T15017] binder: 15016:15017 unknown command 0 00:11:11 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$mouse(&(0x7f00000013c0)='/dev/input/mouse#\x00', 0x3, 0x111000) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) openat$cgroup_subtree(r3, &(0x7f0000001280)='cgroup.subtree_control\x00', 0x2, 0x0) keyctl$join(0x1, 0x0) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000900)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, r5) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', r5) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f00000000c0)={0x1, 0x1f, 0xfffffe00, 0x39, &(0x7f0000000080)=""/57, 0x1000, &(0x7f0000000180)=""/4096, 0xd0, &(0x7f0000001180)=""/208}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001400)='/proc/self/net/pfkey\x00', 0x2, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000001440)='cgroup.events\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, &(0x7f0000001300)={0x0, @reserved}) 00:11:12 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x4c00, 0x0) [ 672.705727][T15018] UBIFS error (pid: 15018): cannot open "ubifs", error -22 [ 672.745046][T15017] binder: 15016:15017 ioctl c0306201 20000080 returned -22 00:11:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304401200000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r2, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 672.853575][T15027] UBIFS error (pid: 15027): cannot open "wv1nK\R8 aQTdmcvGPBggU ӷ8]jMvIZY_i-;Rb؂ [ 672.853575][T15027] ow_(J;dHu .En/Xu~B=f{; ", error -22 [ 672.860922][T15029] binder: 15023:15029 ioctl 54e3 20000080 returned -22 00:11:12 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:12 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6800, 0x0) 00:11:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 672.971135][T15035] UBIFS error (pid: 15035): cannot open "ubifs", error -22 [ 673.153754][T15095] UBIFS error (pid: 15095): cannot open "", error -22 [ 673.186211][T15072] binder: 15044:15072 unknown command 0 00:11:12 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="e08a2e598f455aef87c3c7394dff7c74368379ffff000000000000a6c320e11c4055b5eae857492893a9d45d54e27472c3a86bf9a6a7dad59dece5ea6e3b74811bf07204a6e0fc9b9a70d5a8a5c229535d46fa4882802c4f7bda4b3f3db150df0ee289d2de5ff53e50da81dc08b5e6b2eaf5cb1f3f4654c5f86f647cdd07d8"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{}, {}, {}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x17000}) mq_timedreceive(r0, &(0x7f0000000200)=""/144, 0x90, 0x1, &(0x7f00000002c0)={0x0, 0x989680}) 00:11:12 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r3, &(0x7f00000000c0)=[{{}, 0x15, 0xee, 0xcd}, {{r4, r5/1000+10000}, 0x4, 0x3f, 0x1ff}], 0x30) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) [ 673.244309][T15072] binder: 15044:15072 ioctl c0306201 20000080 returned -22 00:11:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) flistxattr(r0, &(0x7f0000000200)=""/249, 0xf9) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) close(r4) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r4, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r5, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 673.299039][T15152] binder: 15148:15152 ioctl 6364 20000080 returned -22 00:11:12 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6c00, 0x0) 00:11:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404800000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8912, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 673.462109][T15159] UBIFS error (pid: 15159): cannot open ".YEZ9M|t6y", error -22 [ 673.499816][T15159] UBIFS error (pid: 15159): cannot open ".YEZ9M|t6y", error -22 [ 673.614760][T15173] binder: 15166:15173 unknown command 0 00:11:12 executing program 4: ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000040)=0x800) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYRES64=0x0], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x100022, 0x0) socket$netlink(0x10, 0x3, 0x1) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000001c0)=""/184, &(0x7f00000000c0)=0xb8) 00:11:12 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7400, 0x0) 00:11:12 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@deltclass={0x60, 0x29, 0x400, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0x2}, {0x1, 0xffff}, {0x10, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x1}}, @tclass_kind_options=@c_prio={0x9, 0x1, 'prio\x00'}, @TCA_RATE={0x6, 0x5, {0x0, 0xe0}}, @TCA_RATE={0x6, 0x5, {0x0, 0x80}}, @TCA_RATE={0x6, 0x5, {0x1c, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x800) [ 673.683510][T15173] binder: 15166:15173 ioctl c0306201 20000080 returned -22 [ 673.698208][T15184] binder: 15170:15184 ioctl 8912 20000080 returned -22 00:11:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404c00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:13 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r2, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, &(0x7f00000000c0)=0x80) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x1, 0x10000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={&(0x7f0000000200)=[0x46a7ee8a, 0xfffffff7, 0x0, 0x6, 0x10001, 0x5, 0x4, 0x34, 0x9], 0x9, 0x1, 0xd7, 0x2, 0x8, 0x5, 0x100, {0x5, 0x0, 0x100, 0xdb2, 0x1, 0x0, 0x81, 0x400, 0x7, 0x2, 0x8, 0x6c, 0x10000, 0xa53b, "089351ef80b9a24c482d3dcbcfe4d48baa9eacd51fa335c85be8d734dc5a15fe"}}) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7, 0x7b, 0x1}, 0x7) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="e73bdd87cd8df13979ecbef420263c3ae54712236e1998e97ca34fdcb072e71de47608d905f0818ffc6af155eb907a9c9069245dd7c8d0da6684e5f86151d2445cb299ad50af099c2c512dd24c6a93fdb5ff9b93d1ab73a422df97dc7a3e728a90820800000000000026ff5b61429d141afd4b7837e646d34a0bca360d5548faddec92287a71b56fb2e7d1cc4fc5bb8806f524ba94679204000000e278728734fde31b82f4f035f729449aa7278200"/187], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:13 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7a00, 0x0) [ 674.033723][T15294] binder: 15287:15294 ioctl 8914 20000080 returned -22 [ 674.090231][T15297] binder: 15293:15297 unknown command 0 [ 674.106218][T15297] binder: 15293:15297 ioctl c0306201 20000080 returned -22 00:11:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8916, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x1f, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x88480, 0x0) munlock(&(0x7f0000737000/0x3000)=nil, 0x3000) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x10, r3, 0x100000000) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) 00:11:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304406800000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:13 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xedc0, 0x0) [ 674.314117][T15306] UBIFS error (pid: 15306): cannot open ";͍݇9y &<:G#n|OܰrvjUzi$]faQD\P ,Q-Ljѫs"ߗz>r", error -22 [ 674.439707][T15317] binder: 15308:15317 ioctl 8916 20000080 returned -22 [ 674.469492][T15319] binder: 15314:15319 unknown command 0 [ 674.495308][T15319] binder: 15314:15319 ioctl c0306201 20000080 returned -22 00:11:13 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67c}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) 00:11:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304406c00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:14 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf000, 0x0) 00:11:14 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) [ 674.876272][T15432] binder: 15429:15432 ioctl 8933 20000080 returned -22 [ 674.892379][T15434] binder: 15431:15434 unknown command 0 [ 674.909890][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 674.909904][ T27] audit: type=1804 audit(674.149:573): pid=15433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/471/bus" dev="sda1" ino=17155 res=1 [ 674.926192][T15434] binder: 15431:15434 ioctl c0306201 20000080 returned -22 00:11:14 executing program 4: r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/108) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="b7eb54b224de8ebdd3710c67fbb16bb5", 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8982, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:14 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xff00, 0x0) 00:11:14 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x100, 0x0) fcntl$setstatus(r5, 0x4, 0xc00) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r4, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r6, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 675.125014][ T27] audit: type=1804 audit(674.219:574): pid=15433 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/471/bus" dev="sda1" ino=17155 res=1 00:11:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304407400000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 675.251772][ T27] audit: type=1800 audit(674.339:575): pid=15444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 [ 675.298507][T15468] binder: 15448:15468 ioctl 8982 20000080 returned -22 00:11:14 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller0\x00', {0x4}, 0x401}) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="3eae771504d568f9748c32b3b70184d999d94b58d01a129931cd9fc94d00fe0382468081460fb481bddc63a6753956b79b2d6f63d613b3000f50d87bad9c430a00aa21287137943713a3b98a639b1a506714e6848698a5514f90725c7f42486820ea744f7432b183db22b5c5b62ca85e4f66cb789fc80ea03ccfae2561b9dd41ef8910e2e960e42b13b5bdb451bf3457f77feb5bebf3742ef814cc16a6279c7d6f15813d20adb59c8ad56ed2b90e371b6ae7cd1a4fa2faf191933fb7ad96f2c9d27e0b0e96cf95c2409b3dc8ecef31"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 675.453341][T15534] binder: 15502:15534 unknown command 0 [ 675.471194][ T27] audit: type=1800 audit(674.379:576): pid=15444 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 00:11:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8990, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:14 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf0ffff, 0x0) [ 675.505514][T15534] binder: 15502:15534 ioctl c0306201 20000080 returned -22 [ 675.552827][T15562] UBIFS error (pid: 15562): cannot open ">wht2ٙKX1͟M", error -22 [ 675.583850][T15565] UBIFS error (pid: 15565): cannot open ">wht2ٙKX1͟M", error -22 [ 675.615735][ T27] audit: type=1804 audit(674.859:577): pid=15550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/472/bus" dev="sda1" ino=17246 res=1 00:11:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304407a00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000400)={0x0, &(0x7f00000003c0)=[&(0x7f0000000180)="2ddd743148dabe4884cda2d393f23ae064119a2acbc7a675e45167c13ad8e39b8ef79a4ba57b37f44158b1dc8f7f13b465832ed45eae1311bc2b4c75143743e931a7506c0b74eda24f5f9fa554f78db6c6370e34e8ca37fc5e3ae75e362825e27983cb1c188a03b0e9c01a38973e22c974ecbaf9e15449be27a7c39b90412f8f36669c3bc30a597e646f7531df4e65ca280b8122850cd20cf107b635fc5f5c8db3", &(0x7f0000000040)="291c35cbd4a1e2d3f094", &(0x7f0000000240)="995f5a50a596ed73a474814dd93a3fd80e4ade9c7b6617734011941e3e4981488327e7e19239e172c94407c37ca3ba0fa868a2f90274383ad35129cb882766b57e3069b409eaddaf57a6cda53e6697c30d7d48db60d61f1da3b2526eb142f64c531377914f8ab872f0292510c5aa83726e23dca2d50c003e7afa105204958255cc73e547d0544639ed46da82d8e507b2cfa84d9dd75c46079ce4bd34321e0adbc0c9821b3e294f13f4e4d3b24c12bcf702d7402ae3aec47e8afe18d995559d623401562a03dd7d94a10167fed9978446da9c07eff1680a68d6649e94f2", &(0x7f0000000080)="23f9270963e121d57c1642b57f9a34f5fd35847b3addcdf6cc65d591c8874fe18f61e7b77584de1b3d3b2d6016c88d731b52b2", &(0x7f0000000340)="7b50c6d87f1912cf4346d12681955f5b33439879ced3fc778ab1474c62723a0dbed1b743ad2b1fee6e6be154e6bed5c6cedd1d0f199710448468e490b90f3f94276cdbb9c5a36781a923721fdcbff55307bdcd78ec63d7d1953cc6114deb97e13fe54b2cbe633e7121765ba99178d27ff3"], 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000440)) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0x0, 0x0) [ 675.722101][T15571] binder: 15563:15571 ioctl 8990 20000080 returned -22 00:11:15 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x1000000, 0x0) 00:11:15 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000040)={0x0, @reserved}) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r3, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 675.884202][ T27] audit: type=1804 audit(674.889:578): pid=15550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/472/bus" dev="sda1" ino=17246 res=1 00:11:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8991, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 675.955432][T15577] binder: 15574:15577 unknown command 0 [ 675.999476][T15577] binder: 15574:15577 ioctl c0306201 20000080 returned -22 00:11:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) r2 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000240)='%f\x95\xda\xe3\t\x90sgix_acl_accesseth1lo,\x12[ppp0\x00\x94\xd6!w\xef\x15\x01\x9cV\xac\xdb\xb9B\x14\x83\x90m3\x02\xd0\x13\xd8\xbe\x1c\x82_\x9c\aV6EMp\xb4\xaf^\x90\x8f\x93\xc4G\xe1\xf3}c\x8fq\xfcK\x8bd@S\xafG\xd5\"\x9a\x88(B\xe2\xf34\xc9\xb1\x1a\x19\xcf\xea_\xda\xa4\x90\xa1\xfc\x9dp!\xb0\x94\x81{\x04Y\xbf\x89\x16^\x13\x90\x7f\x9eQ', 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept4$tipc(r3, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x3d0a40d3, 0x3, 0x4, 0x1000000, 0xae6, {}, {0x5, 0x2, 0x1c, 0x0, 0xf, 0x4, "f80016b6"}, 0x0, 0x3, @fd, 0x9, 0x0, r4}) dup(r5) r6 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000900)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) lseek(r7, 0x100000001, 0x0) keyctl$negate(0xd, r2, 0xffffffffffffff01, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_S_AUDIO(r11, 0x40345622, &(0x7f0000000100)={0x3, "410f082cd7198160fe92dd3014af1ffa9ea3b203a2f97760b23178c910f2cb7e", 0x0, 0x1}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000080)={0x2, 'veth0_to_hsr\x00', {0x7}, 0x1}) [ 676.053503][ T27] audit: type=1804 audit(674.899:579): pid=15550 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/472/bus" dev="sda1" ino=17246 res=1 00:11:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400003000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 676.184230][T15590] binder: 15583:15590 ioctl 8991 20000080 returned -22 00:11:15 executing program 4: socket$caif_seqpacket(0x25, 0x5, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='nsfs\x00', 0x2000000, 0x0) [ 676.198084][T15592] UBIFS error (pid: 15592): cannot open "ubifs", error -22 [ 676.235178][ T27] audit: type=1804 audit(674.899:580): pid=15567 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/472/bus" dev="sda1" ino=17246 res=1 00:11:15 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x2000000, 0x0) 00:11:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xb704, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:15 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7b, 0x123080) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)=0x4) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0xe702, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r2, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 676.458940][T15660] binder: 15632:15660 unknown command 0 [ 676.489975][T15660] binder: 15632:15660 ioctl c0306201 20000080 returned -22 [ 676.491102][ T27] audit: type=1804 audit(675.419:581): pid=15585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/473/bus" dev="sda1" ino=17168 res=1 [ 676.586390][T15707] UBIFS error (pid: 15707): cannot open "ubifs", error -22 [ 676.603230][T15709] binder: 15685:15709 ioctl b704 20000080 returned -22 00:11:15 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x2, 0x1, &(0x7f0000001140)=[{&(0x7f0000000140)="fbb603032535b44c79d6d8dc04248490049bf706318075216a3a4235616c04311d4fb3363b08dd2b9bfeb6aa00d3adab7a72ba256e9e3676d26b83e03d7a2e14340673c09822146268c048a206aae30dea8cefddc0a2b8ca591d39c6a096336ad26e4546fec587ec3f0c88ada2c3b9ec7e03f3a09b6fc0f100ae34ac211dc73fe15ea62d08cbe15d069edea659b76d50bc57250cc647ce62972aac591a1963aef2e0257854092952ef3a06f981cadffda393ec0ab9c6f0691ef018529ac11ee4e853a9482eb26123e71f3feb88e8bf9728e133e3bc75ee51f8e76a57219ffbc78361e892f99e46dbd83c70709fe4f16ecf7813d2980d0ff69e3d864086b007e3c87826a8300c1d210069cd183fccafc14bd3124a0ac21a7280abf4e3b7c4ed06ab43c5471a256549d4b64cff2d6444445c01fe77b4c506f5053054540d35d404d67d4f38ba0fa09d74ac03072617163504256f7e296e86b2f75a93c5d52aa30a174d6d11b33cb8fa7fd8b86ebc9dccb8e50c4b123ccb2a5d7e0893d78f3124a1a4f387d1bcd8aaee521776c11f3d707a69e3d0217dcfa36076196e22ed2bddefe61bb3584f5fc19d3593a1370b6165c6212cede44a0b4cd77d0f297465631fc5bc785abae8d7d60a002f349cba7e52d7f428e8d0b50a6c26c64ea0e90efa079c561e353ba089eddab4d0b90094e8b049b31a42277744ca043e17ae92e7fa8d82e7a1f80672d86177e78a22ca2d01e452a134f78163864efdfa542ea75a8e1a311e0f71e485094b509ae28040cb07b6ff6485ca7363d0ecdd0fc1e3c2ccbf91e74b2d5b918d9b1240e6c26138e80bb67cd638756f0e008d3185853a000f9bc612ec082895b4ddbbff88cf3697ea5abaa8a60e549f92285e2335c10e19dac0cee9079942871b1af6c65b35b394ab3ddd9f135f19f570f24f7d59d6f8b43b4d51a481dda4684392310c20bfbc75ccd139c77bd6f973fb08291aba6e5a42cd3ecc38346773eba9d2f78ce305bccb371e509dc8b019f52aa9c9d6b834db56ba82bd33369a55f09c966772c5a5f5faa07b4bc3f47b2afc836feb84056029d319f797a229d9939730a196b93e4410305cc6f83116d3acb2cd6241806800ddbc8b4ce6cca64a7d2633c4a9351d3a3fb6901a25421252f32d59745b44370539a2e0c6cf3a604c17c412a9abc41a803182a7bd2d60605e00f39e9d91b17d6d03e7e9f0ee7ef5fde1a57c2b218d9a529d79cdbe5d12e5ff523357cf503cab7db2ee5cd76166ec6b556ec4f77232da81c03b7e1f042aeb0510f74d2110fbf6b089c1ca8041b31c6397d3051090c3295dde1ecb528356caf15ccdd7ca442866b484929f70dc5015e9e7adafb403a8f373dc17df99f6b1448079b0b7d42f759576dd4cfd5cc0f4915081d6ced5971cee2ff5fb932afd271706bbd3c03ff7dd8c34c7e3257d6b32dfa7d47a5c440d2118a69834357fbeb9cf16bddea27d7814c967b975937b8cb4a9718e958aa36d41af9c9d973bde23daf48e1b32319feb6f84be234eb198b77b60488d94b6474e0f14f105cd8a910f8255a3748f08dcaee9dbc912187d35401402596572ccff14793ba03731e9cd4290b2ec7f442bca291ce1c9faf808e7ef7b2257e3d83da31fea1e2cbe7df513d7c5ecb7dfb93eb1d482f3be448dfa0f07505846969e925f62f6be57e871cc80fc18eb91d2a6d492411548645eedba9165705ef38611ab92cacdf79d4b6eec5a18825f6a8879d60dd7386a018db7d8ae83fd4b860895caad9a8bab480b8889dafcd453aa46f2c81e52f1f2e6e33149e5cf7f05bc6fff65f14b179d48a994b45e45e609d91acf82855fc78f72e9657301b7f320430266b09a0a5c1a8633f194e3195564c367b93e537a26758bf2571af9115a754a7fb7c89812b0157ab8c3cafd5cabf78b441004a2cc53703ec41ec52133395be93ba5309f96ed2eecf96edf766657e8af0b33d50d7f7c79185dc37dcf9ae9da2f13b208d5ff4757217f8a132d2a02ce15843d4c98e757f058ce9e43c44d3711037bf163ea75ee022540eb4b287067af583a353b2410df63c13fd161bafff116cd374fd1f620dc68e6de2cac17a34a6fb027dde0fbce764baa8ba8464dc004eeb5d84c714840b2b92b3c0bd7dcd86e035c7e55b7daa9913b3409d509cb8d1837ea7e4b0259e17c4ed005af83cd3b9970628946c9aa1ab2cc21db490490ae5bcff086ca84862e523b6c89c8ff69b3fb7399f3b93ae010a0d2f8d2304e54d8aaa5e699368ed56f68566b87868218212960301d3ff6bf769fe4dd5ddd41352f3b52cb06a15511c3e4fa0873f99d83da034f18c7dd22a9b45f55e7618dea6b2b10c9774496d6424f2f1916b099a1a0aa8f77f5624452f34584057a6f3022caa88b4b5ba93b849ba8fc49f526592f5347a2db859384ce12d451b7143ebe218c3d72c114cb0635509d4c809bf2289fa44ab2de95116319fb1201a563dfe6149b93c5a15388648100e6eda2092780bb1d12adbcce6e17fd46ca3470feb9371ade2d31b59afa10b519d167e824a5d55505e479aa0a9053de446f2ae0adbebf40e93d9a8df77335d99478124f1790c7a31d130ec5586a5cd85cbe9953c82461768267fe827c2fbe67d56bbbe8de815c0a4a282b54ebd86254e1c6624f399cd06b519727e5cf30823142d713e88e71123b871b38146d9b8926b4d95356e36ee6fb5577fa46527f78782d05cfe688d8f57003c08fd3303083ea5068c4bb0c6ecb92b3fa1fd9f7ac2bdd65a45afebd3e392d7e75a017906cadde50ef193a0d14eb7a638ca28b162bc42464ff033eb1831d3487e42621cd48a014b4cc1765dd5e6ff8398d25e2f1481a381942692325edf2133e9e61db2691d5fd6858d64571a86b45095524b137bfd2017335cc59b1e905608a46dc8aefd03535c5f9352928f5079055f7fa46e2596249fe21d710bfd96ad6e433ad4ab4d55430a80ac3bcdac0d714642102c39ea5dca4180e78c58fd3fc3e4ff16a5a01d1e6981066a7eff2b38a2898626016d337dbbb355d153354e9209da6eb08896f16f92c4cf4a335c3d776a3eae2eb299b371f0f550614c0e0ac6d4fae50ea943a0cba5889cdd8c7b8b8264948ad65766d67bf5859b9bf2f4292f0e4b4dc5b50f737a3eb530489385b9a806f5dbac86b1d31c1bfa135ea22ad07b16f5567dcbb53f44d6dd8c454ea9f3e6e895f97ad9e66631ee363e4e62e1676ff10a2c9051b44369b0e7d9d47e4935510bdbccae9bc85621670a665a1cc6ccad7be8cac31aa44bb8de4d6c5ece1986f0a929dfd07f155f60585d21279d01c5194acdb07d5905845735e5c00c63aefa5ed066aaad501d31956551795accce45b7cf42711ddd031b5a2226f4c7e767fc7edda6b81a605541286ff6a784fcb95c809900c110d6aa726161f2a603ec2f1142909db4078fffda4f08ea45f44bbc58a7b93b6f8a74494f70f7bcdef5adce54222f0b6acd367c3f8738fc444b6b64815c371727402514fcfbba01fbc09f9cc12fd427bdbc12b807969e6c367ec17a96ed6078b96cf3507a6577598f58bce91940206e650ae2e3bcb6d7b73a7aaddc394af7149ef6bdecee94d6f4c289ff29ce109b20bc1a3fdc86f1300b2d89b0523cd838f335ce1792933406760c09fafe057453b4a2f3848d508dff2e3d9039e65b5a49277c41fd439f50ab952e977572e8c49ce3a00e9c7d9727e8da1c624eb28e2b82ca5cb85fc92a817bfaeeedb1d744fa0854a4bc2158f04b716573ca6306084277821480b96d58a474cf89fa277c19d595e870758efc4096f14400270fd9c5ceb0e3d898b2dd452d59898681c1e7c9c9fe0b4b9bc45e9709c288a46b4eaafe18072e12107d438a99184f56b34a96ad33e5bd3d28ad5892a8af1fe35ef5ee2ecb0a42d836531427aa6b6db679cafef1f11c1ea77bf6a6c26b6ad7cacb56c7affe3b157d1e5e83af524f6494c6f6395eadef71faf66d8468e42a7290b57e1848dc5bd8f67119a356b5b67043c10f79fa33ce149fbc8ffaaeaf2e29c4ae34db692c79aa227ea8b3c2376b8b738c4a3dcd43f042a2462853758d86e9d38178dce2d9cec983f1b2dfd7580fc2ae8aab741389f74f68f880b5ea919bd244fba47e84c0d2d317cf507d11de88ddc441e3e9f6a17c4762839608cda10195e7170bec8554934655d98b0353868cc15073c60a2896355b9138a5e462aa7ec2e44340079f891c6f19289eefb8b930b7408bc33b19dbcecf388265ce6bea8fbfc4437ca7273634a6ce13d31fb9f4ab5523df8e0720cf68ce5a68262d532084b151f23623a6ab2c8ba92bb53617ca2849cd7889aae9def9a5e2b38a8e1ae85e83a0002b879595b516b2101b5a8022e6263320424f382cf4199519292149e521ecef154ba6676abc7771830cfa602608ad7281874e2b999aeeb51552557a99ee960621588388b4588f39503316f85c724963c2bb46fd7e0a8ad3b3de39d117533d5c6eece84c5c8d3d1d808b13e9f10797ec4fe9a9f2d88585c69c4cb0fb110cc66e0e284f444fd8e8995fd735697946203d5c99e4a122483344e257223b4c5099239f365435bb508213e0f1d075dea55da0a62a94f1a7edc12b4a819f2b2a2eb481b381cb8d816dd35fe1efbe72d0ba19b9fbcf867cbd2eb52c4d0013b6bb48bb7c23a943d5e1a331570d357b4aacaa0b3313e9fffda4a678176d8a4c4fea52cca50c1387b2f10d1bb6500715272327a546fa96d8bb7b42f23f6f78ae032f42c975291e610a426fdc5fe82d50cbb552d856aa143da7737953e36839df65cafdd368c949273c56af180d039901b7b9fe835cfc6ab72168365385a6e4abfb22cf130ee1eb04134956f0fbfd6724ff8787a70e5be8d71c1a611ce99d7b39b3081acc46111b52c67c82a7f46f501ee8669c8052b83bf58334827b3eb1b35cb2f06319b1b6397cce7febdc3507c23e7a4b0f0f23df0349ee3d0ab97a94a6dc6211b0ea594514af55d47af5808bb7937db407e2f6659d887d09d8c066e5fabd6f74769120b5d854db1ff3849ea750539a337c992f423dd1da0b4d346a0cf19825b97f8e5e832b89890a13cfa0b64d33058091a35878472d6381c0359e2c2e730fb6e2fbf8b391ce1ef0221106027f22a2be846698f3304f206300ba34860570714076a4da8ccdcae8d40f127f98ae51a98e04cb4bf274330635fc81cb9791a3ea063dae838873f04ce67ef86390f164ced148f233412123211762fc0a251ea11a116466bc4a024041d891e2afe697db6fcba58d5dcd6f36ec616b37cd56c4caa8d6fc92a1ab3bb4a9dbb3bbcb71c8aba92549c6ec6cfd26eac90acf8003319345cd786b6e00b75fa66b6a184a05a880cd79a99d2a42ff1777db5a4191cd3cb2a47a8a75f12ea4d1c845e262104e1b5436a5a4a3fdbaaa898723534876e5c98bafeacca0385596639d2a8d51255bed7776cb17103479181d3166db3f1a3245686d24351356ea33d4bec15510277dea9143b9c0ace7c83a1e7b3da54e6e161625edeb69f09a42470620d3a467c779f1502d2b4bb9c8b48cbb6f9f4c267009e4fe3bfc5aa9c75f7a37240341b2e1c2acb8d711bb74a92a512f7b9fe8be57dc4f049401aace2b51a22b6590f3b2d42785ea666cf9bb10d087a9c3bb2c854ad9c5fd966d9f1e5696f4ab9d9b79683b56587c84a75a598f0c525d2cd03f3952b01dc3ce683848a8d761107041ca06ccf738312acd7476c756e7d36a178843b5b53f6b98e845ffbe4595c5940a835ea0f1dc151940fadd2e2d1428064ab12123c39", 0x1000, 0x7f}], 0x2000, &(0x7f0000001180)={[{@hash_tea='hash=tea'}, {@balloc_notest4='block-allocator=notest4'}, {@data_ordered='data=ordered'}, {@usrjquota='usrjquota'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@audit='audit'}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0605345, &(0x7f0000000140)={0x0, 0x0, 'client0\x00', 0x0, "5aad4b7e4fae401c", "78dc944378c2ade0647ce3c463002dbfe389448688cf697cccd0052895652aa4"}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000200)={0x0, 0x6, 0x18b, 0xce65}, 0x8) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) accept4$unix(r2, &(0x7f0000000180), &(0x7f00000000c0)=0x6e, 0x800) 00:11:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x3000000, 0x0) [ 676.701434][T15712] ref_ctr increment failed for inode: 0x4360 offset: 0x0 ref_ctr_offset: 0x2 of mm: 0x0000000009d0455c [ 676.724104][ T27] audit: type=1804 audit(675.449:582): pid=15585 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir392718485/syzkaller.9GiXcQ/473/bus" dev="sda1" ino=17168 res=1 00:11:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400005000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40044160, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:16 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = getpgid(0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x7}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r1, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f00000000c0)={0x1, 0x0, 0x1d, 0x2, 0xff}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0xecb00, 0x0) gettid() r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000540)={0x2, 0xfffffffd, {r3}, {0xee01}, 0x7, 0xe1fa}) perf_event_open(&(0x7f0000000440)={0x4, 0x70, 0x8, 0x6, 0x4, 0x20, 0x0, 0x7, 0x8010, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000400), 0x2}, 0x40, 0xffffffffffff0001, 0x3, 0x7, 0x7f, 0x0, 0x7}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0)='nl80211\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r9, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r12 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000500)='/proc/capi/capi20ncci\x00', 0xb15900, 0x0) bind$packet(r12, &(0x7f0000000000)={0x11, 0x0, r11}, 0x14) geteuid() ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x5c, r5, 0x208, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r13}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0xd}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9426, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x11) r14 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0xcfa, 0x3, 0xd0, 0x8}, {0x101, 0xfc, 0x3f, 0x3}, {0x401, 0x80, 0x40, 0x1}, {0x8, 0x80, 0x80, 0x10001}, {0x0, 0x8c, 0x1, 0x7fffffff}]}) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r14, 0x180000000) mlock2(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0) [ 676.988283][T15724] UBIFS error (pid: 15724): cannot open "ubifs", error -22 [ 677.076663][T15731] binder: 15728:15731 ioctl 40044160 20000080 returned -22 00:11:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x4000000, 0x0) [ 677.148070][T15722] UBIFS error (pid: 15722): cannot open "./file0", error -22 [ 677.155972][T15732] binder: 15726:15732 unknown command 0 00:11:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 677.208786][T15732] binder: 15726:15732 ioctl c0306201 20000080 returned -22 00:11:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400006000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:16 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfs4\x00', 0x0, 0x0) [ 677.298390][T15739] UBIFS error (pid: 15739): cannot open "./file0", error -22 [ 677.428851][T15766] binder: 15756:15766 ioctl 400454ca 20000080 returned -22 00:11:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x5000000, 0x0) 00:11:16 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2000, 0x0) [ 677.525239][T15817] UBIFS error (pid: 15817): cannot open "ubifs", error -22 [ 677.668574][T15853] binder: 15835:15853 unknown command 0 [ 677.688224][T15855] NFS4: mount program didn't pass any mount data [ 677.726046][T15853] binder: 15835:15853 ioctl c0306201 20000080 returned -22 00:11:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x2) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000080)) 00:11:17 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x1d0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400007000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 678.022281][T15868] UBIFS error (pid: 15868): cannot open "ubifs", error -22 [ 678.118503][T15872] binder: 15870:15872 unknown command 0 00:11:17 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6000000, 0x0) 00:11:17 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x400000, 0x0) symlinkat(&(0x7f0000000080)='./bus\x00', r0, &(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0xfd, 0x0, 0x0, 0x5, 0x2, 0xfffffffffffffffd, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x84000, 0x2) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0406618, &(0x7f0000000040)={{0x1, 0x0, @descriptor="b03ff5dfd7aa8059"}}) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r1, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r3, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 678.174209][T15872] binder: 15870:15872 ioctl c0306201 20000080 returned -22 [ 678.177094][T15877] UBIFS error (pid: 15877): cannot open "", error -22 [ 678.234755][T15880] binder: BINDER_SET_CONTEXT_MGR already set 00:11:17 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sr0='/dev/sr0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x313814, 0x0) [ 678.355876][T15880] binder: 15876:15880 ioctl 40046207 20000080 returned -16 00:11:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000a000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:17 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7000000, 0x0) 00:11:17 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000180)='posix_acl_access\x00', 0x11) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) r3 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x81, 0x1a5181) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000002c0)={{0x0, 0x0, @descriptor="30949aa842c57dba"}, 0xc7, [], "a3694a80dccded0084ea35a32761a030962867a96f609db95ac66e925214b3f2ae36cccd9c6e833f5600bcb4b01a86e0ad077a8c47f5747650f92c798fa7a5b698e902d89d68bfd09bbefd7ba1ff938e600eca4a5b97f79f2035ebfcfa37c55835df87cb2846a141f30e5e9758b3944bf4c6c28a27a23b839ebba1df1194a91533967896b067af2a24294e674affb591a47443fb8c32f4164e794016412d0001cb09badd9497928347567f5494067eb93c93e42897bade0f717e6bc2115f99a147b3cc241e0fcd"}) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) [ 678.489249][T15988] UBIFS error (pid: 15988): cannot open "ubifs", error -22 [ 678.637816][T15994] binder: 15991:15994 unknown command 0 00:11:17 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) 00:11:17 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x2) mount(&(0x7f00000000c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='ext3\x00', 0x2021010, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvme-fabrics\x00', 0x441, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='fuse\x00', 0x400, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x800}}, {@max_read={'max_read', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1800}}], [{@smackfshat={'smackfshat', 0x3d, 'em0'}}, {@dont_appraise='dont_appraise'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'msdos\x00'}}]}}) [ 678.684172][T15994] binder: 15991:15994 ioctl c0306201 20000080 returned -22 00:11:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440630b000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:18 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x8000000, 0x0) 00:11:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40047452, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 678.839120][T16003] UBIFS error (pid: 16003): cannot open "ubifs", error -22 [ 679.008679][T16011] binder: 16009:16011 unknown command 0 [ 679.055232][T16011] binder: 16009:16011 ioctl c0306201 20000080 returned -22 00:11:18 executing program 3: open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r1, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x141000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f00000000c0)=""/15) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0xf4a, 0x9, 0x4, 0xfff8}, 0x8) 00:11:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440890b000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:18 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$NBD_DO_IT(r7, 0xab03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) getsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000280), &(0x7f0000000380)=0x4) dup(r10) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000140)={{0x0, 0x0, @identifier="10f91026792e1b7577d37ed833f3f3e7"}}) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r12, 0x4008ae48, &(0x7f00000003c0)=0x2) [ 679.133588][T16060] binder: 16020:16060 ioctl 40047452 20000080 returned -22 00:11:18 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x10000000, 0x0) 00:11:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 679.184023][T16088] UBIFS error (pid: 16088): cannot open "ubifs", error -22 [ 679.305855][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x3e01c2, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f00000000c0)={0xc029, 0x2}) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) [ 679.410477][T16131] binder: 16128:16131 unknown command 0 [ 679.445002][T16131] binder: 16128:16131 ioctl c0306201 20000080 returned -22 [ 679.458276][T16137] UBIFS error (pid: 16137): cannot open "", error -22 [ 679.470701][T16126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440630c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4010aeab, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:18 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x20000000, 0x0) [ 679.475774][T16136] UBIFS error (pid: 16136): cannot open "ubifs", error -22 [ 679.541621][T16138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:18 executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000040), &(0x7f0000000080)=0xc) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)="8c", 0x1}], 0x1) mmap$xdp(&(0x7f0000737000/0x3000)=nil, 0x3000, 0x0, 0x852, r1, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000738000/0x2000)=nil, 0x2000, 0x2, 0x852, r2, 0x0) mlock2(&(0x7f0000739000/0x1000)=nil, 0x1000, 0x0) [ 679.668181][T16142] UBIFS error (pid: 16142): cannot open "", error -22 [ 679.702796][T16146] binder: 16145:16146 unknown command 0 00:11:19 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000001840)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/full\x00', 0x735401, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000001a80)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x200, 'syz0\x00', @default, 0x4, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @bcast, @bcast]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001b00)="24379586d42a4ab958cff29f3e001f5075c3b22834d1f5116cebb04c6485c8b3a465d940ee3d5cb21527189cdedc041fb4ea019100a8950ae6a55f3e0e18f4d70058bd5796724200705ae6f6549b38453440211882683abe276409331bed65e543d952650f65c9d19e2f8cd647d658ca9debe4", 0x73) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) setuid(r2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001740)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000001a00)=0x1f) getresuid(&(0x7f0000001880), &(0x7f00000018c0)=0x0, &(0x7f0000001900)) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xa, &(0x7f0000001640)=[{&(0x7f0000000140)="3b296e92c210392056934a3d82ba622363ad58cd49208a9799511cbaf38cbc0d4b55244763ec1452b1029983", 0x2c, 0x1}, {&(0x7f0000000180)="b757c62476d2812be0b1c518403f0330f73a9c5803f254a53d499a0c67b92e1048802ef6cb7cb733d0e2d46efb57d176a01808249369215d62699260f4363e988da678f3192c31d685216d76b29933e78553436cf20e2bb6dc449987a552e8f1b6f8baddb722a2f1f36d2c79b4609fedcd007b4cc87c75c342b83482d840c32a53ad6e72", 0x84, 0x8}, {&(0x7f0000000240)="88495e84bfd7634cccc2eea1c8417870ac88236e94e14b120757d928c4b38422d33ff886b2eba17d0f56cdd75f7d3b769b6f84c0e3fe8809cbed47f29972744476a137618c", 0x45, 0x7}, {&(0x7f00000002c0)="af29538f057d6c42701eb17f3f75971d3f9418cf203db13dc7d2b058aba065517c92f7c4a274ba7d31e3ea707f0b77828a926add190eb297b1b961db5d116ab033bf7ee091e5e997b3f88aef6799e918e9fef7c4e7d00159472fe913de83c64443a3545556bd8e611673f33d04cf97ec12e274294f463573a1de3427cf250e39a5ac9503d529072a067bff5f7f91ae20a11ad5ad98a45e477358b2ddecbf9694ab132f73fad22278c18a701f6f7da505de25280a79b4f2531a69de9c35f05745bd22f9443d01e5be8caa576b31a4362a70dbe3c065a0c6295781", 0xda, 0x3}, {&(0x7f00000003c0)="14f27da907078946f47c6df1555c36bc5c1f2be509873a914d916937fb7b77b50dd5c5136c8b0bab14a9d653f07ce693b6857db830c18fc2f9e36d8c340c143f37cda6f8f2df879aad5c80d22f929d14e931d60f349be78ab1eab0f007638d507366e75e13e521e5f95aa73c43b1e08598a3b80ccc0e57297509c310bd2c34566bb959e84b7e5a27915074ab78d5e2fe362f1062a213b2a9795f0890b5d13170ebb469e74690ba2bf9a4589da1a7391a5771ad43152c382141", 0xb9, 0x2}, {&(0x7f0000000480)="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", 0x1000, 0x3}, {&(0x7f0000001480)="3f0065b9ffc6c9b8f2ea159adabcaebe8b428b4818b8b385667ce1c4300a1d7736a3adaf371aaa7a01f64f951bec14d05b2eb450ab6d2f32d47c6b35ba8475c1d47cf444c67a431d028c0fa3614010ff7b129b9b293d0478a7bd7a1423bc5607f16e730d", 0x64, 0x200}, {&(0x7f0000001500)="ddd36142d4222afe7b50db2ee32b07f35c5b972544968bb0d2ac53c1ed1f27761b42cca08aac62112b099835bd73b2e2f11a5d81ff3a4eccd256ea6557c5545141df37d7be5f58ee33a9fa67b1", 0x4d, 0x9}, {&(0x7f0000001580)="725813b1516f3aca", 0x8, 0x9}, {&(0x7f00000015c0)="287fc19481b4d1905e618d4f7fbb633630fd504dde12676ea8a442b24ac49a34ab3b9052db35302b356172f652b2f0afbb74e2a3401655ecea9408c291957d9511deb744be42657f8e68270e4e2e7a98a97b7b1e3dd005316ff26a43c0969e618b5da16a48e5e77cd12c08c4d869", 0x6e, 0x4259}], 0x1020, &(0x7f0000001940)={[{@enospc_debug='enospc_debug'}, {@barrier='barrier'}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3ce5}}], [{@fowner_lt={'fowner<', r2}}, {@euid_gt={'euid>', r6}}, {@uid_lt={'uid<', r7}}, {@subj_type={'subj_type'}}]}) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000001b80)={&(0x7f0000ffa000/0x4000)=nil, 0x81, 0x2, 0x21, &(0x7f0000ff8000/0x3000)=nil, 0x80000001}) 00:11:19 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x20100000, 0x0) [ 679.777102][T16159] UBIFS error (pid: 16159): cannot open "ubifs", error -22 [ 679.808024][T16146] binder: 16145:16146 ioctl c0306201 20000080 returned -22 [ 679.847574][T16184] binder: 16156:16184 ioctl 4010aeab 20000080 returned -22 00:11:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440630d000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:19 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x10, 0x0) 00:11:19 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:19 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x39260000, 0x0) [ 680.018270][T16257] UBIFS error (pid: 16257): cannot open "/dev/sg0", error -22 [ 680.220808][T16281] binder: 16277:16281 unknown command 0 [ 680.258036][T16282] binder: BINDER_SET_CONTEXT_MGR already set 00:11:19 executing program 4: creat(&(0x7f0000000100)='./file1\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socket(0x2f, 0x6, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) [ 680.275834][T16281] binder: 16277:16281 ioctl c0306201 20000080 returned -22 [ 680.285569][T16282] binder: 16276:16282 ioctl 4018620d 20000080 returned -16 00:11:19 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x48000000, 0x0) 00:11:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400012000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:19 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006200)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)=""/4112, 0x1010}], 0x1}, 0x5}, {{&(0x7f0000000140)=@nfc, 0x80, &(0x7f00000012c0)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, &(0x7f0000001300)=""/240, 0xf0}}, {{&(0x7f0000001400)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000002900)=""/224, 0xe0}, 0x2}, {{&(0x7f0000002c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002fc0)=[{0x0}, {&(0x7f0000002e40)=""/30, 0x1e}, {&(0x7f0000002e80)=""/28, 0x1c}, {&(0x7f0000002ec0)=""/218, 0xda}], 0x4}}, {{&(0x7f0000003040)=@ax25={{}, [@bcast, @rose, @bcast, @remote, @rose, @default, @bcast, @rose]}, 0x80, &(0x7f0000003340)=[{&(0x7f00000030c0)=""/189, 0xbd}, {0x0}, {&(0x7f0000003200)=""/108, 0x6c}, {&(0x7f0000003280)=""/136, 0x88}], 0x4}, 0x55}, {{0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000003440)=""/252, 0xfc}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/134, 0x86}], 0x3, &(0x7f0000004640)=""/232, 0xe8}, 0x2}, {{&(0x7f0000004740)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000005b80)=[{&(0x7f00000047c0)=""/236, 0xec}, {&(0x7f0000004900)=""/4096, 0x1000}, {&(0x7f0000005900)=""/89, 0x59}, {0x0}, {&(0x7f0000005a40)=""/1, 0x1}, {&(0x7f0000005a80)=""/109, 0x6d}], 0x6, &(0x7f0000005c00)=""/115, 0x73}, 0x91a}, {{&(0x7f0000005c80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006140)=[{&(0x7f0000005d00)=""/127, 0x7f}, {&(0x7f0000005dc0)=""/72, 0x48}, {&(0x7f0000005e40)}, {&(0x7f0000005e80)=""/151, 0x97}, {0x0}, {0x0}], 0x6}, 0xa94}], 0x8, 0x22, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000040)={0x7, 'netdevsim0\x00', {0x5}, 0x100}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$RTC_ALM_SET(r6, 0x40247007, &(0x7f0000000300)={0x24, 0x0, 0x7, 0x10, 0x1, 0x20, 0x1, 0x15d}) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3000500000093b5de82e746bc7c700ff5f192e5f339f791f446e11ee9c0ffcbf0e86368e1e8e2655eae38587a4be7ef1cec9cb58cd6e3767cf96be2f89d984a48", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'netpci0\x00', {0x2, 0x4e23, @loopback}}) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvram\x00', 0x50000, 0x0) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000280)=0x66, 0x2) 00:11:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:19 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@md0='/dev/md0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='nsfs\x00', 0x0, 0x0) [ 680.341993][T16284] UBIFS error (pid: 16284): cannot open "ubifs", error -22 00:11:19 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x4c000000, 0x0) [ 680.629011][T16304] UBIFS error (pid: 16304): cannot open "ubifs", error -22 [ 680.696850][T16311] binder: 16306:16311 ioctl 40186366 20000080 returned -22 [ 680.731041][T16314] binder: 16310:16314 unknown command 0 00:11:20 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000140)=""/4096, 0x1000, 0x4, &(0x7f00000000c0)={r1, r2+10000000}) 00:11:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) socket$isdn_base(0x22, 0x3, 0x0) [ 680.771894][T16314] binder: 16310:16314 ioctl c0306201 20000080 returned -22 00:11:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440003f000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 680.853748][T16300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:11:20 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x68000000, 0x0) [ 680.963250][T16322] UBIFS error (pid: 16322): cannot open "ubifs", error -22 [ 681.059393][T16331] UBIFS error (pid: 16331): cannot open "", error -22 [ 681.071723][T16330] binder: 16323:16330 unknown command 0 00:11:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4028700f, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:20 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="2ff7cc380b0199049337d026d785f033a309b657ac09d1ff8814a8f77f2a517b683f5d450d25d4f1350e7735f490fd636eb8007cbdb8f607afb9d47c7a582f45a61cd3be7f6c6612fc743d65b500a255fc90ea6bb1bcd2a12bb340b8fca40e1536787d31"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 681.106549][T16331] UBIFS error (pid: 16331): cannot open "", error -22 [ 681.111506][T16330] binder: 16323:16330 ioctl c0306201 20000080 returned -22 [ 681.139911][T16307] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 00:11:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400048000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:20 executing program 3: r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x3}, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = shmget$private(0x0, 0x400000, 0x4, &(0x7f0000c00000/0x400000)=nil) shmctl$SHM_STAT_ANY(r6, 0xf, &(0x7f0000000000)=""/79) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=@newlink={0x60, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x2}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x60}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) [ 681.277046][T16438] UBIFS error (pid: 16438): cannot open "/8 7&ׅ3 W *Q{h?]E %5w5cn", error -22 [ 681.326889][T16443] binder: 16440:16443 unknown command 0 00:11:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xffff, 0x100, 0x7, 0x4cd, 0xf}}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:20 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000140)="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", 0x1000, 0xffffffffffffff80}, {&(0x7f0000001140)="1909f68ceb98669a4e4982ae7dfbeea8644e146e19d0dcd567bcbdaf20b78b3ebb98c0b880297bd08a0a3161d7ec32688b496fba5e33a06e816dd42d48674172fc5bdc226778a186b0d92d7e8426c2f9266011a90a9e7370e90c5dced5cf7d6ef801dc6fe0260d4c37b50c137d4f", 0x6e, 0xd67}, {&(0x7f00000011c0)="8db7b2fb3cdd8a02f96b55f2f0d33d7c9f6334ac82d5b2ee62a7bcfbfa0a6510bc3b8cf3e3a134def9e32d199a48df81754a9ab59330d18d8e421af3b9bb23b41e2e1c7ac78036e32653c5fdc7decbd2140f95f80cbd96c59192019dd70d5712ecefab2368bcceb020bfe5cc370d566c970aac26b00eb3d1858cccc61d0e47bce883026e72fe5ef18bd12fe9adf88d8f5dac4fa73d68a05b1b740c375e4dc66996c9eb43597212cf8c6395aeddeb27179767e0e6aa581464963b6eff92be65cab53458802f822747b986140a170eced8f99d29b3ddbaa95cedb3b29b0f82371847d5", 0xe2, 0xcc}], 0x2000020, &(0x7f0000001340)={[{@ref_verify='ref_verify'}, {@discard='discard'}, {@space_cache_v1='space_cache=v1'}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, 'GPLlo,!ppp0ppp1proc-'}}]}) [ 681.388551][T16445] UBIFS error (pid: 16445): cannot open "ubifs", error -22 [ 681.413632][T16448] binder: 16439:16448 ioctl 4028700f 20000080 returned -22 [ 681.431491][T16443] binder: 16440:16443 ioctl c0306201 20000080 returned -22 00:11:20 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6c000000, 0x0) 00:11:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440004c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x406855c9, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:20 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='#! ./file0 v'], 0xc) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 681.640749][T16460] UBIFS error (pid: 16460): cannot open "ubifs", error -22 00:11:21 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x74000000, 0x0) [ 681.660096][T16459] UBIFS error (pid: 16459): cannot open "", error -22 [ 681.733424][T16479] binder: 16465:16479 unknown command 0 [ 681.764362][T16479] binder: 16465:16479 ioctl c0306201 20000080 returned -22 [ 681.769849][T16480] binder: 16464:16480 ioctl 406855c9 20000080 returned -22 00:11:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400b63000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) read$rfkill(r3, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_RUN(r5, 0xae80, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000080)='%e\x91h0\'posix_acl\xdfaccVsse\x00\x001\xcao,[ppp0\x02', 0x0) 00:11:21 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000780)=ANY=[@ANYBLOB="903df2adff124706559ce7f6de46cd5366cdd8af33fd875b03b18ff14b717fee966e59b6c1683499c4f1aca086a045af54f7ba6aecec7088c18b857ffa"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x8000, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x7, @ipv4={[], [], @remote}, 0x80000000}, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)="6606bd131841cb0cee689e5ed055e7961d1d2774b9780eb31ef89b6ddd0607ce7671a6c350db61810a82039a5327b4c37b7764cbe7267e9e7e45eb928608dde8c887e087478e66fc3c990f369fa31a99d9ec5e47cd44ea1b24cd53a0923615502324432f923bb55926400df26b96130dbacba37e9580615986ee702c58079417a6c9817d98c13411d8eead5ae447364bd3b252799f4b01aad1819af553ac3ec6f9cfd7db75b03ab7ca6a9b01d0e0624c9628227b9d91e9a67a6204e59d15fc47ee20f0f8611aee8cf2f2a1a740b7d7b014ab2220", 0xd4}, {&(0x7f00000002c0)="9be9c020187bb13b23562b1d91098018e5861960c18f03c3e78a9688b645b83808b561b90ffc25aeecd879f921f335e9647f56f45c6645ba5ed75f711206091409898eccd20a532a998480c4e470b38373c3da342761c1a83cad7054d3ddea2341027fcc9e50e758", 0x68}, {&(0x7f00000000c0)="ba7fbfa0e2a2539d74", 0x9}, {&(0x7f0000000340)="8913cbeedaa6840f6d32cf51a9a52fac61b15e6a7e60e4a452422d10bdffc4fbf3e40043e429fcc9480bc5bd4bba191ca5c6df40576f45b38fa9156f72729aca06f208319ab16646b9c2a0359bfc", 0x4e}, {&(0x7f00000003c0)="d7a7ee275fb1fd98c813684a8539ac1f519585336c8a529b61ce62d17be77b3876b02d63907a304f4f7130975d66cd97248ea8a604037828bd64eb90ca5b1d72810d015fd4bc42799fb33096d1689845bbe6c486fcf0ebe3c5c3d8ca89999dde52494db4f0251ba991db3827e2d9da88846d167be06f11a66e30f94e44f3a45c0aa4d52af0d91b43fcfc2385574b3483f5a56c80a589e4509077b793686dd9523de7f4d5e6ff9968d0eefefea2a543", 0xaf}, {&(0x7f0000000480)="6c271627ae3dabdffd087ce4e123ef1a8901f3e7501c5b9a6daf7afa16427ece85df38d8f358703bc97e9b06ccca6a55a70735045e4b538ec9589fe2cddf203e430c3e96c4510def0101f97b78b3ce79e9b9e23fcc43f65cb06c3ba01cbb89c30636f4a49b18bc956708ddbc4efc4376d9b5c5a83fabc2a2dc553d11fa89f34154acf910dc8ad63de15cef64fae43eee10253f", 0x93}, {&(0x7f0000000540)="01ab11467412926946335f7afe1fbdec4b204e26e97da75e3f8bbea0fbad2ba3ad2f5ed99b69fbe9757a6bc951810ec224f4e01ec4f7d52276a45d0fddfa5d9d9861d1a18efccb5571b5c6f65de641b72dbd1d3c00088658da20c2fe8a25a1c9d6a9d878226b30c1ddd46fab1b9f37a21d31a80dfac75330aeab8c8d1b4b1112bc01d35a6ec29e40fa4e", 0x8a}, {&(0x7f0000000600)="fcfc5aa6ea6740", 0x7}, {&(0x7f0000000640)="b0c7fe926a50ec5b671c4a6ff0e05caf0877dba97be420289f4dd25a68a8863a53302af9c3", 0x25}], 0x9}, 0x8000) 00:11:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x800454d3, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 681.802353][T16459] UBIFS error (pid: 16459): cannot open "./file0", error -22 [ 681.977412][T16584] UBIFS error (pid: 16584): cannot open "ubifs", error -22 [ 681.999836][T16582] binder: 16581:16582 unknown command 0 [ 682.044260][T16582] binder: 16581:16582 ioctl c0306201 20000080 returned -22 00:11:21 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7a000000, 0x0) 00:11:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400c63000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 682.115815][T16592] UBIFS error (pid: 16592): cannot open "=GUFSfد3[KqnYh4񬠆ETjp", error -22 [ 682.133779][T16592] UBIFS error (pid: 16592): cannot open "=GUFSfد3[KqnYh4񬠆ETjp", error -22 [ 682.162589][T16605] binder: 16589:16605 ioctl 800454d3 20000080 returned -22 00:11:21 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0xe, 0x5, 0x1000) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="0f648eeb000000c1094166b809018ec866baf80cb8ec0b298cef66bafc0ced660f3881b2d50500000f30f30f02f266baf80cb8163a508def66bafc0cec0f300fc73f", 0x42}], 0x1, 0x18, &(0x7f00000001c0)=[@efer={0x2, 0x800}], 0x1) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:21 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x8cffffff, 0x0) [ 682.284292][T16647] UBIFS error (pid: 16647): cannot open "ubifs", error -22 [ 682.309582][T16650] binder: 16642:16650 unknown command 0 [ 682.346863][T16650] binder: 16642:16650 ioctl c0306201 20000080 returned -22 00:11:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400d63000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 682.456376][T16710] UBIFS error (pid: 16710): cannot open " ", error -22 [ 682.527721][T16711] binder: 16708:16711 ioctl 80086301 20000080 returned -22 [ 682.537907][T16713] UBIFS error (pid: 16713): cannot open " ", error -22 [ 682.588462][T16716] binder: 16715:16716 unknown command 0 [ 682.632014][T16716] binder: 16715:16716 ioctl c0306201 20000080 returned -22 00:11:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x8188aea6, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) fcntl$setlease(r3, 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x3f5, 0x400, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x488a4}, 0x4004011) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:24 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='coda\x00', 0x0, 0x0) 00:11:24 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xc0ed0000, 0x0) 00:11:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400068000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:24 executing program 3: keyctl$instantiate(0xc, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty=0x4c00}, {0x2, 0x0, @loopback=0x7f00c700}, {0x2, 0x4e24, @empty}, 0x96}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @rand_addr=0x7}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x00', 0xfffffffffffffffd, 0x2, 0x1f}) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) r5 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x97ba, 0xa4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local, 0x4}, {0xa, 0x0, 0x4, @mcast1}}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r5, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x781}}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001240)={0x84, @local, 0x4e20, 0x204, 'none\x00', 0x17, 0x1f, 0x5b}, 0x2c) r6 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r6, 0xc0185502, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r7 = dup3(r2, 0xffffffffffffffff, 0x80000) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000000)={{}, 0x5, 0x7, 0xffffffffffffffff}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(0xffffffffffffffff) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) dup3(r1, r8, 0x0) r9 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000440)='X', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r9, &(0x7f0000000240)=""/112, 0x349b7f55) [ 684.880753][T16726] UBIFS error (pid: 16726): cannot open "ubifs", error -22 [ 684.885463][T16729] binder: 16723:16729 unknown command 0 00:11:24 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf6ffffff, 0x0) [ 684.931882][T16730] binder: 16721:16730 ioctl 8188aea6 20000080 returned -22 [ 684.936635][T16729] binder: 16723:16729 ioctl c0306201 20000080 returned -22 00:11:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440006c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:24 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x23f) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:24 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf9fdffff, 0x0) 00:11:24 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x101200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000180)={{0x13, 0x1f}, 'port0\x00', 0x8, 0x0, 0x9, 0x3, 0x80000000, 0x3, 0x4, 0x0, 0x7, 0x1f}) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) [ 685.273999][T16844] binder: 16825:16844 unknown command 0 [ 685.294984][T16844] binder: 16825:16844 ioctl c0306201 20000080 returned -22 [ 685.309026][T16847] UBIFS error (pid: 16847): cannot open "./file0", error -22 [ 685.700563][T16763] encrypted_key: insufficient parameters specified [ 685.832435][T16763] encrypted_key: insufficient parameters specified 00:11:25 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="db8db1baf5ac31dff76e00023d95379ac3615071de103a3e1b569c96ee5801a42362c9dc32aee02623d38a84ef17a9e91204976830d88ca1a5abef59b501d6ac1dca33b7f3ab44531b0e2040d9071c33b873593663eda7fdf961b42136a62385e0ec99610f2f96f3553e7e5ce1b5b672c6"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400074000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:25 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xfeffffff, 0x0) 00:11:25 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) membarrier(0x40, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2, 0x74}, &(0x7f0000000100)='%eth0\'posix_acl_accesseth1lo,[ppp0\x00', 0x0) 00:11:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 686.007179][T16975] binder: 16970:16975 unknown command 0 [ 686.028415][T16975] binder: 16970:16975 ioctl c0306201 20000080 returned -22 00:11:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440007a000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:25 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000580)={0x564, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x8c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x170, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x15c, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x130d58bc1f2bc8bc}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xaf0664b0a1a82180}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x108, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xca58fae6f32f0584}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x40}, 0x45040) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="0a0775e5b3e4ddbfcb54dbb700000000", 0xfffffffffffffe7a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = accept$alg(r0, 0x0, 0x0) r8 = socket(0x10, 0x0, 0x0) sendmmsg$alg(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x84000) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r11, 0x200000}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback, 0x111a}, {0x2, 0x0, 0xffffffc1, @dev={0xfe, 0x80, [], 0x16}}, r11}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {r11, 0x1c, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}}, 0x90) recvmsg(r7, &(0x7f0000000000)={0x0, 0xe7030002, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x8, 0x0, 0x200e703, 0xe7030007}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) splice(r12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) io_uring_enter(r13, 0x3, 0x8000, 0x2, &(0x7f00000000c0)={[0xff]}, 0x8) 00:11:25 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xff000000, 0x0) 00:11:25 executing program 4: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc008ae88, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 686.042998][T16977] UBIFS error (pid: 16977): cannot open "ۍ1n", error -22 [ 686.338996][T17058] binder: 17014:17058 unknown command 0 [ 686.355066][T17058] binder: 17014:17058 ioctl c0306201 20000080 returned -22 00:11:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc01064bd, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 686.428747][T17106] binder: 17101:17106 ioctl c008ae88 20000080 returned -22 00:11:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400b89000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:25 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x1, 0x0) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000340)={&(0x7f00000003c0)="1523f3fb48a143e6849e835c456a2f5b597f6ca549b0523a5b3f7e2352fd4311f181c53f0b6d208ab9ca619f37b9c1676be483657e61baac02dbc49d903155ba45efad4416c37aafab5985931ff67c12d4ad672a5ace5abcbb7bdc0ddd43168279f603157d675ee1861db31c3ac7a0d9964e8d6b673a0d7a1311b1342e8f35386afd7307f8ba3dc41a5d33c3ae8aec961eab081fe8dbff80963a75f45585a07d438bbe6eb3ded044e21654af2cee15c3b333f1cab52aaa45501913cee24d4121ef92d30c01ff57c2f529b1cff905613ac9418f1db7ff1b45174a1c0710ca9084bdd1b6ea158b1d8c3b11dd", 0xeb}) r1 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xff, 0x68800) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x10, 0x4, 0x4, 0x401, 0x84}, 0x40) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x4, 0x3ff, 0x3, 0x6, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000300)={r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x10, 0x4, 0x4}, 0x3c) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x15) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000100)) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000001c0)={0x5d, 0xa5}) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x2, 0xcc0, 0x0, &(0x7f0000001140)="afa55ea5081d1dc7610da2290f9e", 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) accept$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000004c0)) 00:11:25 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xfffff000, 0x0) 00:11:25 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) 00:11:25 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 686.458322][T17104] UBIFS error (pid: 17104): cannot open "/dev/vcsa", error -22 [ 686.672730][T17114] binder: 17111:17114 ioctl c01064bd 20000080 returned -22 [ 686.697489][T17117] binder: 17113:17117 unknown command 0 [ 686.742020][T17117] binder: 17113:17117 ioctl c0306201 20000080 returned -22 00:11:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000ff000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:26 executing program 4: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 00:11:26 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xfffffdf9, 0x0) [ 686.828242][T17122] UBIFS error (pid: 17122): cannot open "./file0", error -22 00:11:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:26 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 686.916521][T17124] UBIFS error (pid: 17124): cannot open "/dev/vcsa", error -22 [ 687.078450][T17133] binder: 17130:17133 unknown command 0 [ 687.139511][T17133] binder: 17130:17133 ioctl c0306201 20000080 returned -22 [ 687.162084][T17139] UBIFS error (pid: 17139): cannot open "", error -22 00:11:26 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xffffff8c, 0x0) 00:11:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044004f6030005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 687.182896][T17139] UBIFS error (pid: 17139): cannot open "", error -22 [ 687.285967][T17146] binder: 17142:17146 ioctl c018620c 20000080 returned -22 [ 687.300887][T17145] UBIFS error (pid: 17145): cannot open "/dev/vcsa", error -22 [ 687.428530][T17152] binder: 17149:17152 unknown command 0 [ 687.461728][T17152] binder: 17149:17152 ioctl c0306201 20000080 returned -22 00:11:29 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:29 executing program 4: creat(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000040)=0x10001, 0x4) 00:11:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:29 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xfffffff6, 0x0) 00:11:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404040630005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:29 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x521080, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0x18, &(0x7f0000000140)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x8000, 0x2, 0x8000, 0x7fffffff, 0x0, 0x8, 0x0, 0x6, r3}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xaf930100, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000f6ff0000140012800a00010076786c616e0000000400028008000a00", @ANYRES32, @ANYBLOB="cfda22fae580aa8f6d84cfa01659eb4aea5916da8c9d05dd2967cef5716f0e28709b29aa4d452ec654b08328927288ee054a0526dfb5e8a8dd70320cfc608b9f140db0daf6d8bc9155384902b61dbcf403e25b8a5d0fb3f90002e90651e6b938456f5f3bae8ee6b3fe2375e3890b5241d600004e20964737d5ae2c9dd66501879e646100a589b200a758385dde9ab05fdb3679e718ce3ebdbf735d5cdd179aafe69dde374978db0c51d548ec9225cf07b200"/190], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x18b8, r5, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_ASSOC_RESP={0x637, 0x80, "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"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_FTM_RESPONDER={0x1254, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x38, 0x3, "38efffc2a8fd5ccf35ac63a44edaab201855446c4ec9fe641cde90d53ff0e220599b4e8c1ad830509ea6e190aa9a3dd50ae59954"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc7, 0x3, "ec26d6520960a057b7642db657172f62a6b1f3a0e45eb56d8da90a08ad783252a28171dac1933d92939d0a6c10835fdd190f1db6158dad37b59162c6bec64563aa9e4c0aec33f9c25892bf0261a190ffcac5afe80526503b61df9998940717d3085fa24a81c0fb3e687e67fcf3c01c98a93b248e9c99dd09f509b3ea058d71f17187007c320ab2a714ee1713ecd3d64b6d92469ce97de832c67616692d05334bb14c11a0d490413cbace59931db873447b37ddcea4febab3f5547f69fe62ed43d8904a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_LCI={0x9, 0x2, "f5f1714d58"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x64, 0x3, "40358de3cdda3bd6e4bfc8a4c01683bf526e24cf55e2d4103df2ead0e52142f5387d17422e7e84b288f76ab5f49261efa02e4e37b1df00900271d21d47b47ad6ec84bb4043320d48a9d94bf6d0ba4304e6c3a6eb7d2cedfa3e0a329d39d9b0c5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcd, 0x3, "e560c7592e01fa168f344c0c650f4046f9e064d901a71c86d26b2f23c417c6997cb828c9dd453e184fc9059b92e70bffa15b3f4e1130bea0f97682c0cb555a8147c50a18e259fe89811a34d507d1fcb709eddc9d1b1fb50a0497f282e9b5d8caf4b5876fdd9f31c4f00ad45a8fcf9a931767551cbf0bd1ba656610512316dde1b4d1653a2c76294b29ac6953e0650b10f1067be15316145ec257cf72f5e4eb814bbf8984caeb5ef13b321e97e986cbb7f11374718ca3ca0bf29268baef31e4ce7ea57f20e40e28cb17"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_WIPHY={0x8}]}, 0x18b8}, 0x1, 0x0, 0x0, 0x10004010}, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0) [ 690.321933][T17266] binder: 17261:17266 unknown command 0 [ 690.343457][T17268] UBIFS error (pid: 17268): cannot open "./file0", error -22 [ 690.354957][T17266] binder: 17261:17266 ioctl c0306201 20000080 returned -22 00:11:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0205647, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:29 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xfffffffe, 0x0) [ 690.362957][T17268] UBIFS error (pid: 17268): cannot open "./file0", error -22 00:11:29 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg(r0, &(0x7f0000001400)={&(0x7f0000000140)=@phonet={0x23, 0x7, 0xff, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)="2350e62ee581d0292d187367ad6e2d2a94456f39c05e905b46d72712c2fdfaeb2620f52083ac65182030895caef1b92471fbc3608862279623c106e340427495b4c623dba0c49a1c3e25a31f1e45697ffe142393ab56ab2ae9b5a7124156daa2f079772b116d21aeb062b8bf23758bcf1129910d4887ee72b165078753ee6c873811e60825a9eb63fdd69187d4581ffa86a7bd7b341c1dc318c58f30692bff7ed7f8da11561c9445f5f0c1311208fb0503d0f55e3ceeeee4f9cee15035c991e0dd0f9d61e457afcfc88fe14c83a130e1c7de0edee6e9", 0xd6}], 0x1, &(0x7f00000002c0)=[{0x1010, 0x10f, 0x9, "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"}, {0x30, 0x110, 0xfffffbff, "8d8dc9a09d1df82548e0caeb150ffbcd7e239cd53fdfb16f4512b654"}, {0xe0, 0x108, 0xdc8, "281d3739a9a3ce80d775fc9bc2d78ca351003a74d2cd3eb75fbebe8146ab015133f487ceb1e6f7aaa3cd9c31db4d67378c2cb984f16a27d1c573799cd990db5ca5e91b9550e34c2ba9d04249ac1bef4e80710ab2acb5ff850db5edb4a2ddf8e833608d1090f431fbeb3b60e79dd30e8f72bdbd6259b07610edab6ccc415b54cff1818be2fd2c166c186b21ec2eee2e2df65aaccdafd724584b449540afc2806cf9e5ac9f5479e6d85869f58d1d87fcde05ab8f5a15d8388cc3483c3eca7551cb3bc0a15ec79bd0e39fb97f06fc91"}], 0x1120}, 0x4) open(&(0x7f0000000040)='./file0/file0\x00', 0x400000, 0x10) 00:11:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000105630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 690.397993][T17267] UBIFS error (pid: 17267): cannot open "/dev/vcsa", error -22 [ 690.537067][T17277] binder: 17273:17277 ioctl c0205647 20000080 returned -22 00:11:29 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:30 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xedc000000000, 0x0) [ 690.709715][T17328] UBIFS error (pid: 17328): cannot open "", error -22 [ 690.737952][T17328] UBIFS error (pid: 17328): cannot open "", error -22 [ 690.739697][T17350] binder: 17316:17350 unknown command 0 00:11:30 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/26, 0x1a) unlink(&(0x7f0000000040)='.\x00') [ 690.845409][T17350] binder: 17316:17350 ioctl c0306201 20000080 returned -22 00:11:30 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:30 executing program 0: syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000380)="1020f5f20100070009000000030000000c0000000900000001000000020040000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c00000010000000140000ff0000000000000002", 0x69, 0x1400}], 0x0, 0x0) r0 = getegid() mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x12400, &(0x7f00000006c0)=ANY=[@ANYBLOB="6601007e9f594aaf444913e7d7f11027efd82e33ae16346a29c8054bf51c7426", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0, @ANYBLOB=',allow_other,blksize=0x0000000000000000,default_permissions,permit_directio,\x00']) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x2000000, &(0x7f0000000540)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@common=@nodevmap='nodevmap'}, {@common=@loose='loose'}, {@rq={'rq', 0x3d, 0x7f}}, {@common=@dfltgid={'dfltgid', 0x3d, r0}}, {@sq={'sq', 0x3d, 0x2}}, {@common=@debug={'debug', 0x3d, 0x4}}], [{@fowner_lt={'fowner<', r3}}, {@subj_type={'subj_type'}}, {@context={'context', 0x3d, 'user_u'}}, {@measure='measure'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fowner_eq={'fowner', 0x3d, r1}}]}}) r4 = socket(0x200000000000011, 0x3, 0x0) r5 = syz_open_dev$vcsu(&(0x7f0000000480)='/dev/vcsu#\x00', 0x355, 0x400640) move_mount(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r5, &(0x7f00000004c0)='./file0\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ocfs2_control\x00', 0x301000, 0x0) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f0000000680)=0x9) r8 = dup(r6) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r9}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x400, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r10 = fcntl$getown(r8, 0x9) timer_create(0x5, &(0x7f0000000400)={0x0, 0x9, 0x0, @tid=r10}, &(0x7f00000007c0)) 00:11:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:30 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf0ffffffffffff, 0x0) 00:11:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404040630105630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 691.049409][T17400] UBIFS error (pid: 17400): cannot open "", error -22 00:11:30 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r0}, 0x10) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:30 executing program 4: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4048044) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40400, 0x4) [ 691.082199][T17400] UBIFS error (pid: 17400): cannot open "./file0", error -22 [ 691.216844][T17412] binder: 17406:17412 ioctl c0306202 20000080 returned -22 [ 691.273772][T17414] binder: 17410:17414 unknown command 0 00:11:30 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x100000000000000, 0x0) [ 691.315013][T17414] binder: 17410:17414 ioctl c0306201 20000080 returned -22 00:11:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000205630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:30 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x4000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 691.408597][T17421] UBIFS error (pid: 17421): cannot open "", error -22 [ 691.416693][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 691.416709][ T27] audit: type=1804 audit(690.659:610): pid=17421 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir317367714/syzkaller.bOh0nh/529/file0" dev="sda1" ino=17327 res=1 [ 691.515772][T17421] UBIFS error (pid: 17421): cannot open "", error -22 [ 691.572038][T17488] binder: 17468:17488 ioctl c0306203 20000080 returned -22 00:11:30 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x200000000000000, 0x0) [ 691.618365][ T27] audit: type=1804 audit(690.759:611): pid=17486 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir317367714/syzkaller.bOh0nh/529/file0" dev="sda1" ino=17327 res=1 00:11:30 executing program 4: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0xc0000, 0x0) lseek(r0, 0x8, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) fcntl$notify(r2, 0x402, 0x80000014) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8100, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e000d000000e8bd6efb250309000e000100400200ff050005001201", 0x2e}], 0x1}, 0x0) 00:11:30 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, r5, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048030}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001840)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r7}, 0x18) connect$can_j1939(r3, &(0x7f0000000180)={0x1d, r2}, 0x18) r8 = dup(r3) r9 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r9, 0xb0bb) sendfile(r8, r9, 0x0, 0x200800100000001) r10 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r13}, 0x14) getsockname$packet(r10, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r16, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r17, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r17, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) fcntl$dupfd(r10, 0x406, r14) [ 691.663720][T17536] binder: 17516:17536 unknown command 0 [ 691.674400][T17537] UBIFS error (pid: 17537): cannot open "/dev/vcsa", error -22 [ 691.682271][T17536] binder: 17516:17536 ioctl c0306201 20000080 returned -22 00:11:31 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404004630205630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:31 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x300000000000000, 0x0) [ 691.918812][T17542] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.928252][T17542] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.943082][T17551] UBIFS error (pid: 17551): cannot open "", error -22 [ 691.961058][T17542] device bridge0 entered promiscuous mode 00:11:31 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 692.091202][T17589] binder: 17552:17589 unknown command 0 [ 692.113459][T17589] binder: 17552:17589 ioctl c0306201 20000080 returned -22 00:11:31 executing program 3: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:31 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x400000000000000, 0x0) [ 692.194418][T17654] UBIFS error (pid: 17654): cannot open "", error -22 00:11:31 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:31 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x500000000000000, 0x0) [ 692.425402][T17668] UBIFS error (pid: 17668): cannot open "", error -22 00:11:32 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x600000000000000, 0x0) 00:11:32 executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) shutdown(r0, 0x0) sendmmsg(r0, &(0x7f0000004680)=[{{&(0x7f0000000000)=@phonet={0x23, 0x1, 0x7, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)="b56899d4ff2274ac2034294da5c0df6bf96d33bf2515be199a22cfea7913f01ca69d8ea88d128d48075b76c850c759678a82e2d9cbc332760c8e46ca03438d735226e49e6379d5136ccd1037", 0x4c}, {&(0x7f0000000100)="e1eff3678f71a35e0b33422572fb36d4ab28eec4805febf4d163587ed748be7e4790eeea6a446bf348e1e11733b90d2c67cd92fae5bef3453691c5ea652ce965f97e1d1101b1d13c78d319809501dc8f277121306b57d73351cbf3173d264db8d4d39198fdc8e0fe6d2b24419548ab61c0ad0a6a61e0779aa5f7bcd2d01eab79038f43d6729972146bef59096f3333f3444df3f0c0fb19a99ab93bac96c2bf60385d904feb31c3a51e743607d075f461928f724db5df7b0e5c44b83f161b824bc2f5b0d2c8575c3841cdaefd8b7a70d824b98d298d4a6812524c38ab6a04f3423814c56c6435ef600d8c0665a6f380ac", 0xf0}, {&(0x7f0000000200)="26b4cd0f872ca68df5940236649e9d6276b4a3f8bcef18d5b94eeb0acda779373f08169be0cd91e3952b0a80300b5e7ee0e1448d535081f3baedffdbd4cffcc64e823edbc7ca2a183dabc0e2c9de21973947b52d666582edfdca88e6bd6d8c609bf000d7452006542c70c00ed836ede02ba23170d3612ca38c083ae2b5a144a18b67dfd275ab7f2e4680fd9d7cd61696aa3e18f83fcb983a6cd094ec3f2d20b2831379cb51d842697f0b4aabad7f8853d47e46969fb8577e24875b09d07011d8aad29b102dad432a715a175e567e9b92986d4f30167bb0bb0cb759e1a22b684d4a3e59", 0xe3}, {&(0x7f0000000300)="151767bb1823064c10291117b1d939f58f99cdd2cb6b32150d3f14db89db168714e03f4e1dd37e378e6237f0d8d1f6204ca83443c653821906363676d717a5dc2342225f0fca76c715adf7641ed4b57bf060cd0f3efb9cd6a9ed276df3d2d65aabf7bb0bb558425e52de9f19457052d35871e240ef4e551c0506359cc08a41d3329224c54d78c8ac61f3ef0c945fe379632bc728a795ba0025b2608a8d254237b9ab7ad4c6b92a468f2e0ccfd2d21b578d9661008d29044a68117c68315e2fd09083a098bafae6bd4b31b434e4b64325f2c3fe80e8d9d31ea1b8be2c5679e86bac6fbb4ad414dea402a9d572b39a7e58", 0xf0}, {&(0x7f0000000400)="b905781e038805f379e4ead50d38828c2a63d2e5326f3fc0e4b06e2ab44a1e879aef0c68544000ea0d305a74f3313b3090922ba490a65d2a469e2efa8abe1cb1b4437f660ea9db17166be72d3bd98cbe4fc5121677c9d9ff8dd30f59728b20ce9dcfe8ef30553e3a41cc302601b39bcad1028133b19c15515d5d53df6261109dae8b6112494178936d28cd9df8614d05e57653edf37e7bbbd8957d795aa8ebe10fcf1b2042e4a0fc05a8752d745cf957d1a8d7a0197e0593a518e175c32a74", 0xbf}], 0x5, &(0x7f0000000540)=[{0x80, 0x112, 0x20000000, "ca4222e2570826e1a259329698c3b1be8d4d287f7767721de622b50c2ad74a7a1e33be8fc010c1fecc5aef9c29db140f3877f52d8ab522458d11b4452946fd861805bd56814e349a32440b7123b56d48a5532017a2ff05e5f2523aaf02476d1eca2ad1469c8bf0a7147f30a4d013cb71"}, {0x40, 0x117, 0x3, "c656cbdc3db42f76c8129afd01a0424867478163def6e5441731683d7ec51317594c98006e8af3dce6c0d634005a6755"}, {0xa8, 0x107, 0x1, "41f0b0f0db3873dbf343a05fbb820a98a0ab78696b3e1eeeeaa09591cc38f86cf329b5f292f03a5a9d9dcb4bf0da45e236efdb041bda5df11ed52a0896cd45ae4907a5738677ef3c21bae67f4ed2f2f8db04acf7f7bafc6df5b7530a317137730d2c163f1abdd76bf544e2539aa14823c8660df3b715efa43a754247db544ac035745e57e814de6195bf890d3daf57d04551515de38761"}, {0x28, 0x103, 0xff, "9a7569a1f446f1e83e0d1afd5f4b37992736f0f3283931"}, {0xc0, 0x1, 0x80000001, "8c3bbf3b2da0979f78079f5f3dc3e360d424aec274e87b40309e860793bb2d511c8f9b618310a7e9169aadbe85f8c8c8774d4b8c118eccf2282a7501447586478ff957f1cb1100c2e1c43d9e1bf78f0932fe9910f555a23be818427cc38fd5536c59c7765fe456de4e7035cd2943c5a249ace6be6b681ad8c97538742a1dd14b015fa4b9a0fc0b1700f64a5f5802d0da57529e3258950bafe53c3a54971a1fc458f5ce43bd3881845e2a"}, {0xf8, 0x10e, 0x4, "25f222b5c18a086963139c2c42640133cd14efb2f4643e3b070470ca8aa28c095803bdd8377ddd23029c087e24a7f19dd70bfaeaef81ac599f49310e2d52b2d43e10be84826f7d31594f3361c73da35865dbdad2bcdbb9f80255ddff85a14af8b223cd21559a4d2d70f2080ca6d2aac7c7313ffd8f6538b84b9f2d50068ad740b5a42749e91b809f10bfa7ca0fe56b15b7e3d4687e18d28a807519575a5b6badb457ab635e972d8dcee14d5be670b2c886be673c39eab885c42ad657b64a50adbb7716bf1ccd3549e4838f5ea3b736d99b5228f10dcad09fca1638d771b7fa2527"}, {0x10, 0x10c, 0x9}], 0x358}}, {{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f00000008c0)="1418154885e7b3bd03593eb2429664d489707af15254a77b7ae00ef2d4cfdf2c16cc6898f77ae36e7eeefa1d60392b3c63e135613e6be4ae8e7b5f06ac5d7288a6d6b0d113818a1af95704eb195f44a8087c325efcadc398ba06087a22969527d9b206a84bd68a251064230501b3e59f402f2592f24f184feb6abc601a60d406f0d224f29beb9f8a547a6a8e796693df5b18", 0x92}, {&(0x7f0000000980)="ab5053c109ce454d7bc07fc3bf24a934521ac747b09bf348168860c98eee23aac137cb561fa6931a96984d4bf7246afdf66b50b242217f943227b102ff98dabff14b41f17bf3", 0x46}, {&(0x7f0000000a00)="d4bd62612c59c98bbb42ad4b07acee4448676745511b83cb1414505ec7d1c9a9c63628f81b04ece001f2df3d6e424f5b8b93344f002d8b01aa439256c5987ab9f5492b68bfeb271f7eea411d29bbd8923b4747ee96ded06ca4003fc9ef59c21ada28477be12bab9dc4e77e68d3b2a4dfb5089456bbec0b6719a53abdaffaba5d1d7d2a8ddb5d508595b26c523e3b8e04bb87498e7491b1b5399ec13da688063580f98ff22489d12d571cbf", 0xab}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="210b7bd12a8b", 0x6}, {&(0x7f0000001b00)="489812058029935eb1eda25808158c6738ba310a460469783a0b574492d17ce0e9e51a61b2f38fad0ba1539aa057a3bb41e4c77d92da7c1c746a793dd9e71aa30c41e0b6502f5c50bdcd34de78cf4091a4c8808e735097159a0a2e54f32760c56d51376d63bfcb53b0913e4400aef38655a22eb69906a99213fb367e3f55fe90b775ef23fe1aa1a5c97bc6ec362e2792fc4906e48fe2e50117ad12b31fabd620334f877f0b98fae00ee350", 0xab}, {&(0x7f0000001bc0)="e612b4b3e04285ec0325121be3ac75028bd6394b924583d1bd790b7354aa8008972b5ac0c0d9e5591ea184431e44bb4f9a6cd48a422fc0a9bc23948d88218585e86213c14afba68f03d60718098c95b13d2615ae83f789ed9f3dcd5e330badc34ef013ecd09d330dd72a616eb3329dcbc2d980e3aa5b66ff6ea04401143ca61a86938fe88837f9befd7fa1dd72789cb75e4f1e5bd8e2ad275d6a9385b61991cb450acf59f7", 0xa5}, {&(0x7f0000001c80)="a5f3d1f17ae10d27e101da1ac308aaa9f6844d43e83a93a15b9430192d60fe335d47cb4a7eef26a3", 0x28}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="17ecd66c7c632228a9a36f72b2399d3b5347ddf581c2e13c59874e8fe56e95e0a6e9d838f199e5dd1747000bd484031df71c7dd73f26b37583ad7b4abc0e560e8d35682b03e934af7426a90d1c8a06de", 0x50}], 0xa, &(0x7f0000002e00)=[{0x48, 0x0, 0xffffff7f, "1fbe224565a97101b5a7ed7774029a05f956338a79bcff339e980527c12d7c7e489b7f79bb880479be7791352aa80b603a796a1764"}, {0xe0, 0x115, 0x0, "92e52335e300412437568af768d3b73d9797c0e83ee1bbcf738dd34a28d834bd700ff4f9bae7deb1c19425600f5e30d1256aba0e423d5e9dc250c214001e8bbf1a101d77dfe248d2c94f9a1c23f57fa8adb7333778b2c84507ccdde52977b4dd2d821f207080efb983200864e96a74b692f11059d76ccd8f6429a96015c98566e967ffc842b10abb778bd27d58834816f0bd01030681264a0b4291797f1f5e1e6f5f5cd413d18bdc00185158c8be79eb2e14edcdace6ad6b7f9373344615fd57daf5cb7ff657184a8b4650"}, {0x48, 0x111, 0x19, "9035f66196820d3a2179a34e311065fbf26a9f8a0c1144701497d0cc8ad4bdc6b854fb89c3bee2d60d0af9e0cc2b17742193264a0cac45d9"}], 0x170}}, {{&(0x7f0000002f80)=@sco={0x1f, @fixed={[], 0x10}}, 0x80, &(0x7f0000004200)=[{&(0x7f0000003080)="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", 0xfd}, {&(0x7f0000003180)="dbf0cfdfb9afd58b043bc5015ac62a1287ed40e0f013c7fd3d58baae3ff7e8c84c528c8f0e523e82184fdb7d159b42faab6229a4ec53fbab8a6a5474475dd059b8ec9e6b4de1f0d7fc461432d8ebf91adc390f2e762335c6daea42eeab9e35b18b236fa5d712d51bd8e3d0f47b0c14ad3ff95b482284774ff9ea910996ba27ae04622b9e40280a552bf837cc0c8dd0a24d2c937e81d139ddbdfaa3557878e964fb2276f6aa937d4d757efc671890f0d8024571a9c739370752e0291eb29ef4de8cc367a85067fe46f95c65f1d13240da649768e78a13078d8cc9f5ac511e806bae3c3bc4a63af738ebf601472f9358730ae9a06c40436038b6c66a23d957df6738a57e280b353d325fc267b3d3c6ccf8c969285f15af106b0e1275e77afd145c23ede9334b8f9ed30e81c9ce460fc3739c0a1944e409dc0140fb25e9870f7c0e26c2d64b37139d0858cf43d5448af35b7f27a39899eb6eb79b629be106b6e86c9dbdf5845d6e38cb530caaf03bf472cdb616b8036cc8f5f94d4a9831bd0a9f12a4bcd1703734726699a19f0ab6b990130b4b78b50320bc7db221388b043e2b28f6ab2f29dffe824bebee353296314926f5ef38f3a6655b02ed99d49ec0b78dacd5ada6a65e0233040d9c5cd328e9c374c1573a4118896f00fe1cbb3c8e3c06b9a59d126d4382a78a7b0414eb7795a822f2eb63ad398ec60cc09c7da127aebf3116234cb0fae88076dc6e8ea118efa0f1c4247e5954d3d6164f39a3dcf2ab25e23a66e8f9d528bcba029cf4340b10987f0b0b920bd92bb2d65b6a83483aeb6dc5669cccc931e8798c6e0cfa87fd7051ca740442c5389a27646862ac5275d3efcf4b4f065c476e7772f26163f5a731c8705ade9de597246c75230dbbeae724bcbf2042a6c655aa4b0d4829c7aecc00054a74ce61bdc432e0fcd1ed16e66887124800a9b6c597f3f8b8c3c6541076fd59076106d9a64c14c45c352edce0d0cce3d44964950f057b8033e6be8e4faad565cca531f6c92ad5512def9fa5f28e5097c7d6ecf57a6a22de9bf835e9c7c95ede53e6391b933e7c5f65851e598c6461f9a44568e20d40b7dc3c8bbc0395321886c27788cd14ea32efd257068d413f0ccd2db52ccccfc05219cf72b52b750f3285897aa24e730cdcb54983f84945528c7b47bc46cf3845d1649dcd5db1b2dc925f77ae06080c0c91212f52d92fd4dfddd8896ff22c4efb76cc8727d0157f1942cbb93874ae1c0c58d985846848ddf2bc8dec5d4311e97536f77bf7ecdc01f9ab9759c939878bcf31ac8c086e124fbe490f2b0d4b1998d0623a38cc15c25a705be3926fa44250b005aa941b5ea75ac75e6af7c4578b371585e01869e01f18d5429999eb016801d7fb75ce7d7fef4c5a4ae7098976a22efd9d3ceace8ea95cac1e64a2134ea2f89b269f90bc31c1ed06f486d5ff1563fb92c1c84b53bb50f0bdad87ef947d5b89739cb9cad5605ac44dbfc55c701d2e2c161e37fd6fb4dab62b02808e84f06ee458305318ec2df2b9b116ec2b278c1091f5b467314d97e4c1dbfbaf6e331ff309c70cdd253a4afed9609bc4769bfbb703f58c08fd9ee17a47c37fce9daeed4b8022d18c1cc1caad072a3e240520216d8445c813dc21789d54ee8b3c98f7f04eea15270c53e57a3416ed6771fef59503b87348be1b9803f610bf1013832f50105133f8c6a39a7867382d5f2b2fe176018abe28779df57e544f8c90cfc5d5623d225b81fa032624ca073c9101b9db91c7bdac2308bef7442ebc4c5f955cd7eb346760de9a0ed8e47411e4bf67644cc91439eb94df6257104237eb5ffce8dbd9bcaf10571efd7a309b21bca082d153298c6104f3cfa08864af059ab28c6a8d66e65902684b269c14a66806c2c9577a796bd80736cc4c4ed5f5bb178f6ad26443204f0e5519ed50a7244822d5a0f4d6162d34c0a44969e13ee030f1e75d3bfe690fa235e45f5f042c22b95491ac84ca7abc0cd33ba1ffd2ec40bd39b0c79fa86e947a61fa1196d46bbef0e06ad3f8dec62994bb79c5dab0972d10a94cde2005fea21049947710f4c8d8d5ed989982755c9e0cc70080ee74aff8807af81863a390930de298adfc053d5c470b197c2d09e64cb25953fcf2ef0325c4b3d4ebcbf3631d97ef58af112d0a93ec055b8ba2a7f18305c99b1666239b3fe46dc751d7088e19c53f9628fbc1ff6b09965656c13f6710d135f06f87de9948716356396dd3bb2a645c7ac24d1f77b00a5081bc16e13095e4f73f531ab5457153866b65dca61c7206ffa6c7887d0fc3fbb09e6469e8c73eb310d6a16da8a197e1f6aac43571329fa0d07a6e1ec93c022ef0b643ce592d9526c06ce2cf13dee24ebcd51f3174385f153d26548e2dc4a5f1d325dcee2cb8ff8a2ec92c5f2eb82c9aec8fd80618d2d0f1a1999eff24af718dac6dc27a1bbc01979d519216f16e109c55bb354870c1dcc0de541d42b922b723be9ffe38841114d8d5f674cf75a2914ad247b1731d57d061d965a6e26c241a122c24d2e161f71b90dfae744815231a53fc18dfbaf2b742b7fe903fb1df8ad36c4498f7324d0918d8edb6331d79154ef79a661b2b247c8a6c532ff396aba9a18503640f15ff9b79d6876538ba924e33fd69e5dd94011697f6c2914d2bff29575512eecfb1a6ba565e9bdf091f99bf47af5bad874043a4774f0a2ed41b9d44c25482797c185efe93a394a01bf68379429de07c21d1354086978e0b937fe3ba47e911852d9aabdf11664b0972a2632280bd813df840314d080ee048b67c0652014f6f8c84ae1c46079095ea02803d05df63750aa9c1e32b5f377cfdb197421428642d023f00c32dcdb0fc7f53ef2ef9dff1d3863ea7a7188b76d3e78c483b339272b4a540903a47ec8cdb9f40577a9935c35f0a45d7df0307652557be6810eef808eb969a541791c40ab77e7eb461d70b4d655cfb9ac3e117fb709bb3395bd65d591016932411712ee3bf4f22e39ad16e5459ee2f03781c32692f377765c4263b3858f5888485851b6092d9f870c63e0ec41d63c5d840c07f95f4c4dacb1e04c9de05b26ec6a75376ac3f7ab6b2b5e6b525aabce74fd48963f01d56ee3a6e3383921e9d930301ca257ed6e12648c4540dce547662d3b61de6110d1392efb1271e315ce6a6e008700018e481b55f1d9d34f8f933c1f5e1bbe6d70b0309ccbd4033d01ab8d803ee785120a45fccc5752562e43a4d33b43822420bd6500e80b4d4eab217b0746b5fa7a3ba3fff46bb0167ce7e028cac58620a388e257a9e6406eb27e23121846193e19ba5b7b86db0d7208a4ec321de0b15f451a25ed4c037d718fbc9ec649580abd8b9edf1e46b28dbed202fa1c28ab07ce2d2084965328e08b4e49a782bcf90fa94ad1117a37f8d88df7a385138b07b3cc73c1af1d18ad7fb99ab525c149613e258986c4c27e154e16cfc644421dd934232bfc9dc3310625b566cb889bad2e6ea4d60eb5556108189a230ed78fc31941a99c0e80f240d25721baa1fbc2428098d0d7b81f016322baff8d67adee326e98580bf0a47b89d53a3e0f1b671764b20f4745f7b7826fa8c45ffdd144c3b890d447510e02c37deaf80bd0f736a67e7de934a898e1448f271a335926bef0ff0a6b868b58302f57c4c0d03b63d0b863bc89f699bce7928fbdc6ae64e9cecdbe2688cf31918a2684fb0c50085b8500321a238e3a44e22b2c4ef30b609cf4f2b0b3d99374e8cd47e2da65c6e5fd5d5e252c4f8696eaea789bcac283d7843a4be02af9402f9d268d60c907b81e765ceec8cc70c00d2f4986f86ecaf06e711af58ae59f4f9540908ff603d2a3ec60d7bd746ef0471157e19ff17aa33c9aac5a7b9bd4a031cb78f22cdbbd5a7c4db89e20080b61935fa52c10795d36480e0c78381fc68ca0da26f45cae2513079d7dc2c4daace3dfc2dff84fe6a533a59059c7258c51fa957647dd1676168c0c892fcb1df3f8bd869f3e7c25280a3048d8b64eacd3b9efc795b97a1a738a499c166ee5196f0f917b8819905b8559aea41fbb070cd7c1c848541a6d282f4b81d9db66855c5dfd1e0de13bd786e2ec4d628e4c00583b75ac47bee7a9e303279c41b69217fc4966be43cf18d8b1b392f0d2aed6161813ab5cf31f8942946eec3984f20aa65291f969030a7b08bd687e4b106cfab86adf7a2bb5ea330c859a75d05aad0d37645d85a32ade645ee73283c2b4a6d68cf0588c3d2d77a5ee44b8d1f5f186323f17649b8dfb12ecf33a25a44b421fc2cc1927bbd7e564feb244cdf906d0fd33ddb1995dfc1637aef97271ec3be2dde1bfd0ae0ed01fdc60a339560c6a9a6128f56453fb06d0942bad3e2e8ea0af1b50af8e37459259851020bcf77f2bfaead478813d7c9ab77fb4baed4d3e89d6f3c44d27880767ad7c3c851a30bf97adcf86c26bced7091e401bacccc0f39b8fbb103a4dfd32346f0be3ff5561eae81e59c4f28ed624ba44e0902c391a2d6ae568758306f6b4ed399c0f38308684632c467f8e89d4ada1f6aff71bc252358a9e6ec0c854791ab89a9484919da874ce437be1fafa84f30855facc5e38d49d8130f7920fe81827191803abbc31b1984ab8b1f434a22ca802c408621e7a1f8b55dd75b08e1f425debad88497a64033d5c59b87cb184e5988bd504ae85baa388f97542183958a7389d8156c82eff8654801853a59f243f9e45e167cdf094b40938f546cb948138f43cc259965878fb790aee67a980a799a8d8f1feb130aa0a3db739f7530c9857ba1d64ee7401690250362744b68917c47bd72a7d748c6bcf646527f786bc5ebdc96c8f661d3212d35d0014af763e3e46aab8d39d7819175f9233c0d4a861c638b5ec400e6aba9fc363b971445d9ef206983075433c5abd8a252882e74d8c564b9cf5f6110d2f4b0de40f5604f41d16419728a9d67c0b8479f5d74c8f7c4a3670214ab74da4bf615070df37d30f8e594ed66ae820ec6d6fd4b26af98ec81c585d89ab124d5af67d56591057d81c032008ab60e61890f6d2d24e4dc95470e790ff015e66181134202083d3a672897c86de4a537bf5a5af5173590936fed0a5f7a06cbbcd874602b976a9facf3775d3092cb6ff4fbf5cd07e1d46bb2ab123c2a863618e3df0b0f5fea3111eb46dc514a5e643c04513d7f683553e331408f4972726948bb38b20ade27829fed650fceb0049c49a00bb035b5091740c1b755f046573d9044de3ce3500968b9d1e954d299f32c37d6bf4c947f7de5d3abd45917526f97e45aca1d8568b7d11c2f809b9a95b3d44bb3611bdd9f03ea963ca763f420a4885f6349dc5c17d6f5214310181fb106b2a763b5779ddc99ebb5637bd5606850e3c1006e7692ce3e447eea1791d41e0f5ff804b19691d48b2d0e78f18a0708c4ac145f57aba2e9f479081b9ab5f6b7c8407674922764a08bdb1c4cb48826194adf7626727b1e760f9be01bb2b2382d2afb330c42fa5c02244cc87707fc59515571864878929b0d3bb7990739762a8b840ef4692dc766ba9779c9650cc972dbbee83d5170d32d78cd7e54686b9a818d6c57c85f3718bb551ebb12f3591e57e24047686f3a7038c56c99c6263c4f5f69e0e5cdaf2ff24784f3e5db58471a1e5815940385bd006324a5804747f73ceb939a2c0a8c3112e4415ffd249ba7eb6086714a9d4115343d0ad4d4ece1340b46d88b5015993bca6ed211f9312e8d9734823d6577a74961219a12d483caa854c481d2d4ea163334216b7091ccac5ff05739d8dfbf5914838a42b2cb236ec7325c6c223736", 0x1000}, {&(0x7f0000004180)="63ea8852eed1135f595db9ddecea4fdd1d7aa798ce997cad", 0x18}, {&(0x7f00000041c0)="b18df9353851", 0x6}], 0x4, &(0x7f0000004240)=[{0x78, 0x10b, 0x85f, "3167b55146f8c82f59dc0b7fe8d187ffc8311f932f4f48ef3a7c99f555eb410a69c2d5b3318da392e0c06420fdaccbc944ad5d11c45676fafc943813a0d4984453c0be67066bb74eeaaeaf3c636408781999d84b7138787ae6a0f9c8acba3f5131b6"}, {0xa8, 0x110, 0x4b, "7889b288d740af5efde3e8423e3cf00bc4feeb89aa769c6522bbeba8f14be946221595a33624529d161b94f4d51f1a783bcacb1b83603028af743b36f3dee19e7fe6805724bfa73418b62eb433b99dd93d8cc04d47fa850a0d23922075f2228e2c4907cbd2bb5201f4819a808f24303ae0a995fee93211600f6041a261edbab6665dfc4a6fdd16be9ec7b2fc6fc80690603f21620add5387"}, {0x58, 0x10f, 0x7ff, "d000d1f306f16bd7947470f4423a3b2ee445ffb87af20e887c50e19544df2268b9b4bdddbf378b9278cb41d8e08e79c4778ea324f7c745559a309a689f89356e03c4"}, {0x98, 0x10f, 0x775a, "e76304fef59463f67421fae9aa7f6addeca7752365faa30a27f0b43616ccf21e2359cd1bb5c5421f5bfa920fc7d7f244a80258dcad8b2a25182a1156e0e93bd1f3968e3382e3cac4e61ca30e5d17231336a1b946bdb2faf9375602861fc72e77940f534161224260c718fbfcd761286839a781f754ab65a855b2fcf762192a3bd61894dd51"}, {0x30, 0x102, 0x1a, "b54ec586088a038287cd8bea28a59f335ee89288dde630913377212ceb"}, {0xf8, 0x0, 0x9, "79b579b983e5f5752d6cf32a3ca332f0f85ef847300b4e8d3ea3b99567dd5e669aca892e13789e15276fc38f4d30c0cac9e7020e2b0781f9ef4ca9e9a4202747fd62021df1d02e37321ee5afdc1dc83bf5c847d364622fced79d8098eaea4e377e8abdbf5eb0f8817e87358886f850d5f1356293289148941e566154c86616b79f4d53ce2ede5dfcf7ed078be9ef8e2e9143aa2e2c5a744a6d7c2e2c4b8f8503384e59132d3a58ac9c1f76985607be359fef7a0fd15005b8436d51244965819cb824c0fac2ebd3ded50ca4b23f5357f33ef91f0cf7bd606028b6aaf8e6fff0f46576"}, {0xd8, 0x103, 0x9, "00bdfc68e42106b30c424c654667779fc13d119fcd6a7003e27a337ad86c244ff9fecccf0507e2c3c04eb7b1c72e6175c5bc325620323ea2dd2ff4809e9eb219d6093f4b205131e72b5de77c2be50d8b4149a089d15a47422f8d125e4c766aa6b2030f9a0eeac1794b34a12e092624d71bb3b13dabea0b820e934775cd8f1872a772669e1914ce9ce1c769ac3e5c476d1318701b16c915f00ded08d737424d29991e01465207eddc049de122059c493c839de58e444415de0fb242d84e6c72c38f42"}], 0x410}}], 0x3, 0x24000050) r1 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000004800)={&(0x7f0000004740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000047c0)={&(0x7f0000004780)={0x20, 0x6, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) 00:11:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0xc4040, 0x0) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x100000004e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{}, {}, {0x0}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) write$P9_RGETLOCK(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="280000003701000103000000000000007a00000000000000", @ANYRES32=r8, @ANYBLOB="0a002f64882ab4fd5076ef762f2165726f0092b08322e544e2fab0c0111c9780b1f15416e2206cfd13eccab08bd60485879f9c3cf6e8172c9c9dd57867cad0903be4620c38fbef6e222394acc8c6e2ac08483ddb66c0e23fffa9f923471cbc98e3dd9f90f8a731c4bd436167b6b6ace16ed6fdf4affed9744565a085d5c77662fb62ccc96cfeaca6ffa6079ae374e6132e41c7251e74308e423106c4b1"], 0x28) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000280)={r5, &(0x7f0000000240)=""/8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r11 = syz_open_dev$audion(&(0x7f0000000180)='/dev/audio#\x00', 0x2, 0x101000) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000340), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x3, 0x2, 0x2, 0x4, 0x6, 0x9}, 0x20) 00:11:32 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x700000000000000, 0x0) 00:11:32 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306209, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000305630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:32 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001300)="fe", 0x1}], 0x1}, 0x24004841) sendto$inet(r2, &(0x7f0000000900)="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", 0x480, 0x0, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000080), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {0x26}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r4, 0x305944dceb37f175, 0x70bd26, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) [ 692.707782][T17677] UBIFS error (pid: 17677): cannot open "", error -22 [ 693.298989][T17792] UBIFS error (pid: 17792): cannot open "", error -22 [ 693.340612][T17799] binder: BINDER_SET_CONTEXT_MGR already set [ 693.342185][T17798] binder: 17794:17798 unknown command 0 [ 693.379980][T17798] binder: 17794:17798 ioctl c0306201 20000080 returned -22 00:11:32 executing program 3: openat$vcsa(0xffffffffffffff9c, 0x0, 0x4000, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 693.397748][T17801] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 693.405178][T17799] binder: 17791:17799 ioctl 40046207 0 returned -16 00:11:32 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x800000000000000, 0x0) [ 693.439046][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 00:11:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404008630305630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 693.486699][T17801] netlink: 'syz-executor.4': attribute type 4 has an invalid length. 00:11:32 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x4, 0x1}, {0x7, 0x1}, {0x6, 0x446}, {0x9, 0xd336}, {0x3, 0x4}, {0x40, 0x8}]}) ioctl$KDSETLED(r0, 0x4b32, 0x80) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f00000000c0)=0xcb7) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000140)={0x1}) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0xa, @local, 0x4e22, 0x2, 'wlc\x00', 0x6, 0x7, 0x56}, {@broadcast, 0x4e24, 0x3, 0xe1, 0x3, 0xfffff9eb}}, 0x44) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) r6 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000340)={0x2c, 0x2, r4, 0x34, r6}, 0x10) lsetxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', &(0x7f0000000400)='./file0\x00', 0x8, 0x1) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000440)={0x50, 0x1, 0x6, 0x7, 0x8000}) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0x2) readahead(r7, 0x40, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x84, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x6, @loopback, 0x8}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x7, @dev={0xfe, 0x80, [], 0x2d}, 0x8}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x6}, @in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000005c0)={r8, 0x75, "cbcb6eb83ae97fda40a984488fa4987a860d5574e8962721de47825cf9e250022cf24cbb365889b6287005ef62d62e56dbed142a3499fbbde1b85f5de6b56ccd61e492273e7e14643e52bcb9ed61e06ea46353ee5021451e4a01fbc764ec9a510fd27d5fc525b3f27a68daa32b32b884ca3234cc6f"}, &(0x7f0000000640)=0x7d) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000780)=0x0) r12 = getgid() r13 = openat$uhid(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/uhid\x00', 0x802, 0x0) r14 = syz_open_dev$binderN(&(0x7f0000000800)='/dev/binder#\x00', 0x0, 0x2) r15 = fsmount(r1, 0x0, 0x94) r16 = syz_open_dev$cec(&(0x7f0000000840)='/dev/cec#\x00', 0x1, 0x2) r17 = getpgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@ipv4={[], [], @dev}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000980)=0xe8) r19 = getegid() sendmsg$unix(r10, &(0x7f0000000ac0)={&(0x7f00000006c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000740), 0x0, &(0x7f00000009c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r5, r12}}}, @rights={{0x28, 0x1, 0x1, [r7, r3, 0xffffffffffffffff, r1, r3, r2]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r13, r14]}}, @rights={{0x28, 0x1, 0x1, [r15, 0xffffffffffffffff, r7, r16, 0xffffffffffffffff, r2]}}, @rights={{0x18, 0x1, 0x1, [r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0xd0, 0x20000014}, 0x4000800) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000b40)={0x9b0000, 0x3, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x9a0921, 0x80000000, [], @ptr=0x9}}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000b80)={r9, 0x7a}, &(0x7f0000000bc0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r20, 0x84, 0x1b, &(0x7f0000000c00)={r21, 0x1000, "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"}, &(0x7f0000001c40)=0x1008) 00:11:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:32 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 693.623601][T17914] UBIFS error (pid: 17914): cannot open "", error -22 [ 693.764169][T17943] binder: 17927:17943 unknown command 0 [ 693.823476][T17943] binder: 17927:17943 ioctl c0306201 20000080 returned -22 [ 693.847858][T18011] binder: 17987:18011 ioctl c030620c 20000080 returned -22 00:11:33 executing program 0: timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x4c0282, 0x0) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000240), 0x4) timer_create(0x0, &(0x7f0000000140)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x1, 0x5, 0xff, 0x9, 0x0, 0x4, 0x70001, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x100000001, 0x6}, 0x0, 0x8, 0x3f, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r0, 0x2) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000200)={r2, r3+10000000}, &(0x7f0000000100)) 00:11:33 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x1000000000000000, 0x0) 00:11:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000405630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306210, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:33 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:33 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 693.877954][T18019] UBIFS error (pid: 18019): cannot open "/dev/vcsa", error -22 [ 694.436116][T18032] binder: 18029:18032 unknown command 0 [ 694.438444][T18034] binder: 18031:18034 ioctl c0306210 20000080 returned -22 [ 694.443725][T18032] binder: 18029:18032 ioctl c0306201 20000080 returned -22 00:11:33 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x2000000000000000, 0x0) 00:11:33 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404004630405630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:33 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 694.812013][T18048] binder: 18044:18048 ioctl c0306225 20000080 returned -22 [ 694.836957][T18049] binder: 18046:18049 unknown command 0 00:11:34 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x2010000000000000, 0x0) [ 694.863755][T18049] binder: 18046:18049 ioctl c0306201 20000080 returned -22 00:11:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc030623d, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 695.113072][T18060] binder: 18055:18060 ioctl c030623d 20000080 returned -22 00:11:34 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306250, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:34 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400003f60405630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:34 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x3926000000000000, 0x0) 00:11:34 executing program 0: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20032, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x40, 0x0, 0x0, 0x0, 0xc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = open(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) open(&(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x301800, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="ff030000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000"]}, 0x1, 0x0, 0x0, 0x4004}, 0x404) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000340)) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000640)={'filter\x00', 0x0, 0x0, 0x0, [], 0x5, &(0x7f0000000240)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast2, @initdev}, &(0x7f0000000100)=0xc) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x40000) lchown(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f00000009c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000600)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) lseek(r2, 0x7, 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 695.704423][T18167] binder: 18165:18167 ioctl c0306250 20000080 returned -22 [ 695.727903][T18170] binder: 18168:18170 unknown command 0 [ 695.733513][T18170] binder: 18168:18170 ioctl c0306201 20000080 returned -22 00:11:35 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x4800000000000000, 0x0) 00:11:35 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000505630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 695.738749][T18172] UBIFS error (pid: 18172): cannot open "(null)", error -22 [ 696.051710][T18179] UBIFS error (pid: 18179): cannot open "(null)", error -22 [ 696.074093][T18207] binder: 18189:18207 ioctl c0306263 20000080 returned -22 00:11:35 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x4c00000000000000, 0x0) 00:11:35 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 696.148913][T18245] binder: 18210:18245 unknown command 0 [ 696.180934][T18245] binder: 18210:18245 ioctl c0306201 20000080 returned -22 00:11:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc03064b7, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000605630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:35 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6800000000000000, 0x0) 00:11:35 executing program 0: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x0, 0x4, 0x4, 0x440001, 0x5, {r0, r1/1000+30000}, {0x5, 0x0, 0xa, 0x3f, 0x32, 0x4, "80007f00"}, 0x8, 0x4, @fd, 0x9, 0x0, r2}) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000008a309be5100000c000000000500000805000100070000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x20020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffff7}]}) 00:11:35 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), 0x0, &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 696.420095][T18293] UBIFS error (pid: 18293): cannot open "(null)", error -22 [ 696.533140][T18298] binder: 18295:18298 ioctl c03064b7 20000080 returned -22 [ 696.554918][T18297] binder: 18294:18297 unknown command 0 [ 696.586764][T18297] binder: 18294:18297 ioctl c0306201 20000080 returned -22 00:11:35 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0605345, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000705630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:35 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x6c00000000000000, 0x0) 00:11:36 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), 0x0, &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 696.914602][T18318] binder: 18308:18318 ioctl c0605345 20000080 returned -22 00:11:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x50, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 696.968363][T18342] binder: 18309:18342 unknown command 0 [ 697.005833][T18342] binder: 18309:18342 ioctl c0306201 20000080 returned -22 00:11:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404004630705630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:36 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), 0x0, &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:36 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7400000000000000, 0x0) [ 697.217624][T18524] binder: 18523:18524 unknown command 0 [ 697.246012][T18524] binder: 18523:18524 ioctl c0306201 20000080 returned -22 [ 697.367353][T18530] binder: 18526:18530 unknown command 0 [ 697.405308][T18530] binder: 18526:18530 ioctl c0306201 20000080 returned -22 00:11:36 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 00:11:36 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000805630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:36 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x103800) accept(0xffffffffffffffff, &(0x7f0000000480)=@alg, &(0x7f0000000500)=0x80) r1 = socket(0x10, 0xa, 0xff) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6000009, 0x8010, r1, 0x180000000) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0xc) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385725, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="08001f00000004000200040603007106ff070100cc490b7078c07739083952043c60ec4657df4eaf1cda42353707546df36884a6f87d53"], 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000200), 0x20, 0x1, 0x0) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d12, &(0x7f0000000080)=0x55) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x404c800) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_CONTROL(r7, 0x40086414, &(0x7f0000000540)={0x2, 0x3}) 00:11:36 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x7a00000000000000, 0x0) [ 697.582857][T18538] binder: 18536:18538 unknown command 73598208 [ 697.665218][T18538] binder: 18536:18538 ioctl c0306201 20000080 returned -22 00:11:37 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 697.744053][T18546] binder: 18543:18546 unknown command 0 [ 697.772622][T18546] binder: 18543:18546 ioctl c0306201 20000080 returned -22 00:11:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404010630805630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:37 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x8cffffff00000000, 0x0) [ 698.026053][T18733] binder: 18703:18733 unknown command 0 [ 698.059042][T18733] binder: 18703:18733 ioctl c0306201 20000080 returned -22 00:11:37 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) [ 698.087728][T18741] binder: 18737:18741 unknown command 0 [ 698.126379][T18741] binder: 18737:18741 ioctl c0306201 20000080 returned -22 00:11:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404010630905630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:37 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf6ffffff00000000, 0x0) [ 698.413324][T18871] binder: 18869:18871 unknown command 0 [ 698.443130][T18871] binder: 18869:18871 ioctl c0306201 20000080 returned -22 00:11:37 executing program 3 (fault-call:2 fault-nth:0): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x515dc1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0f232c66b9e60900008e7932553d32553d660f72d1f3650f3a0f310466b9800000c00f326635002000000f300f00dff22664f2f08376f300c4e3d1cf33f1c181f07100", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) ptrace$getregs(0xe, r6, 0xfffffffffffffffb, &(0x7f0000000140)=""/75) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="6ffe000011882f14a2a5197f1059f70000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000040)={&(0x7f0000000380)={0x164, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @rand_addr="4bdf770b3d34fb850b846541c869c5e9", 0x401}}, {0x14, 0x2, @in={0x2, 0x4e21, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x2c8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x81, @empty, 0xffff8001}}}}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xda0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff08e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa0}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xee}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000095}, 0x20000010) 00:11:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000a05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:37 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xf9fdffff00000000, 0x0) 00:11:37 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x2f, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 698.666765][T18977] FAULT_INJECTION: forcing a failure. [ 698.666765][T18977] name failslab, interval 1, probability 0, space 0, times 0 [ 698.758244][T18981] binder: 18979:18981 unknown command 0 [ 698.799838][T18981] binder: 18979:18981 ioctl c0306201 20000080 returned -22 [ 698.852518][T18977] CPU: 0 PID: 18977 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 698.862601][T18977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 698.872854][T18977] Call Trace: [ 698.876168][T18977] dump_stack+0x197/0x210 [ 698.880654][T18977] should_fail.cold+0x5/0xf [ 698.885181][T18977] ? setup_fault_attr+0x1f0/0x1f0 [ 698.890228][T18977] ? ___might_sleep+0x163/0x2c0 [ 698.895111][T18977] __should_failslab+0xb7/0x100 [ 698.899984][T18977] should_failslab+0x9/0x14 [ 698.904765][T18977] __kmalloc_track_caller+0x2dc/0x760 [ 698.910179][T18977] ? fput+0x1b/0x20 [ 698.914133][T18977] ? ksys_write+0x1cf/0x290 [ 698.918651][T18977] ? strndup_user+0x77/0xd0 [ 698.923189][T18977] memdup_user+0x26/0xd0 [ 698.927458][T18977] strndup_user+0x77/0xd0 [ 698.931836][T18977] __x64_sys_mount+0xe9/0x230 [ 698.936540][T18977] do_syscall_64+0xfa/0x790 [ 698.941010][T18988] binder: 18986:18988 unknown command 64 [ 698.941092][T18977] entry_SYSCALL_64_after_hwframe+0x49/0xbe 00:11:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404008630a05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 698.952788][T18977] RIP: 0033:0x45c449 [ 698.956701][T18977] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 698.977020][T18977] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 698.978955][T18988] binder: 18986:18988 ioctl c0306201 20000080 returned -22 [ 698.985598][T18977] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 698.985607][T18977] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 698.985615][T18977] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 698.985622][T18977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 698.985630][T18977] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000000 00:11:38 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xfeffffff00000000, 0x0) 00:11:38 executing program 3 (fault-call:2 fault-nth:1): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 699.142125][T18991] binder: 18990:18991 unknown command 0 [ 699.169397][T18991] binder: 18990:18991 ioctl c0306201 20000080 returned -22 00:11:38 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x3d, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000630b05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:38 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xff00000000000000, 0x0) [ 699.359587][T18998] FAULT_INJECTION: forcing a failure. [ 699.359587][T18998] name failslab, interval 1, probability 0, space 0, times 0 [ 699.468865][T19003] binder: 18999:19003 unknown command 0 [ 699.484806][T18998] CPU: 1 PID: 18998 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 699.494743][T18998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.504932][T18998] Call Trace: [ 699.508247][T18998] dump_stack+0x197/0x210 [ 699.512608][T18998] should_fail.cold+0x5/0xf [ 699.517247][T18998] ? __might_fault+0x12b/0x1e0 [ 699.522054][T18998] ? setup_fault_attr+0x1f0/0x1f0 [ 699.527110][T18998] ? ___might_sleep+0x163/0x2c0 [ 699.531995][T18998] __should_failslab+0xb7/0x100 [ 699.537010][T18998] should_failslab+0x9/0x14 [ 699.541528][T18998] __kmalloc_track_caller+0x2dc/0x760 [ 699.546929][T18998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 699.553185][T18998] ? strndup_user+0x77/0xd0 [ 699.557718][T18998] memdup_user+0x26/0xd0 [ 699.561998][T18998] strndup_user+0x77/0xd0 [ 699.566365][T18998] __x64_sys_mount+0x132/0x230 [ 699.571151][T18998] do_syscall_64+0xfa/0x790 [ 699.575689][T18998] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.581606][T18998] RIP: 0033:0x45c449 [ 699.585540][T18998] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 699.605172][T18998] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 699.613595][T18998] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 699.621741][T18998] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 699.629929][T18998] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 699.637919][T18998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 699.645997][T18998] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000001 [ 699.656496][T19003] binder: 18999:19003 ioctl c0306201 20000080 returned -22 00:11:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x50, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 699.917089][T19009] binder: 19006:19009 unknown command 0 [ 699.936130][T19009] binder: 19006:19009 ioctl c0306201 20000080 returned -22 00:11:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000630c05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 700.218107][T19050] binder: 19017:19050 unknown command 0 [ 700.234967][T19050] binder: 19017:19050 ioctl c0306201 20000080 returned -22 00:11:39 executing program 0: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="24000000180007841dfffd946f610500020081001f03fe050300080008000b000400ff7e280000001100ffffba16a0aa1c0900000000000012180000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x20000801) 00:11:39 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xffffffff00000000, 0x0) 00:11:39 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0b6300000000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:39 executing program 3 (fault-call:2 fault-nth:2): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000630d05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 700.649607][T19120] binder: 19118:19120 unknown command 0 [ 700.658488][T19120] binder: 19118:19120 ioctl c0306201 20000080 returned -22 [ 700.707581][T19123] FAULT_INJECTION: forcing a failure. [ 700.707581][T19123] name failslab, interval 1, probability 0, space 0, times 0 [ 700.720725][T19124] binder: 19117:19124 unknown command 0 [ 700.746730][T19124] binder: 19117:19124 ioctl c0306201 20000080 returned -22 [ 700.751178][T19123] CPU: 1 PID: 19123 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 700.764136][T19123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 700.774862][T19123] Call Trace: [ 700.778255][T19123] dump_stack+0x197/0x210 [ 700.782620][T19123] should_fail.cold+0x5/0xf [ 700.787147][T19123] ? __kasan_check_read+0x11/0x20 [ 700.792196][T19123] ? setup_fault_attr+0x1f0/0x1f0 [ 700.797264][T19123] ? ___might_sleep+0x163/0x2c0 [ 700.802336][T19123] __should_failslab+0xb7/0x100 [ 700.807229][T19123] should_failslab+0x9/0x14 [ 700.811773][T19123] kmem_cache_alloc+0x2aa/0x710 [ 700.817263][T19123] ? __might_fault+0x12b/0x1e0 [ 700.822056][T19123] ? find_held_lock+0x35/0x130 [ 700.826871][T19123] getname_flags+0xd6/0x5b0 [ 700.831844][T19123] user_path_at_empty+0x2f/0x50 [ 700.836729][T19123] do_mount+0x150/0x1b50 [ 700.841285][T19123] ? copy_mount_string+0x40/0x40 [ 700.846391][T19123] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 700.852929][T19123] ? _copy_from_user+0x12c/0x1a0 [ 700.857899][T19123] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 700.864673][T19123] ? memdup_user+0x80/0xd0 [ 700.869127][T19123] __x64_sys_mount+0x192/0x230 [ 700.873933][T19123] do_syscall_64+0xfa/0x790 [ 700.878644][T19123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 700.884551][T19123] RIP: 0033:0x45c449 [ 700.888476][T19123] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00:11:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000500)) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x23) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000000)={0x65d2, 0x7, 0x3, 0x7, 0xc, "a62874541ca3e49a"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:11:40 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0xfffffffffffff000, 0x0) 00:11:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0c6300000000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440400c630e05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 700.908537][T19123] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 700.917066][T19123] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 700.925053][T19123] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 700.933041][T19123] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 700.941027][T19123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 700.949172][T19123] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000002 [ 701.050969][T19233] binder: 19231:19233 unknown command 0 [ 701.067031][T19233] binder: 19231:19233 ioctl c0306201 20000080 returned -22 00:11:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0d6300000000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:40 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 701.257495][T19240] binder: 19238:19240 unknown command 0 [ 701.281788][T19239] binder: 19236:19239 unknown command 0 [ 701.293725][T19240] binder: 19238:19240 ioctl c0306201 20000080 returned -22 [ 701.303713][T19239] binder: 19236:19239 ioctl c0306201 20000080 returned -22 00:11:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440400c630f05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:40 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="026304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:40 executing program 3 (fault-call:2 fault-nth:3): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:40 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="59c0f582905ef089b5dbb057cccf18196424f8047048a5a0f62571c35bb702d89c7e6cd9aa657cb3374bc2b37810547585a265bddd8b552166b959bcdd0413d1e273507ed542836bfd2ca541369d84153074d7519153d38e03c6f76cf3eae70064c5133e0d57c218955c3dcff9d596a7"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000280)=0xfffffff7, 0x4) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000240)=0x14) r6 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r9}, 0x14) getsockname$packet(r6, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) dup2(r1, r6) [ 701.371972][T19246] UBIFS error (pid: 19246): cannot open "ubifs", error -22 [ 701.576037][T19391] binder: 19351:19391 unknown command 0 [ 701.613186][T19392] binder: 19367:19392 unknown command 0 [ 701.645960][T19392] binder: 19367:19392 ioctl c0306201 20000080 returned -22 [ 701.647478][T19391] binder: 19351:19391 ioctl c0306201 20000080 returned -22 00:11:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="036304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 701.772325][T19459] FAULT_INJECTION: forcing a failure. [ 701.772325][T19459] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.785919][T19459] CPU: 0 PID: 19459 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 701.796042][T19459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 701.806131][T19459] Call Trace: [ 701.809475][T19459] dump_stack+0x197/0x210 [ 701.813972][T19459] should_fail.cold+0x5/0xf [ 701.818515][T19459] ? setup_fault_attr+0x1f0/0x1f0 [ 701.823650][T19459] ? __kasan_check_read+0x11/0x20 [ 701.828707][T19459] ? __lock_acquire+0x1af3/0x6320 [ 701.833757][T19459] ? stack_trace_save+0x8f/0xc0 [ 701.838639][T19459] should_fail_alloc_page+0x50/0x60 [ 701.843870][T19459] __alloc_pages_nodemask+0x1a1/0x910 [ 701.849380][T19459] ? fs_reclaim_release+0xf/0x30 [ 701.854335][T19459] ? __alloc_pages_slowpath+0x2900/0x2900 [ 701.860101][T19459] ? fs_reclaim_release+0xf/0x30 [ 701.865081][T19459] ? __kasan_check_read+0x11/0x20 [ 701.870154][T19459] cache_grow_begin+0x90/0xc60 [ 701.875290][T19459] ? trace_hardirqs_off+0x62/0x240 [ 701.880431][T19459] kmem_cache_alloc+0x64e/0x710 [ 701.885309][T19459] ? __might_fault+0x12b/0x1e0 [ 701.890186][T19459] getname_flags+0xd6/0x5b0 [ 701.894716][T19459] user_path_at_empty+0x2f/0x50 [ 701.899588][T19459] do_mount+0x150/0x1b50 [ 701.903855][T19459] ? copy_mount_string+0x40/0x40 [ 701.908809][T19459] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 701.914775][T19462] binder: 19461:19462 unknown command 0 [ 701.915059][T19459] ? _copy_from_user+0x12c/0x1a0 [ 701.915085][T19459] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 701.915100][T19459] ? memdup_user+0x80/0xd0 [ 701.915127][T19459] __x64_sys_mount+0x192/0x230 [ 701.915156][T19459] do_syscall_64+0xfa/0x790 [ 701.944928][T19462] binder: 19461:19462 ioctl c0306201 20000080 returned -22 [ 701.946015][T19459] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 701.946029][T19459] RIP: 0033:0x45c449 [ 701.946043][T19459] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 701.946051][T19459] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 701.946064][T19459] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 701.946072][T19459] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 701.946079][T19459] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 701.946095][T19459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:11:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404008631005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 702.022987][T19459] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000003 [ 702.046635][T19459] UBIFS error (pid: 19459): cannot open "/dev/vcsa", error -22 [ 702.085018][T19463] UBIFS error (pid: 19463): cannot open "Y^۰Wd$pH%q[؜~l٪e|7K³xTue݋U!fYsP~Bk,A60tQSӎl", error -22 [ 702.150861][T19463] UBIFS error (pid: 19463): cannot open "Y^۰Wd$pH%q[؜~l٪e|7K³xTue݋U!fYsP~Bk,A60tQSӎl", error -22 [ 702.154893][T19466] binder: 19465:19466 unknown command 0 [ 702.222936][T19466] binder: 19465:19466 ioctl c0306201 20000080 returned -22 00:11:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404048631105630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:41 executing program 3 (fault-call:2 fault-nth:4): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:41 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0xfffffffffffffff8) 00:11:41 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="046304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 702.517148][T19576] binder: 19575:19576 unknown command 0 [ 702.570751][T19576] binder: 19575:19576 ioctl c0306201 20000080 returned -22 [ 702.579624][T19580] FAULT_INJECTION: forcing a failure. [ 702.579624][T19580] name failslab, interval 1, probability 0, space 0, times 0 [ 702.616886][T19582] binder: 19579:19582 unknown command 0 [ 702.632440][T19580] CPU: 1 PID: 19580 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 702.642383][T19580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.652449][T19580] Call Trace: [ 702.655852][T19580] dump_stack+0x197/0x210 [ 702.660229][T19580] should_fail.cold+0x5/0xf [ 702.664771][T19580] ? setup_fault_attr+0x1f0/0x1f0 [ 702.669825][T19580] ? ___might_sleep+0x163/0x2c0 [ 702.674714][T19580] __should_failslab+0xb7/0x100 [ 702.679584][T19580] should_failslab+0x9/0x14 [ 702.684110][T19580] __kmalloc+0x2e0/0x770 [ 702.688381][T19580] ? save_stack+0x5c/0x90 [ 702.692723][T19580] ? tomoyo_encode2.part.0+0xf5/0x400 [ 702.698261][T19580] tomoyo_encode2.part.0+0xf5/0x400 [ 702.698947][T19583] UBIFS error (pid: 19583): cannot open "ubifs", error -22 [ 702.703479][T19580] ? do_syscall_64+0xfa/0x790 [ 702.715382][T19580] tomoyo_encode+0x2b/0x50 [ 702.719828][T19580] tomoyo_mount_acl+0xe0/0x840 [ 702.724659][T19580] ? debug_check_no_obj_freed+0x20a/0x441 [ 702.730411][T19580] ? mark_lock+0xc2/0x1220 [ 702.734861][T19580] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 702.740437][T19580] ? __kasan_check_read+0x11/0x20 [ 702.745486][T19580] ? __lock_acquire+0x8a0/0x6320 [ 702.750468][T19580] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 702.755710][T19583] UBIFS error (pid: 19583): cannot open "ubifs", error -22 [ 702.756727][T19580] ? debug_smp_processor_id+0x33/0x18a [ 702.769871][T19580] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 702.776085][T19580] ? lock_acquire+0x190/0x410 [ 702.780785][T19580] ? tomoyo_mount_permission+0x10a/0x400 [ 702.786456][T19580] tomoyo_mount_permission+0x16a/0x400 [ 702.791941][T19580] ? tomoyo_mount_permission+0x10a/0x400 [ 702.797602][T19580] ? tomoyo_mount_acl+0x840/0x840 [ 702.802666][T19580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 702.808918][T19580] ? strncpy_from_user+0x2d1/0x410 [ 702.814050][T19580] tomoyo_sb_mount+0x35/0x40 [ 702.818661][T19580] security_sb_mount+0x87/0xd0 [ 702.823577][T19580] do_mount+0x1d4/0x1b50 [ 702.827938][T19580] ? copy_mount_string+0x40/0x40 [ 702.832915][T19580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 702.839182][T19580] ? _copy_from_user+0x12c/0x1a0 [ 702.844172][T19580] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 702.850432][T19580] ? memdup_user+0x80/0xd0 [ 702.854976][T19580] __x64_sys_mount+0x192/0x230 [ 702.859764][T19580] do_syscall_64+0xfa/0x790 [ 702.864297][T19580] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 702.870198][T19580] RIP: 0033:0x45c449 [ 702.874112][T19580] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 702.894082][T19580] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 702.902508][T19580] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 00:11:41 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', r4}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@bridge_setlink={0xe4, 0x13, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, r5, 0x0, 0x10201}, [@IFLA_MASTER={0x8, 0xa, r9}, @IFLA_NET_NS_PID={0x8, 0x13, r10}, @IFLA_GROUP={0x8, 0x1b, 0xffff}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_PHYS_PORT_ID={0x8, 0x22, "402eb1f0"}, @IFLA_PORT_SELF={0x60, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "162a989847d4034015784fff9b959a0f"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3b4b411af91310f6b397b24ebb0bc512"}, @IFLA_PORT_PROFILE={0x1f, 0x2, '.mime_type#mime_typenodev:\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "73ad073bf5cf8779072c350fbe422e08"}]}, @IFLA_MTU={0x8, 0x4, 0x6}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_BROADCAST={0xa, 0x2, @multicast}]}, 0xe4}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$IPSET_CMD_TYPE(r11, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) [ 702.910523][T19580] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 702.918505][T19580] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 702.926488][T19580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 702.934596][T19580] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000004 [ 702.947808][T19582] binder: 19579:19582 ioctl c0306201 20000080 returned -22 00:11:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000001205630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:42 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x4) 00:11:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="066304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 702.992461][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.016912][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 703.163547][T19720] binder: 19687:19720 unknown command 0 [ 703.194335][T19720] binder: 19687:19720 ioctl c0306201 20000080 returned -22 00:11:42 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000140)={0x6f, 0xf4d, 0x1ff}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="326465762f6e6264b00012a3cd4c6b2b3e9b818bc678db4f5b0c98e115fae2b7ca71c12079e2154bcdc555e0252ed65937f87332aad7d40b79613910ade0e0ecbdbbdaac155af23bf757ee82f969cc44bc3f891aab584085add4adceb66aeece3d596c457ed3ec9721205b1dcc0b876bd30a7b44b0"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:11:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404048631205630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 703.276014][T19795] binder: 19721:19795 unknown command 0 [ 703.307797][T19795] binder: 19721:19795 ioctl c0306201 20000080 returned -22 00:11:42 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x20400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000000)="e0cbb0ac91c1ce3f90cbbb6d135078850aaad2684e69c541da3fbaf337f40c99af88b62cb36a972d01896d98a9c6689adc7a", &(0x7f0000000040)=""/16, &(0x7f0000000080)="5061752413139d5098669eca8b0943e9d259d340343f8fc9ee648be397531eaf3cb5975bf75b2095f25956a356828da07504e0b36bd686925fa3de0656bffab119c585ce4f74211fe7a9a233c88b7750636757df5d533a8ed363af84b5ec26a5bd109a7d1ca3a4394a3d465423a9b31eb2e760f7d6af9bf1c16a6c17b1e57b3a60afcb717f8971588704d230b58ec92fcce9b1ba34c16e43df472d6ccfc0436111ebc3346f458516543f67311cf12d47a144e2970922ed01fa35b3165af3fb122366f2eb9a94ee9621d9003ab91b8ef3616ef1fc430e933816595a2d9697c60c72cd01d8", &(0x7f0000000180)="4c894c2f380c018fd3f219e0f21cae8d8c5134700aa66c5e749fe44d7e7fa8d1172c7a79e01bb82ba2e85e541b41b1c982f10d86e2f8121f6607e81a30bc890c8ba38328b56e0bf5ae0cc409d86f3719521cf10ef64a19725618115ceb6926bedadd41a59e3a0287bebac2fb2dc9205a458f6c1453689dbffae0884bc3e59e81ec7fc13692bf094d07ba6d", 0x1, r1}, 0x38) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000002000000030000005802000000000000c80000000000000000000000c8000000c0010000c0010000c0010000c0010000c001000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007300000000000000a000c800000000000000000000000000000000000000000030006c32747000000000000000000000000000000000000000000000000000000000000000400000000008000000000028005443504d5353000000000000000000000000000000000000000000000000000000000000000000000000ac1407bb000000000000000073797a6b616c6c65723100000000000063616966300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000009800f80000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000000000000000000600053455400000000000000000000000000000000000000000010000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x2b8) 00:11:42 executing program 3 (fault-call:2 fault-nth:5): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:42 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="076304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 703.487184][T19800] binder: 19798:19800 unknown command 0 [ 703.511038][T19800] binder: 19798:19800 ioctl c0306201 20000080 returned -22 [ 703.528553][T19805] UBIFS error (pid: 19805): cannot open "2dev/nbd", error -22 [ 703.614748][T19833] FAULT_INJECTION: forcing a failure. [ 703.614748][T19833] name failslab, interval 1, probability 0, space 0, times 0 [ 703.657200][T19832] binder: 19806:19832 unknown command 0 [ 703.666920][T19884] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 703.685092][T19832] binder: 19806:19832 ioctl c0306201 20000080 returned -22 [ 703.695540][T19833] CPU: 0 PID: 19833 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 703.705477][T19833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 703.715557][T19833] Call Trace: [ 703.718871][T19833] dump_stack+0x197/0x210 [ 703.723321][T19833] should_fail.cold+0x5/0xf [ 703.727859][T19833] ? setup_fault_attr+0x1f0/0x1f0 [ 703.732911][T19833] ? ___might_sleep+0x163/0x2c0 [ 703.737802][T19833] __should_failslab+0xb7/0x100 [ 703.742678][T19833] should_failslab+0x9/0x14 [ 703.747206][T19833] __kmalloc+0x2e0/0x770 [ 703.751480][T19833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.757744][T19833] ? d_absolute_path+0x11b/0x170 [ 703.763485][T19833] ? __d_path+0x140/0x140 [ 703.767833][T19833] ? tomoyo_encode2.part.0+0xf5/0x400 [ 703.773251][T19833] tomoyo_encode2.part.0+0xf5/0x400 [ 703.778519][T19833] tomoyo_encode+0x2b/0x50 [ 703.783056][T19833] tomoyo_realpath_from_path+0x19c/0x660 [ 703.788808][T19833] tomoyo_mount_acl+0x149/0x840 [ 703.793688][T19833] ? debug_check_no_obj_freed+0x20a/0x441 [ 703.799439][T19833] ? mark_lock+0xc2/0x1220 [ 703.803886][T19833] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 703.809451][T19833] ? __kasan_check_read+0x11/0x20 [ 703.814622][T19833] ? __lock_acquire+0x8a0/0x6320 [ 703.819607][T19833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 703.825872][T19833] ? debug_smp_processor_id+0x33/0x18a [ 703.831343][T19833] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 703.837632][T19833] ? lock_acquire+0x190/0x410 [ 703.842322][T19833] ? tomoyo_mount_permission+0x10a/0x400 [ 703.848111][T19833] tomoyo_mount_permission+0x16a/0x400 [ 703.853588][T19833] ? tomoyo_mount_permission+0x10a/0x400 [ 703.859240][T19833] ? tomoyo_mount_acl+0x840/0x840 [ 703.864430][T19833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 703.870687][T19833] ? strncpy_from_user+0x2d1/0x410 [ 703.875837][T19833] tomoyo_sb_mount+0x35/0x40 [ 703.880453][T19833] security_sb_mount+0x87/0xd0 [ 703.885270][T19833] do_mount+0x1d4/0x1b50 [ 703.889547][T19833] ? copy_mount_string+0x40/0x40 [ 703.894546][T19833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 703.900811][T19833] ? _copy_from_user+0x12c/0x1a0 [ 703.905773][T19833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 703.912385][T19833] ? memdup_user+0x80/0xd0 [ 703.916841][T19833] __x64_sys_mount+0x192/0x230 [ 703.921660][T19833] do_syscall_64+0xfa/0x790 [ 703.926195][T19833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 703.932310][T19833] RIP: 0033:0x45c449 [ 703.936230][T19833] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 703.955946][T19833] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 703.964502][T19833] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 703.972508][T19833] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 703.980490][T19833] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 703.988486][T19833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 703.996500][T19833] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000005 00:11:43 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0) 00:11:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="086304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000003f05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 704.146888][T19949] NFS: mount program didn't pass any mount data [ 704.150247][T19833] ERROR: Out of memory at tomoyo_realpath_from_path. [ 704.191354][T20006] binder: 19977:20006 unknown command 0 [ 704.208300][T20013] binder: 19978:20013 unknown command 0 [ 704.223034][T20006] binder: 19977:20006 ioctl c0306201 20000080 returned -22 00:11:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @bt={0x401, 0x1, 0x0, 0x2, 0x8, 0x4, 0x1, 0x7, 0x81, 0x9, 0x7, 0x6, 0x8001, 0x6b, 0x2, 0x30, {0xf1be, 0xfffffffb}, 0x81, 0x1}}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="bfc9032d440c3ad9800d2ee48c044832c0b1c2c0b107746dfc9e8fd6334b45e6f137f3164710f408dd8b27fd00a43ce64f30683a3696e593dce74d4df191b8a52cf436492df1e0da4f6354423b0e377a1e0000000000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 704.252120][T20013] binder: 19978:20013 ioctl c0306201 20000080 returned -22 00:11:43 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) uname(&(0x7f00000002c0)=""/203) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getpeername$packet(r6, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000500)={@mcast1, @mcast1, @mcast2, 0x87b1, 0x1, 0x4, 0x100, 0x8, 0x3ff68f5a6bd5224c, r7}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000400)={0x4, 0x3, 0x4, 0x40000, 0x378, {r8, r9/1000+30000}, {0x2, 0x0, 0x2, 0x7, 0xff, 0xd9, "163676eb"}, 0x5, 0x1, @userptr=0x3d86, 0x6, 0x0, r0}) bind$llc(r10, &(0x7f0000000280)={0x1a, 0x0, 0x3, 0x4, 0x0, 0x1}, 0xfffffffffffffe72) sendmmsg(r1, &(0x7f00000001c0), 0x400000000000150, 0x0) pipe(0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f00000001c0)={0x10000, 0x3f, 0x3, 0x7, 0x4, 0x86fa}) eventfd(0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sched_setscheduler(0x0, 0x0, &(0x7f00000000c0)=0x11) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000140)={r13}, 0x8) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = getpgrp(0x0) setpriority(0x0, r15, 0xffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') ioctl$sock_SIOCGPGRP(r14, 0x8904, &(0x7f0000000100)) 00:11:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400263044005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:43 executing program 3 (fault-call:2 fault-nth:6): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:43 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="096304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 704.526484][T20029] UBIFS error (pid: 20029): cannot open "-D :ـ .H2tm3KE7G݋'", error -22 [ 704.559136][T20032] FAULT_INJECTION: forcing a failure. [ 704.559136][T20032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 704.582967][T20032] CPU: 1 PID: 20032 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 704.592864][T20032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 704.603546][T20032] Call Trace: [ 704.607038][T20032] dump_stack+0x197/0x210 [ 704.611399][T20032] should_fail.cold+0x5/0xf [ 704.615914][T20032] ? __kmalloc+0x163/0x770 [ 704.620349][T20032] ? setup_fault_attr+0x1f0/0x1f0 [ 704.625396][T20032] ? do_mount+0x1d4/0x1b50 [ 704.629821][T20032] ? __x64_sys_mount+0x192/0x230 [ 704.634779][T20032] ? do_syscall_64+0xfa/0x790 [ 704.639473][T20032] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 704.645574][T20032] should_fail_alloc_page+0x50/0x60 [ 704.650797][T20032] __alloc_pages_nodemask+0x1a1/0x910 [ 704.656198][T20032] ? __alloc_pages_slowpath+0x2900/0x2900 [ 704.662021][T20032] ? __kernel_text_address+0xd/0x40 [ 704.667260][T20032] cache_grow_begin+0x90/0xc60 [ 704.672133][T20032] ? trace_hardirqs_off+0x62/0x240 [ 704.677288][T20032] __kmalloc+0x6b2/0x770 [ 704.681717][T20032] ? __kmalloc+0x608/0x770 [ 704.686281][T20032] ? tomoyo_realpath_from_path+0xc5/0x660 [ 704.692028][T20032] tomoyo_realpath_from_path+0xc5/0x660 [ 704.697607][T20032] tomoyo_mount_acl+0x149/0x840 [ 704.702470][T20032] ? debug_check_no_obj_freed+0x20a/0x441 [ 704.708206][T20032] ? mark_lock+0xc2/0x1220 [ 704.712657][T20032] ? tomoyo_check_mount_acl+0x1b0/0x1b0 [ 704.718391][T20032] ? __kasan_check_read+0x11/0x20 [ 704.723424][T20032] ? __lock_acquire+0x8a0/0x6320 [ 704.726382][T20119] overlayfs: missing 'lowerdir' [ 704.728372][T20032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 704.728392][T20032] ? debug_smp_processor_id+0x33/0x18a [ 704.728414][T20032] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 704.728460][T20032] ? lock_acquire+0x190/0x410 [ 704.755800][T20032] ? tomoyo_mount_permission+0x10a/0x400 [ 704.761463][T20032] tomoyo_mount_permission+0x16a/0x400 [ 704.766930][T20032] ? tomoyo_mount_permission+0x10a/0x400 [ 704.772581][T20032] ? tomoyo_mount_acl+0x840/0x840 [ 704.777643][T20032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 704.783901][T20032] ? strncpy_from_user+0x2d1/0x410 [ 704.789039][T20032] tomoyo_sb_mount+0x35/0x40 [ 704.793651][T20032] security_sb_mount+0x87/0xd0 [ 704.798437][T20032] do_mount+0x1d4/0x1b50 [ 704.802719][T20032] ? copy_mount_string+0x40/0x40 [ 704.807677][T20032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 704.813931][T20032] ? _copy_from_user+0x12c/0x1a0 [ 704.818916][T20032] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 704.825176][T20032] ? memdup_user+0x80/0xd0 [ 704.829621][T20032] __x64_sys_mount+0x192/0x230 [ 704.834404][T20032] do_syscall_64+0xfa/0x790 [ 704.838931][T20032] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 704.844829][T20032] RIP: 0033:0x45c449 [ 704.848735][T20032] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 704.869132][T20032] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 704.877562][T20032] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 704.885686][T20032] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 704.893680][T20032] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 704.901673][T20032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 704.909656][T20032] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000006 [ 704.947036][T20035] binder: 20030:20035 unknown command 0 00:11:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000340)=@generic={0x2, 0xd171, 0x3}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r3, 0x80184151, &(0x7f0000000280)={0x0, &(0x7f00000001c0)="e5db482076e61957c5d07b4ed4dde825f605f3390e532f3fc51be0c6ba019ff8d232203f2feecb26748174555f412adc0ff1b615d7e3d503fa27c2cb5292a35a236917f445980e639323345d9b16e8013379000b8242b083818c3c9af61988c0ba2f85bc98ad1613fdcad4f4453f063cae", 0x71}) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e640000e104d018a40000040002800a000100aaaaaaaaaabb0000"], 0x40}}, 0x0) [ 704.975135][T20035] binder: 20030:20035 ioctl c0306201 20000080 returned -22 [ 704.983658][T20244] binder: 20033:20244 unknown command 0 00:11:44 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x60f, 0x9, 0x2, 0x5f}, 0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x4c, 0xd, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="58d79000dd387984e56548182203e0d4280fa4a5552ed338a0e9c7c54192810fb984a1db7b"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 705.025012][T20244] binder: 20033:20244 ioctl c0306201 20000080 returned -22 00:11:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400463044005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0c6304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 705.152745][T20249] UBIFS error (pid: 20249): cannot open "Xא", error -22 [ 705.186569][T20252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 705.253540][T20307] binder: 20250:20307 unknown command 0 [ 705.264980][T20307] binder: 20250:20307 ioctl c0306201 20000080 returned -22 [ 705.285777][T20252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 00:11:44 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='logfs\x00', 0x48002, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 00:11:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400763044005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:44 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="106304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:44 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x80000) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 705.285993][T20032] UBIFS error (pid: 20032): cannot open "/dev/vcsa", error -22 [ 705.592745][T20528] binder: 20483:20528 unknown command 0 [ 705.625106][T20528] binder: 20483:20528 ioctl c0306201 20000080 returned -22 00:11:44 executing program 3 (fault-call:2 fault-nth:7): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400363084005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 705.784312][T20572] binder: 20557:20572 unknown command 0 [ 705.826228][T20572] binder: 20557:20572 ioctl c0306201 20000080 returned -22 00:11:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)={0x40}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r3, r4) fsync(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4cb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 705.913707][T20577] FAULT_INJECTION: forcing a failure. [ 705.913707][T20577] name failslab, interval 1, probability 0, space 0, times 0 [ 705.937619][T20579] UBIFS error (pid: 20579): cannot open "ubifs", error -22 [ 705.973676][T20577] CPU: 0 PID: 20577 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 705.977031][T20582] binder: 20578:20582 unknown command 0 [ 705.980909][T20577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 705.980916][T20577] Call Trace: [ 705.980940][T20577] dump_stack+0x197/0x210 [ 705.980966][T20577] should_fail.cold+0x5/0xf [ 706.018731][T20577] ? setup_fault_attr+0x1f0/0x1f0 [ 706.019814][T20582] binder: 20578:20582 ioctl c0306201 20000080 returned -22 [ 706.024134][T20577] ? ___might_sleep+0x163/0x2c0 [ 706.024159][T20577] __should_failslab+0xb7/0x100 [ 706.024175][T20577] should_failslab+0x9/0x14 [ 706.024197][T20577] kmem_cache_alloc_trace+0x2d3/0x790 [ 706.051099][T20577] alloc_fs_context+0x5b/0x890 [ 706.055883][T20577] ? _raw_read_unlock+0x28/0x40 [ 706.060762][T20577] fs_context_for_mount+0x25/0x30 [ 706.065806][T20577] do_mount+0x11b2/0x1b50 [ 706.070162][T20577] ? copy_mount_string+0x40/0x40 [ 706.075127][T20577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 706.081395][T20577] ? _copy_from_user+0x12c/0x1a0 [ 706.086388][T20577] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 706.092632][T20577] ? memdup_user+0x80/0xd0 [ 706.097764][T20577] __x64_sys_mount+0x192/0x230 [ 706.103002][T20577] do_syscall_64+0xfa/0x790 [ 706.107535][T20577] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 706.113427][T20577] RIP: 0033:0x45c449 00:11:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="126304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 706.117324][T20577] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 706.136943][T20577] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.145372][T20577] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 706.153460][T20577] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 706.161478][T20577] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 00:11:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400a63084005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:45 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="bc4126ca06fc40de743e83c8545013334000a65d8d1cda7f526792557bde80bf739643013e9cccf59ef9c806af2e9fcca0e937833361f276bbc6bf"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) uselib(&(0x7f0000000000)='./file0\x00') 00:11:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="3d6304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 706.161487][T20577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:11:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304401063084005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:45 executing program 3 (fault-call:2 fault-nth:8): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 706.161496][T20577] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000007 [ 706.283245][T20687] binder: 20683:20687 unknown command 0 00:11:45 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="506304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 706.283264][T20687] binder: 20683:20687 ioctl c0306201 20000080 returned -22 00:11:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400e630c4005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:46 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) bind(r0, &(0x7f0000000000)=@rc={0x1f, @fixed={[], 0x10}, 0x40}, 0x80) [ 706.367973][T20724] binder: 20689:20724 unknown command 0 [ 706.367990][T20724] binder: 20689:20724 ioctl c0306201 20000080 returned -22 [ 706.511841][T20769] UBIFS error (pid: 20769): cannot open "A&@t>TP3@", error -22 00:11:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="036308400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400f630c4005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 706.539864][T20769] UBIFS error (pid: 20769): cannot open "A&@t>TP3@", error -22 [ 706.587689][T20792] binder: 20765:20792 unknown command 0 [ 706.587710][T20792] binder: 20765:20792 ioctl c0306201 20000080 returned -22 [ 706.654490][T20856] binder: 20790:20856 unknown command 0 [ 706.654510][T20856] binder: 20790:20856 ioctl c0306201 20000080 returned -22 [ 706.712016][T20909] FAULT_INJECTION: forcing a failure. [ 706.712016][T20909] name failslab, interval 1, probability 0, space 0, times 0 [ 706.712037][T20909] CPU: 1 PID: 20909 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 706.712047][T20909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 706.712052][T20909] Call Trace: [ 706.712074][T20909] dump_stack+0x197/0x210 [ 706.712103][T20909] should_fail.cold+0x5/0xf [ 706.712126][T20909] ? setup_fault_attr+0x1f0/0x1f0 [ 706.712151][T20909] ? ___might_sleep+0x163/0x2c0 [ 706.712182][T20909] __should_failslab+0xb7/0x100 [ 706.712201][T20909] should_failslab+0x9/0x14 [ 706.712219][T20909] kmem_cache_alloc_trace+0x2d3/0x790 [ 706.712236][T20909] ? lockdep_init_map+0x1be/0x6d0 [ 706.712268][T20909] legacy_init_fs_context+0x48/0xe0 [ 706.712285][T20909] ? generic_parse_monolithic+0x200/0x200 [ 706.712302][T20909] alloc_fs_context+0x52d/0x890 [ 706.712334][T20909] fs_context_for_mount+0x25/0x30 [ 706.712353][T20909] do_mount+0x11b2/0x1b50 [ 706.712381][T20909] ? copy_mount_string+0x40/0x40 [ 706.712401][T20909] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 706.712419][T20909] ? _copy_from_user+0x12c/0x1a0 [ 706.712442][T20909] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 706.712457][T20909] ? memdup_user+0x80/0xd0 [ 706.712485][T20909] __x64_sys_mount+0x192/0x230 [ 706.712516][T20909] do_syscall_64+0xfa/0x790 [ 706.712543][T20909] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 706.712556][T20909] RIP: 0033:0x45c449 [ 706.712573][T20909] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 706.712582][T20909] RSP: 002b:00007f4b2ed3dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 706.712598][T20909] RAX: ffffffffffffffda RBX: 00007f4b2ed3e6d4 RCX: 000000000045c449 [ 706.712607][T20909] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 706.712617][T20909] RBP: 000000000076bfc0 R08: 0000000000000000 R09: 0000000000000000 [ 706.712625][T20909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 706.712634][T20909] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000008 [ 706.853680][T20911] binder: 20910:20911 unknown command 0 [ 706.853700][T20911] binder: 20910:20911 ioctl c0306201 20000080 returned -22 [ 706.931639][T20916] binder: 20912:20916 unknown command 0 [ 706.931657][T20916] binder: 20912:20916 ioctl c0306201 20000080 returned -22 [ 706.963222][T20917] UBIFS error (pid: 20917): cannot open "ubifs", error -22 [ 706.988630][T20917] UBIFS error (pid: 20917): cannot open "ubifs", error -22 [ 707.099209][T20994] binder: 20940:20994 unknown command 0 [ 707.099228][T20994] binder: 20940:20994 ioctl c0306201 20000080 returned -22 00:11:46 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0a6308400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000000)={0x3ff, 0x0, 0x1ff, 0xfffffffd, 0x7f, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:11:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400863104005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:46 executing program 4: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x721001, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f00000001c0)={&(0x7f0000000140)="772f084555dbaf09e813e873fa3fe46be745657b1c1e39da8fb4664e6acfc1d4c00a5e5828efaadb577074835b5e5deb867a7a6b624f1f673b5b2997d8a38bc176ee25dd6ba31f57185c8a084873590ee44d210b10329533a7e4063b71afdd5f106d07", 0x63}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r3, 0x0, {0x1, 0x1, 0x3}, 0x2}, 0x18) mmap(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) [ 707.159973][T21024] binder: 20995:21024 unknown command 0 [ 707.159992][T21024] binder: 20995:21024 ioctl c0306201 20000080 returned -22 00:11:46 executing program 3 (fault-call:2 fault-nth:9): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 707.834422][T21036] binder: 21031:21036 unknown command 0 [ 707.851735][T21035] UBIFS error (pid: 21035): cannot open "ubifs", error -22 [ 707.854411][T21042] binder: 21029:21042 unknown command 0 [ 707.860855][T21036] binder: 21031:21036 ioctl c0306201 20000080 returned -22 00:11:47 executing program 4: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) clone(0xd7e0ce5d01a5091b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x54}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3f) [ 707.899465][T21042] binder: 21029:21042 ioctl c0306201 20000080 returned -22 00:11:47 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000100)={0x3, 0x22ea}) pipe(&(0x7f0000001fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000001700)=@generic={0x0, 0x9, 0x2}) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$alg(r1, &(0x7f0000003d80)=[{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002000)}, {&(0x7f0000002040)="8e42e7fb63a31bba90ebf79e2888b762fe978444071833755c915d52110de6db42ba5b40d7d9f88f30", 0x29}, {&(0x7f0000002080)="8b088245668180dfa2e2a304574fbfebc37d9fa6685cc67115daf0c6efddd3103e6112862ff230b47f4ed6ca9ca0ce3ded59c9fdc16bb885f6720bc369b15ca0ac3033a049277c1cb796092db53ba71ba8f02e247c18fb0c9323d54f1eca03866dcbe051ba1be33bcf66ebf18c6e60b8aa3a414d963e5029d32c9796b9b1a8b215bc14c2a1d7794fb671dd196476a5c616580f506a7a17b8", 0x98}, {&(0x7f0000002140)="b69fb204b237a9155d4fa394675ec8351fd92fef26fd4c1ee2d9583bb6e52f0ad07302c92d00f7dd0c4febb4ac0d68ad42ca67123eb816920762534f7ac8d7c7359c7a1cb19e40942e562a2ae567e59e820d6da8e6f2b0d3a642f35586b8fcd248490b2e82cd130dcb7b31712e2de644e580d2ec56bb00011dce4912", 0x7c}, {&(0x7f00000021c0)="9421306a2d8f0e1fc1c0c835b75ac16043bf0aaa71c573e1b815cd3752a92f281cae4a3eb31f0056c7b3cb6e13517bf13de6c86f4bf109c9cd936a9bd6e258db1157459024e4ad179f63d918f5468cb4b26739a4efd3d11fd74d5114694952702647e955c6288100440b5f5d474b89d054ca3eb7fa3e26e485c0f8c19a84d5f3c1b1f9420e27ea61473bb70dc48dd24e7049aba7c055c9e22c4cf26917d304ba1e6eeb27203587394fcc38aeb182cb576dfe204c3fd51e4d332102d5fd82cb5bec55396179bb27dd8c75321f0147", 0xce}, {&(0x7f00000022c0)="70b950ab85d42dd2ff18c51b0722ccea435dc9c610875d83207d2754f03fbb990fd578fbcfaab894b482a42a4df4c2c137cf9c73d508ecb383a79e682a2ac5cfff9bdfde2db731485003af301bfedd1a", 0x50}, {&(0x7f0000002340)='I', 0x1}, {&(0x7f0000002380)="43b6ac527b5ac2639d793fa890c52ce7320a6e26aeea2b74806e8c4108d6f98c0f3315ea7a78c5fbe069", 0x2a}, {&(0x7f00000023c0)="e8614cbe07bf9f8a0b217c7aa2450cb42d34e3a6074082c9e897283ac3e7b793b3824afd067618e23dbe9493bd7c9b58a66f5a84cee875dd511bde2177eda05db7181886c354b31a57b0a89e8e13ae2e2d20a933e768d5a4e739efababdc4bdfca70c986e50a89d885af62ee27afc8ff5492320fd5f97b24b3f3a9", 0x7b}], 0x9, 0x0, 0x0, 0x20000004}, {0x0, 0x0, &(0x7f0000002640)=[{&(0x7f0000002500)="4b06f022bd03e32ee98b22a3ad2d7acf57ecc4734cefc45ca53f5c78b8de3a204a8c0c119f", 0x25}, {&(0x7f0000002540)="88c5e39f365138b6a2048b9fe1da2ceb9bf415d7f7193102f2fb6b79b7907c6d4c5f9f7a2d9597019c5f274154e73b4b20d186aa02d9345794ace7846e2b5ed93ab2ad3be054dbd16f5a00407998c3d6fba9dd7d2899c946591d10d4d4938907230d863d76fa4c6b643c844cb7d1280eecf9733e932cf911b4d785019bd7930a49fec974896a5e2ffc7a5c2dc78c62703ceeef6abf58362d2c36660712850bceb77b5fdc49f9a60b630fd7320282ff4cf8f785fbd21ff65760379500a37460cbb5d4e64352d5", 0xc6}], 0x2, 0x0, 0x0, 0x20000000}, {0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="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", 0xfa}], 0x1, &(0x7f00000027c0)=[@assoc={0x18, 0x117, 0x4, 0x28}], 0x18, 0x8c5}, {0x0, 0x0, &(0x7f0000002800), 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x190, 0x40}, {0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002a00)}, {&(0x7f0000002a40)="3843d8f7612276879d24259b0bac1d75b447b7f2f9c93ada66848bcec784b3efaaa5c346f2d5289ae68c57cb6d865035e34335caa0ab29570797cac6fe08a3092a24c13187e2e10b60a87ae9b24dcbd52e877d98a719403cf7ade4dab1e39354837382697e", 0x65}], 0x2, &(0x7f00000055c0)=ANY=[@ANYBLOB="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"], 0x1270, 0x40040}], 0x5, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000200)={{0x46, 0x38}, {0x3, 0x9}, 0x8, 0xd06e2881dbcb6dba, 0x6}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001b40)={&(0x7f0000001840)="ef6241c36ef843602f03ab00bbb2fcaa484f321cfc2aa6136127903907193fbb243f8af64a75b214b732ffdb064cf5458467c88df7ea47066ec0c416088d9abe9acea2ad300d44393f2cb1811c1411f36160a1690b16b827bf735cb48e34082f33309005bac450f19d129a32e75a1ef60e7d28bf431c66b5ebbc3718530442cd62334561df908076ae3554ed9b246ae143309cc1560905d512f6ea5508643d0ee6f737397df8d09ea9ca1168a46f", &(0x7f0000001900)=""/163, &(0x7f00000019c0)="71b2a7db29a7b6fde05ff4596435ea5d3f1379335e585322fad958c25e58539dc224c34a0657e4d609666f7d65e13c1b7b35556f93d90bab86d4afb23196a61c35f44cef17ccb58fd57d91313d5fb37d0b2f595976546256abb3c04e0be92de6ba2e9dd0949145f89512ae6f76dfdee6a002d32d00680f5708392b8279f85dfa10d819e2a912d2ccf569c593cb389ac201241f2c65e560c2539e90c3b37b3b2135ee2397df12bb6f7fceb03ab09dc415c801f314a8591cbf07341e84649df84b931c4e9ee33601", &(0x7f0000001ac0)="2d0e9ade3a04420bc0f747f7e9283622743cfa486dcc359b0b19b40a4845fdfcb80e70da75172c3b4697871262ac76f62d2d89c1b34c9c014123e1427430191e024f0883a861a17856b4cebf", 0xe2d, r5, 0x4}, 0x38) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r3, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x88, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e23, @multicast2}}, [0x32, 0xc6, 0x5, 0x1, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0x6, 0x67, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r6, @in6={{0xa, 0x4e23, 0x80000001, @loopback, 0x2}}, 0xfffffffd, 0x7, 0x20, 0x5, 0x4, 0x4, 0x7}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000280)={r6, 0xbf, "46b9bdd7172bf8a4dbed0f1423b66773618f4ee8d41cdf091bde52c4ebdd2305634e3a4d27b52021fd8bfce781f09376492b5e0c7122af6ef728d60cf5211eba9af191585681b3a0d79154247d109c8cc26b5efe6e6a46d66dc891c1bd37309d60180b9d718cfcde386b20caeefaa194e86026b34bef3e2553f3b8c4450b4d28f5b5d831bf8e3f1da3d08f1b5db55d532e70ed97573571f39e51a6810e1f14f7807587509d032fe9c675b9294a342d2227f77128e85ed667afbe3141a8ec49"}, &(0x7f0000000380)=0xc7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x37}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8804}, 0xc040000) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000000a0000000000000000000000000000080002400000000008000240000000000900010073797a31000000000c00044000000000000000000c000440000000000000000024150000080a00000000000000000000000000000900010073797a31000000000c0005800800024000000000c4140480941001800a0001006c696d6974000000040002800a0001006d617463680000001010028008000240000000000410030016ef0e4b645853d913622b39b8c7169e7f51115e8cea6c41b50fc23b16e6fcbe86a03623da37d3b29c850966b8903f7ac1a9a890b9125d886f19b8fd9a7a8ab5014de59a868fd1646cc495aefbd17c138316c53af68718625ae7b867dbc795865500dc89ad71fc9b2d1c2d08ba68746842b5ea4441148570181ebecb2c9396308ac5e5b74c5927eddf5b04990d7c2905933d86498341c2766464eb7115b528f83ff77f2acaf4f18f01719a8eea74c1a0516d6a2e5c450d7c1a661d8f7389470238f70b13a0164d580d671dda97fa455775e1b2306ccc8492320287a4dd631e7370d24a920e9f491b95cf3d2f916ad161f2162c84be251e5bf16ffa0b25b22ec1d13da5a0fa0087f62043a94de6fd6a60767459c95a65850321858dcb8f422a9ad42601bbcc838a084d17e9a94524bc1ed2b378b53a1cf91c2e1640be0f5af4a1fb881929cd39420322eb669a14369b34714398581db56789961e7906d19b969d74d8cf9c7ccebf61990e8cf1fc722e04a448e6ad3ed4e3648fe4ba94f18ede9d142c1aecd3aa73ae5193540caafe549dda503c3f5842690b71c4851ef4a96b73bbf01639157dc1d25b593d01726125f89ef6d5e6ad6e9f82636683f746503b955e08cf6fe74c30f32c733d446bc625253466810f62d2e2e0cf0e06e24c460ead9c533bc5c8629d2556d0b400ac3fcb8020fbce2131f9f281518b82699fda71f1f73dc9160e46365a9d55803e05126e6bd4ba267428109778eeb0bfb33f3e63d92a7770bea0d72b5e9de9d2a48d74c4c9917b10e6d4278e4de7fec3b0d264bbac7991329a1f41a78fedef042e54231b954e2c887b75cd8d0be2d2e59bf702f4b223808ffdb1718f7becc15831cee73a15ef86375b87e80f74715c4aa3d8f930b5a4da6bc0e412867fea994a732531089f47bdbcd3ff3032e3c70991ee8635b356eac0ebc2ce29a6d6d0077380ef71bcee89802b0cc02ee01cb913c019c908e77bf97b7f8358aa0acd9e906f3e60bbb87e4b494c11836dbc4812eb3f69d701f6afea191dcd698abfc23bd4a7135e754ca1ea229cbf068ad8018a4241c9b5d5380a78a02698152288f4f2eb1a6ddd617bc25e626b265b1cc250c1bbe5f4c84d14a662e0cec78a7569a5e00b8b56ad8596d9badca8dc8b25695e61248eb008ace8349cdb0e1f851d42231d252d541aa4c5adc2a516f1c03e9c98ffe8fb29e082e5edd3f3cc827bfcc4ae4f8b20cb9962626b267c49ea633774b000798ce874f8820e3bf04203df12f05d8b5a068fc8951802681d90a6dddd2eb4962a5759cd19d2042860e68a0d413355cf2da4a525226925998318097835b33df5490e451c860f31c6591da7da7f8f7a2b4605bd8cf80c8cc3df28be583b0f99b1582561cd3e58cdaa65351fbbf71b0ddc66f7e9672c9ed00026587510d3963186c0f29cbdc9e90791005bb23dc85c345bc844b42bdbced7004e86d407b4a4ec5a76e361bd19f6d9ca2dd153728b0fefc4ffff50baed72490ce4f031996d5639b3e6eed89dbb32322cf6a2713f284ac02f15243bf0d42d092f6afd3f18789e93af9f8fcd2f8b95bceb8cbb2538f6993aee8027003c4eedb9a7fa68f4931375b25f0e3e5f0afd3b8de3973beac18e95119ad21e1a5c38c2148a4cd6162a6d5fd85b4e0bd8f3834191949bb8b0e7856d1ca49b58ab7ce8af2130b1db5b579b4c1528b4c99ba719d48ca62980ca7a07b19ffe4d7bdc2c569bfeb7feb5a490eaf300d675eadeb7bcaeb0662fa00dd0debbf932fbcc4a92d5de9f8a6738354feedae3176d557e1f1b828990ebe9279fb7a96638fa40e20d7ab87288bd0d1be01de416481ce10dbc1256c75280d1df7e1181427cc9b5441c75984122173e55c02fd322db0368d751b19d5d6229b159bc582f910d5bfa4c4ee95d1d55c9b6a9fb182ad50271dfda1028dea5a955031262a16c917fca0c6d2eaa4ef31f57b21741fb475bf5d374ef4e51f5509a76c1f36afcb956beea65ece4a1d6f66a8c73c60f2bedf635288327c7456c5ef0986c5c336d917cfe89a3257cb8310437aa8d78ef831e6d059fc4392e61d58215fc3357581b499ca1488063fd0a85fb09f013e401eeb7b1198b35efd4ae65d7eef90194b681487f5bdd05b273cfbf16cdf7d57eebfe9352238a549a6465d9070071f146768343a911bb137aa088411c0ca9f5615d52f49eb0463f5d681dab7fcca665e89b6f980f5d4dd96d06c89e1aa77b3e2a1b8dab339ba22b8283754343a65837fa4cdc3db089d2edd003f0829d84bb9fc22c528ab651fff7b81637f1ef1db07bf371584c859d46250ab5df00dff330290bc7068dc607632bca8625831921f1aa25a251eb0b5af5232fddc19a02348aa85a61c0356c3dadc302a817d403ed0cfdb3ee5aeb1c0c5a6373fcf44e9cc9edd885d4d201401c8d57d3b112751c91f3cfc56f88be0ced2ca001871b1b7d7d7df1c66bcecea8aae0a88a603998689244dad4729700518438a6922897c3ef24c50f2c02165aa3ce66b6f836b56054b285a7bc03591b38ed7b35d18213860ab8dbcd48e1c3996c5dda57bb947415e7458c736f680ef1f3ec2b226bb3041b637d814bf5d38f6f6f84482c912ab478054a48890e08d786de2e68ecbd576215ceaadf8d87e826bf541dde510cec867913896de23e79d6b8c2b092e10532cfaa79ac2bcc5b11566f95a17e54e11d0ca6535fc50fa81d49490a90bca748401e66a63060466b547673c60fc3cc75e07a1efd2ce6e364b3915242c837fa11eb053429cca4b5f8cb192fee8dec34749bda9af7f2cc003a264063800a28fa867dff069573440a10c0b6e4b3df621bee527d6cb5f43e715cc324248d9310cd8d2c373002f4060bea00608e3579075f6dd794f5b388902143999392582d718b33b167b998fe3ffe964021c620d7b2b5633358969b06ec3326632a5f3bb4dd3d54c5196f1fd75871755d1fc00a7e211bf71a18db0a5c7f1602771b0eca4c89fb9f60eacb46fd1fc6740d9c29aa6883025123316915409c25040a2ccfd0103058f1952da285bc7ece40916e746809f0ef4a22dd4e761f111467caa965cce37bec5baabc274ece9df02b35c87ce5acbb3e2bbd83610dfe675b92489226fc99fc93d0666217a2b8cba810b63d48a342bfef1048ddf452da47972751189ecc35b3f7ea539cba8e271cd8c741b3076be436f381ab011828861e69ad61abc23ea80391f8afed7fa03f9c99d31df991613a561275a4003a1d0ff2b9fa44ec7c9a90dd7a5b612631bea06015f5169ad4aee684453c4527844a8bce046d1ffe2db44c77b33c7f4fd61419f8b29ef432d30a1b5d689e8e5d810163b12de30c5d71444225b4438ede07ffd06cab1818d1bfdd3102823155c13e7ecca4dcc9cd28d417269d558565aa3b22f10de506c8a4982dab68ebed66ab14e81230ed364e826160942c5ca24e3e41cbf86b07e7f73a18ea140f0c171023c2719658acf802bca6ab4e9979968dd3510ced8cef44b907e644dbea097f57df76a10f9b0a22e66f00f83524c422e0f256a07da6a3a97dc0ad404b8a9414f7faef195337c4f5118bbd98288c7e33a011a84889cc89be23d571d10175797173ceeaac8623004d646f3c59983468fe7ad82a07c1c4ea841373da0a87c5511636fc1d238ba09a3c367a1bdfd7e10ac23c4bbdf88f95dec52403b20d16686606baeb05cb528b5476c318bf661ae8ea95d6be6076086e9b2d439a93eb4ba2928cd883919090f1af45acaa2aec4ebc3534990f593dbeca3b1ceb9449abc9db0189defb46420e2533493127df4d0be9bcb106d6caec4083a64b560e8de082af2377bb2a499d4b0e6d7e030505657410af6d02db69bf905cccb9952c660f2f50ea9cc8f7e991a81390f97189d8f77534db9eadfa65331fdedb9b905bd809e8246fe7ff2e6976b2920e6d53e28d90bc38e53fd11e48beb74462f9be8e706a5366b73cb6021fa6b0e45fd15049d10ace9546dfd48b70a3782f33b78bac127e188845b0db6e2a044e59eb3b9db24010bd7eafa5b2f08a443f6368dbf03de5ff15ca63b5c454744316f8424070e7425a11a76116f43a8c4567ec5e716f547af9bd2d5d8e9610dc6f68c168e019c03523c8c6fef4b2094231f0a6e7c6e08059117193f97a5c1e5ae40bc3385b1b194895237d1881d9b5105f3ac1c4287b0432fbab74884b0f87d82e9d6e67b2a9c753d00537f2b155c3291909f6268550c3e23667f741042e415a36646d269ae269448cad85d64f470419db9f8d19589d09b6845f6121424ac1e277630d152a1ef2bb6c3545c7bd2540fa61e1b97905a86ccda29fc84ff5629390de16633c65b6653abf03cdfd4410080e0c329f2918d9378eadf5d7159dbf4b2c803f82511a268ba548a3ddaa25a3320fa8abf20369fc4af28b9a5292a79fa10ade7b03597a66aed60d8c94fd03c76c9dfd0fa0b76615e2b943d08a19d4e4dee613696839c2e1abad122d252bd867c0179e3353467c54f4cabce81add35f0d02cced28ae21e40fb5f31f27b5635c61916e97aea885c5fcd265efd8a84d26dde8063eb8f3787403a6b4ce4950a5e096ffee09d399bab4d3cb29f7297c3ca35e653ba0bb93cd3307aaf31f39c2cdb13887e1800a089112e2b150e67ae0eb44b8d462700d2d64b807d57c26d1c12271814ad22fb0a596b39abd23e1c59bc83e76ede45704e377d0badd141b24e3652d1cc52213be21dd2911c746910ee6ac63cf999b720c3999aa1b22f03e1d076c297247e4c5e1b1ee275fe958e6d12c4aa530da9c13aba5f564b89daaec3809164c6e75fc122defd1708d718297443d0b405e7134ee16f7207b0e7ed87d8166aee5f54825e429d20c46ff42ac69b72d6074791c566f71f8fe32e9404883a98bf8f267a156c323a65d35c25fb75fb55311b8a3a5c2ce1bd2af943a12837055ea0780cf924e84f4a01a7dcba33297a4224a06ee6de66a10619b56b83607b65718c76d478174361f2801c538a8b21c5ec1788f96d6d8adb38fba52a76c1398b7f30e86a5bed81e9c4fb5250b3780337f56721aff0434b9162bc02338c7cd7750e0b11461187e83c96d48740eee33939f35265932b02b68e617d003bd6a821efe63db1ca55d43945391c37a458378f640212c0847a9ce15a73453dd4316acbd335d0eaeb4e6e8a7bb4bf08c2192b7a771376f4f756c675245f43b37c43961cf77288e0bc14f446ed0a874b3f3e94e25feeb429398bd5c1e194b74650143ccea346977939573a7158fa888b2d20209fdbcd405e31305891708bb4cc8132338809f959f98727376ccc992340dbfde5f8c21f338457f30d8d51890ce2538acd614ea51a8b61868412bae8826daa363f499542a67c460046e9cd4411c018b3bb7e9c1c22dea20f57e77463955a7251d4bfc310519dc7eabed811204c3b8cbbff5c9841547190add0e0852c0e0a3ee62bef6f39d940f799cc92a278690402f01fd6d665cf66ed124402561873ab2c51e410d0fd9b893e117dd50c1c859cb4fb1ba4ab762a2bd5329d97ebb3de7fe8a66f87248fb8b758ca94ded9b231cab5945bdec8ae6548c0497802584231d5d0f1ada60a6138c4da56cb140987a428fe6e4176b3d5b04c4db7d833dcff762c44e5a3aae168f0eb86e218742bb851d41508cfe31f6d31064691f17a6f6da3bda39a5ca7cbdaad5ee09b7519db3ea0d327c884bd0f2c0e92d9d9524f2a714e7cd67d5069d424ad611d26ed7b3149cbb002aebf7ae154d2cdf75b6d792433176de51428b7d3ce37ad18ff3b390b000100736f636b657400003c00028008000240000000000800014000000000080001400000000008000240000000000800014000000000080002400000000008000240000000000e000100627974656f726465720000000c00028008000140000000002c0201800b0001007470726f787900002c000280080002400000000a080003400000000f0800024000000010080003400000000008000240000000100e000100696d6d6564696174650000009c010280080001400000000a14000280100002800900020073797a3000000000d00002802400028008000180fffffffb0900020073797a32000000000900020073797a30000000002800028008000180fffffffe08000180ffffffff08000180fffffffc0900020073797a30000000005f000100274e953534946abaf4e011938ffa547ae583247cbd59d9d8af2375659384c9a4a3becbe1cead2f05af252bf497ecfb36e5282e260980fe0640f2cebc38aaf86debf8bbd58b136ba4e47d77060b64d1849452cdd7c43cfe1056b522002000028008000180fffffffd0900020073797a320000000008000180ffffffff080001400000000f940002802000028008000180ffffffff08000180fffffffd0900020073797a3100000000480002800900020073797a300000000008000180fffffffc08000180fffffff808000180ffffffbd0967cf80ffffffff0900020073797a31000000000900020073797a3000000000280002800900020073797a30000000000900020073797a32000000000900020073797a3200000000080001400000001708000140000000080b00010074617267657400000a000100726564697200000014000280080001400000001308000140000000020b00010074617267657400000900010068617368000000007c0001800b000100736f636b657400000b00010074756e6e656c000014000280080002400000000a08000140000000000b00010072656a65637400000c00028005000200810000000e000100627974656f72646572000000240002800800034000000000080005400000000008000540000000000800044000000015740001800b0001006c6f6f6b7570000058000280080004400000000008000540000000000900010073797a30000000000800034000000000080003400000000008000540000000000800054000000000080002400000000b080004400000000008000340000000000c000100636f756e74657200940001800900010068617368000000002c000280080002400000000008000140000000000800024000000000080007400000000008000440000000000a00010071756f7461000000340002800c00014000000000000000000c00043fed4000000000000000000c00044000000000000000000c00044000000000000000000b00010065787468647200000a00010071756f7461000000480001800b00010072656a65637400000c0001007061796c6f6164002c00028008000840000000010800084000000000080002400000000008000340000000000800084000000000340001800b0001006e756d67656e00001c00028008000440000000000800014000000000080003400000000008000100636d700008000940000000000800094000000000140005800800014000000000080001400000000008000a4000000000080009400000000020000000120a00000000000000000000000000000900020073797a300000000020000000060a00000000000000000000000000000c000640000000000000000020000000120a00000000000000000000000000000900020073797a320000000014000000000a0000000000000000000000000000140000001100010000000000000000000000000ad81aebc29e4b95061d90047ed7608ec3084cf046164c10a41cb1555390c90cb6b817f81fa64f0af990efaa16d4646d9c59178086abdb50be88f27ea87e839697e83ac76bbea43b4b34204567a5dfa36180df7f20308ca6d2e1e98374e6beccdba37b4ec6c07583cf62b6a23d93b098dd307ae7bc908d256f6881ac15f710bdc7f33b611d78275ce7bbdee2dda7a46ce5a172b5be8ffffb87621a2ec822a40a78e643a1eae2ff1eac6276a3a05001d11e11914f9f3a29607ce3b538ae0b08bb8654b3504406e846ac90"], 0x1608}}, 0x0) [ 707.947026][T21047] FAULT_INJECTION: forcing a failure. [ 707.947026][T21047] name failslab, interval 1, probability 0, space 0, times 0 [ 707.989367][T21047] CPU: 1 PID: 21047 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 707.999310][T21047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.009463][T21047] Call Trace: [ 708.012776][T21047] dump_stack+0x197/0x210 [ 708.017142][T21047] should_fail.cold+0x5/0xf [ 708.021663][T21047] ? setup_fault_attr+0x1f0/0x1f0 [ 708.026716][T21047] ? ___might_sleep+0x163/0x2c0 [ 708.031690][T21047] __should_failslab+0xb7/0x100 [ 708.036564][T21047] should_failslab+0x9/0x14 [ 708.041084][T21047] __kmalloc_track_caller+0x2dc/0x760 [ 708.046474][T21047] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 708.052301][T21047] ? vfs_parse_fs_string+0xe1/0x170 [ 708.057516][T21047] kmemdup_nul+0x31/0xa0 [ 708.061781][T21047] vfs_parse_fs_string+0xe1/0x170 [ 708.066937][T21047] ? vfs_parse_fs_param+0x610/0x610 [ 708.072156][T21047] ? legacy_init_fs_context+0x9d/0xe0 [ 708.077574][T21047] do_mount+0x6b4/0x1b50 [ 708.081852][T21047] ? copy_mount_string+0x40/0x40 [ 708.086821][T21047] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 708.093215][T21047] ? _copy_from_user+0x12c/0x1a0 [ 708.098199][T21047] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 708.104456][T21047] ? memdup_user+0x80/0xd0 [ 708.108991][T21047] __x64_sys_mount+0x192/0x230 [ 708.113883][T21047] do_syscall_64+0xfa/0x790 [ 708.118423][T21047] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 708.124338][T21047] RIP: 0033:0x45c449 [ 708.128250][T21047] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 708.147951][T21047] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 708.156379][T21047] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 708.164366][T21047] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 708.172547][T21047] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 708.180934][T21047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 00:11:47 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x6, 0x1, 0x3f}, {0x3, 0x50, 0x9, 0x6}, {0x6, 0x4, 0x81, 0x2}, {0x8001, 0x7, 0x3f, 0x2}]}) close(r1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x5) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x113, 0x0, 0x0, 0x0) 00:11:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400963104005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="106308400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 708.188929][T21047] R13: 000000000000074a R14: 00000000004c9d14 R15: 0000000000000009 00:11:47 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x140b, 0x400, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x2000c088) [ 708.272863][T21158] binder: 21157:21158 unknown command 0 [ 708.278615][T21158] binder: 21157:21158 ioctl c0306201 20000080 returned -22 [ 708.305870][T21161] binder: 21156:21161 unknown command 0 00:11:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 708.333673][T21161] binder: 21156:21161 ioctl c0306201 20000080 returned -22 00:11:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400063404005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 708.475130][T21160] mkiss: ax0: crc mode is auto. [ 708.479013][T21169] binder: 21167:21169 unknown command 0 [ 708.510060][T21172] UBIFS error (pid: 21172): cannot open "ubifs", error -22 [ 708.520316][T21169] binder: 21167:21169 ioctl c0306201 20000080 returned -22 00:11:47 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="0f630c400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:47 executing program 3 (fault-call:2 fault-nth:10): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 708.526313][T21172] UBIFS error (pid: 21172): cannot open "ubifs", error -22 [ 708.598299][T21219] binder: 21170:21219 unknown command 0 [ 708.635084][T21219] binder: 21170:21219 ioctl c0306201 20000080 returned -22 00:11:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400163404005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:48 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x3, 0x108]}, 0x8) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000000)) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 708.841157][T21396] binder: 21374:21396 unknown command 0 [ 708.878344][T21396] binder: 21374:21396 ioctl c0306201 20000080 returned -22 00:11:48 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="511d649482205445007d422c6361636865652c00000000001c000000000008000000000023f6a4c33a9129c1f38b508af09945050dbab4ee46f62d1052b0559a533aeba5e674aef3e0585c61fd382f3d23d073b7e92f2b84ac04b8580cdccfee23168f0b1195c4ca43a93fc1befe7572ac830852ec96d82952b30b7c71c7fbe643863c65912d3e0128d7466777d459"]) [ 708.961874][T21404] FAULT_INJECTION: forcing a failure. [ 708.961874][T21404] name failslab, interval 1, probability 0, space 0, times 0 00:11:48 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="086310400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 709.051886][T21168] mkiss: ax0: crc mode is auto. [ 709.055982][T21408] binder: 21399:21408 unknown command 0 [ 709.062458][T21404] CPU: 0 PID: 21404 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 709.072581][T21404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.082659][T21404] Call Trace: [ 709.086439][T21404] dump_stack+0x197/0x210 [ 709.090907][T21404] should_fail.cold+0x5/0xf [ 709.095439][T21404] ? setup_fault_attr+0x1f0/0x1f0 [ 709.101269][T21404] ? ___might_sleep+0x163/0x2c0 [ 709.102965][T21408] binder: 21399:21408 ioctl c0306201 20000080 returned -22 [ 709.106168][T21404] __should_failslab+0xb7/0x100 [ 709.106189][T21404] should_failslab+0x9/0x14 [ 709.106207][T21404] kmem_cache_alloc_trace+0x2d3/0x790 [ 709.106225][T21404] ? lockdep_init_map+0x1be/0x6d0 [ 709.106257][T21404] legacy_init_fs_context+0x48/0xe0 [ 709.106272][T21404] ? generic_parse_monolithic+0x200/0x200 [ 709.106286][T21404] alloc_fs_context+0x52d/0x890 [ 709.106323][T21404] fs_context_for_mount+0x25/0x30 [ 709.154325][T21404] do_mount+0x11b2/0x1b50 [ 709.158684][T21404] ? copy_mount_string+0x40/0x40 [ 709.163759][T21404] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 709.170019][T21404] ? _copy_from_user+0x12c/0x1a0 [ 709.174990][T21404] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 709.181250][T21404] ? memdup_user+0x80/0xd0 [ 709.185715][T21404] __x64_sys_mount+0x192/0x230 [ 709.191415][T21404] do_syscall_64+0xfa/0x790 [ 709.195976][T21404] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 709.201879][T21404] RIP: 0033:0x45c449 [ 709.205800][T21404] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 709.225641][T21404] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 709.234179][T21404] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 709.242170][T21404] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 709.250277][T21404] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 709.258508][T21404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 709.267104][T21404] R13: 000000000000074a R14: 00000000004c9d14 R15: 000000000000000a [ 709.364764][T21511] binder: 21423:21511 unknown command 0 00:11:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000000)={0x2c0, 0x8, 0x4, 0xe000, 0x4, {0x0, 0x7530}, {0x5, 0x8, 0x4, 0x4f, 0x4, 0x8, 'Jqu?'}, 0xfffff001, 0x3, @fd=r4, 0x7ff, 0x0, r5}) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r8, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r9, 0x4, 0x70bd25, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x8001}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44804}, 0x400c083) r10 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x1) 00:11:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304401163484005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:48 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="84f6fbdfea183efa12c167b7647a85bc5aec9ec86bd32315d1c8f26bdf07c16a4d30a29bf7b6929880544750b825f4ccf37d256949c08f91c9a784cf98ab552ea12647a0cf07a88822e69b66af48f7074aa21aceda275d957ee6b15a74e93ce113d8c1fc95be36425af1274f068f0cde38f42bbe19baad08321035910078cf96f9b08d807cd5877a013f38f8988fdc0c3b430731d558918ed97768f1ef6733a9804c3794696cdb270c6a8408b0beb8"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 709.443337][T21511] binder: 21423:21511 ioctl c0306201 20000080 returned -22 00:11:48 executing program 3 (fault-call:2 fault-nth:11): openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:48 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="096310400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 709.610710][T21539] binder: 21532:21539 unknown command 0 [ 709.692966][T21539] binder: 21532:21539 ioctl c0306201 20000080 returned -22 [ 709.711613][T21583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304401263484005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 709.804743][T21603] UBIFS error (pid: 21603): cannot open ">gdzZk#kjM0TGP%}%iIɧϘU.&G"fHJ']~Zt<6BZ'O 8+25", error -22 [ 709.830888][T21625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:49 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x121042, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000180)=""/136) accept4$unix(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000000c0)=0x6e, 0x800) mount(&(0x7f0000000140)=@nullb='/dev/nullb0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='ubifs\x00', 0x0, 0x0) [ 709.996437][T21660] FAULT_INJECTION: forcing a failure. [ 709.996437][T21660] name failslab, interval 1, probability 0, space 0, times 0 00:11:49 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="7000000010001f0700015ec70000000000000000", @ANYRES32=0x0, @ANYBLOB="1f00001600000000480012800b00010062726964676500003800028008001c00050000000500260001000000050019007e73000005002b000200000005001700000000000c008fc26200000000000000b4f118eb25d900000000", @ANYRES32=0x0, @ANYBLOB="6b4062de67995ec6e70a032626088ddf0795ef52126fdf16e3b988755c811321eca6283bfc51b299b9626f75d981809d9cd9463b1dcd458992ac3b903af529382df87cd217b3b7aa135af634457e23662666ad14840a92cc06ce385f72a7dda2c0180199a369497707c844"], 0x70}}, 0x0) r0 = socket(0x6000000000010, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492778, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x20010, r1, 0x10000000) [ 710.075087][T21660] CPU: 1 PID: 21660 Comm: syz-executor.3 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 710.085112][T21660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.095190][T21660] Call Trace: [ 710.098499][T21660] dump_stack+0x197/0x210 [ 710.102899][T21660] should_fail.cold+0x5/0xf [ 710.107438][T21660] ? setup_fault_attr+0x1f0/0x1f0 [ 710.113012][T21660] ? ___might_sleep+0x163/0x2c0 [ 710.117928][T21660] __should_failslab+0xb7/0x100 [ 710.122824][T21660] should_failslab+0x9/0x14 [ 710.127350][T21660] __kmalloc+0x2e0/0x770 [ 710.131764][T21660] ? mark_held_locks+0xf0/0xf0 [ 710.136563][T21660] ? tomoyo_realpath_from_path+0xc5/0x660 [ 710.143022][T21660] tomoyo_realpath_from_path+0xc5/0x660 [ 710.148723][T21660] ? tomoyo_path_perm+0x1cb/0x430 [ 710.153785][T21660] tomoyo_path_perm+0x230/0x430 [ 710.158659][T21660] ? tomoyo_path_perm+0x1cb/0x430 [ 710.163711][T21660] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 710.169813][T21660] ? trace_hardirqs_on+0x67/0x240 [ 710.175043][T21660] ? kmem_cache_free+0x26b/0x320 [ 710.180015][T21660] ? filename_lookup+0x287/0x3e0 [ 710.185040][T21660] tomoyo_inode_getattr+0x1d/0x30 [ 710.190088][T21660] security_inode_getattr+0xf2/0x150 [ 710.195398][T21660] vfs_getattr+0x25/0x70 [ 710.199669][T21660] ubi_open_volume_path.part.0+0x134/0x200 [ 710.205772][T21660] ? ubi_open_volume_nm+0x280/0x280 [ 710.210986][T21660] ? trace_hardirqs_on_caller+0x6a/0x240 [ 710.216651][T21660] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 710.222160][T21660] ? fs_reclaim_release+0xf/0x30 [ 710.227125][T21660] ? find_held_lock+0x35/0x130 [ 710.232101][T21660] ? fs_reclaim_release+0xf/0x30 [ 710.237273][T21660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 710.244003][T21660] ? debug_smp_processor_id+0x33/0x18a [ 710.249614][T21660] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 710.255912][T21660] ubi_open_volume_path+0x79/0xa0 [ 710.261234][T21660] ubifs_mount+0x13b/0x60f6 [ 710.266688][T21660] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 710.272968][T21660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 710.279341][T21660] ? apparmor_capable+0x4df/0x910 [ 710.284392][T21660] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 710.290489][T21660] ? security_fs_context_parse_param+0x81/0xb0 [ 710.297166][T21660] ? apparmor_cred_prepare+0x7b0/0x7b0 [ 710.303534][T21660] ? ubifs_iget+0x19d0/0x19d0 [ 710.308260][T21660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 710.314624][T21660] ? security_capable+0x95/0xc0 [ 710.319512][T21660] ? ubifs_iget+0x19d0/0x19d0 [ 710.324219][T21660] legacy_get_tree+0x108/0x220 [ 710.329246][T21660] vfs_get_tree+0x8e/0x300 [ 710.334040][T21660] do_mount+0x135a/0x1b50 [ 710.338504][T21660] ? copy_mount_string+0x40/0x40 [ 710.344951][T21660] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 710.346501][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 710.351217][T21660] ? _copy_from_user+0x12c/0x1a0 [ 710.351247][T21660] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 710.351260][T21660] ? memdup_user+0x80/0xd0 [ 710.351287][T21660] __x64_sys_mount+0x192/0x230 [ 710.381026][T21660] do_syscall_64+0xfa/0x790 [ 710.385559][T21660] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 710.391479][T21660] RIP: 0033:0x45c449 [ 710.395384][T21660] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 710.415172][T21660] RSP: 002b:00007f4b2ed5ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 710.423600][T21660] RAX: ffffffffffffffda RBX: 00007f4b2ed5f6d4 RCX: 000000000045c449 [ 710.431677][T21660] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00000000200000c0 [ 710.439664][T21660] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 710.447660][T21660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 710.455646][T21660] R13: 000000000000074a R14: 00000000004c9d14 R15: 000000000000000b 00:11:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES64, @ANYBLOB="0300edff00dfed2b58ffdc00080001000bdb81951a1eed2a"], 0x3}, 0x1, 0x0, 0x0, 0x6}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@mcast1, @loopback, @empty, 0x0, 0x0, 0xfd94, 0x400, 0x100, 0x200000, r7}) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) ioprio_set$uid(0x0, r8, 0x101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) dup2(r9, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f00000003c0)=[@request_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000100)="aa"}) 00:11:49 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="006340400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 710.603192][T21825] binder: 21722:21825 unknown command 0 [ 710.625269][T21825] binder: 21722:21825 ioctl c0306201 20000080 returned -22 [ 710.763716][T21660] ERROR: Out of memory at tomoyo_realpath_from_path. 00:11:50 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="ec00b55bb5b3f6b237d7165ce83623f3ec63f6a5ecfd24077826d2141807d137d3203513830ed2208124d5b3af3254006a82ea3f8e3a906d0fd52bbad9f94a000000000000000000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:11:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000004805630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:50 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:11:50 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="3d223d863eaf872a000002000000"], 0x14}}, 0x0) 00:11:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="016340400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 710.783032][T21660] UBIFS error (pid: 21660): cannot open "/dev/vcsa", error -22 [ 711.186481][T22114] binder: 22086:22114 unknown command 0 [ 711.245084][T22114] binder: 22086:22114 ioctl c0306201 20000080 returned -22 00:11:50 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000240)='./file0\x00'}, 0x10) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000140)='\'#%em0{((}\x00') syz_genetlink_get_family_id$wireguard(&(0x7f0000000200)='wireguard\x00') mount(&(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:11:50 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="0300ff0000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 00:11:50 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x2, 0x0) 00:11:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000004c05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 711.281325][T22163] UBIFS error (pid: 22163): cannot open "/dev/vcsa", error -22 [ 711.635163][T22273] UBIFS error (pid: 22273): cannot open "v&PT<ț+p [ 711.635163][T22273] cN@V86kq~ ݯddX8ܭ㟳\sKq%\eqmSJ?U"™Ê22Ws@){Dk|.9k&pkgs 7:G$ e$ŧpI/Z`$†U$+e [ 711.635163][T22273] .o3#", error -22 [ 711.702490][T22318] binder: 22315:22318 unknown command 0 [ 711.745352][T22319] UBIFS error (pid: 22319): cannot open "/dev/vcsa", error -22 [ 711.776998][T22352] UBIFS error (pid: 22352): cannot open "/dev/vcsa", error -22 [ 711.786120][T22318] binder: 22315:22318 ioctl c0306201 20000080 returned -22 [ 712.031801][T22279] ldm_validate_privheads(): Disk read failed. [ 712.070943][T22279] loop4: p2 < > [ 712.092720][T22279] loop4: partition table partially beyond EOD, truncated [ 712.152909][T22279] loop4: p2 size 2 extends beyond EOD, truncated 00:11:51 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000001c0)={0x1, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) accept4$inet(r0, 0x0, &(0x7f00000005c0), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400020, 0x0, @perf_config_ext, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev={0xfe, 0x80, [], 0x44}, 0x4e24, 0x0, 0x4e24, 0x3f, 0x2, 0xa0, 0x20, 0x29, 0x0, 0xffffffffffffffff}, {0x7, 0x584, 0x3, 0x6, 0xfffffffffffeffff, 0x1000, 0x6, 0x2}, {0x100, 0x8, 0x0, 0x6}, 0x800, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d5, 0x3c}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3501, 0x2, 0x3, 0xb7, 0x3, 0xe04d7212, 0x80000001}}, 0xe8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000800)=@newlink={0x68, 0x10, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x2}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x68}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @loopback}], 0x5c) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsu\x00', 0x101800, 0x0) 00:11:51 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x2002004, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000000)) 00:11:51 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="116348400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:51 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x3, 0x0) 00:11:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000006805630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000540)='/dev/vcsu#\x00', 0x2, 0x220000) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz0\x00', {0x8f8d, 0x5, 0xe9, 0xb41}, 0x57, [0xfffffffd, 0x80, 0x7ff, 0x1, 0x0, 0x0, 0x400, 0x1, 0x0, 0x1, 0x8, 0x6, 0x6, 0xfffffffb, 0x6, 0xfb4, 0x80, 0x863e, 0x2, 0x7, 0xfffff055, 0x400000, 0x7ff, 0x3ff, 0x101, 0x7c73, 0x4, 0x79b9, 0x2, 0x4, 0x7, 0x7, 0x3, 0x9f, 0x6, 0x30000000, 0x6, 0x800, 0x200, 0x80e0, 0x83, 0x9, 0x80000000, 0x5, 0x308466b3, 0x13, 0x3, 0xb4, 0x8000, 0x800, 0x3, 0x2, 0x4, 0x5, 0xe5a, 0x7, 0xffffffff, 0x0, 0x4, 0x10001, 0x12c, 0xe0, 0x5, 0x2], [0x0, 0x1, 0x1, 0x2, 0x6, 0xffff8001, 0x20, 0x9, 0xfffffffb, 0x53d5a395, 0x5, 0x2, 0x418, 0x3ff, 0x2c, 0x80000001, 0x0, 0x0, 0x9, 0x6, 0x499, 0x6, 0xfffff001, 0x0, 0x3f, 0x8, 0x10000, 0x1, 0x3cb, 0x160, 0x7ff, 0x101, 0x2, 0x0, 0x11b8, 0x3, 0x4, 0x4, 0xf70, 0x80, 0x7, 0x20, 0x2750ba80, 0x800, 0x1f, 0xfff, 0x3, 0x1, 0x4, 0x5, 0x2, 0xfffffffa, 0x3, 0x4, 0x3383, 0x7, 0x1, 0x80000001, 0x7ff, 0x10000, 0x4, 0x9, 0x3, 0x8], [0x3, 0xc00000, 0xfffffffa, 0x7d6, 0x101, 0xfffffff8, 0x8001, 0x1, 0x604, 0x6, 0x0, 0x2, 0x1, 0x1000, 0x2, 0x2, 0x5, 0x5, 0xff, 0x9, 0x7, 0x3, 0x80000001, 0x80, 0x400, 0x7, 0x2, 0x0, 0x5, 0x81, 0x3f, 0x8, 0xb149, 0x4, 0x2, 0x3f, 0x6b4, 0x7, 0x400, 0xffffffff, 0x7, 0x0, 0x8, 0x5, 0xa7, 0x8, 0xbc65, 0x3, 0x1, 0x101, 0xfffffff7, 0x5, 0x3, 0x4, 0x0, 0x2, 0x1, 0x4, 0x2, 0x6, 0x6, 0x6, 0x101, 0x4], [0x8, 0xffffffff, 0x7, 0x4, 0x4, 0x1f, 0x8001, 0xa4b, 0x7, 0x0, 0x5, 0x8000, 0x101, 0x1, 0x5, 0x6, 0x8, 0x9, 0x1, 0x3, 0x6, 0x7ff, 0x7, 0x1f, 0x1ff, 0x8, 0xfffffff9, 0xb400, 0x51, 0x0, 0x8, 0x10001, 0x3ff, 0x5, 0x860, 0xfffffff9, 0x7f, 0x9, 0x4, 0x5, 0x926a, 0x8, 0x81, 0x0, 0x80000000, 0x101, 0x800, 0x7f, 0x0, 0x9, 0xffff, 0xb70c, 0x3ff, 0x9, 0x1ff, 0x7, 0x6, 0x0, 0x3, 0xd52, 0x5, 0x40, 0x7, 0x9]}, 0x45c) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @dev, 'gre0\x00'}}, 0x1e) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x16483, 0x0) ioctl$CAPI_INSTALLED(r3, 0x80024322) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f000000d180), 0x0, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000180)="a3b1e8ba03809df3956d6eba3598fbc29cae742c088ffcdd11fb77c2901696a4f6290de145c268e8c8ace7dbd3b0de501832e21fb74c0ca70fdf42cfc47e2f821d688929b1f86212252b7ffb654eec9c546202b7f03cf4f5467df98adb71f5597f33cca758acf68112191d12a35415beb46c8a2d54b0631926552f36c2ff4a00c4a7694db7b238bd2f6291eba0bd65b927e3cf9d1bf65020faf1fd4d014e09a15015898b652204df23f0871da0fe11c2e0a9391fcd232fe6673aae8c69154c2d58dbd86bdbd70144335e88997dfe060289b0f822dd766c8dcdb35c0a343fed0483", &(0x7f0000000280)=""/184, &(0x7f0000000340)="086e20a8a68c28ebb6ba5f947188a4a4862298abfbed5f391f8edb5a227db7483ab7ec8e205db4a0b68c5eb3fde074fec6f8dcf05c7561ca4e8c960bf7384c527ea34aba168a3f7ee7823ba96219400628a2c9a9d27b4c3d3a50ea130c05da30fca47b554897e4f7cdda45b0e1fbb8b7ee6bb59d1dd949fc61549673f70262ec16842edde62a98298e82e6d76c7dda56d1375803", &(0x7f0000000400)="6841564f12f1a7f6b26ebd21216531c3c6a3f171dd18436ce430c80d0abe9c0db28726c55adf662dc1e9c3a8ff8bd5735113b1b22a43d3074907fb05643a10ea92008c59b1841c06ef35b41e62cef1bef7be4596ee6cb7551bd2044ec0a02e7292c8e949e1761c7dfcc0bb331d8a37516bb74ef771df427c11e09a9843780c4855d55134cf0f18559f78aa80b4762c6aa2a9d923bfb72876fd11ae3e5af472abf60ac9e1262d936c0e76e8eb71a745549fe9c5e4e566ebdfbcbf81c9d6444c5f9addddb02f6725e13122dcd75206e2", 0x100, r3}, 0x38) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_ARM_SET_DEVICE_ADDR(r5, 0x4010aeab, &(0x7f0000000080)={0x7a1, 0x204002}) [ 712.423702][T22434] UBIFS error (pid: 22434): cannot open "/dev/vcsa", error -22 [ 712.435127][T22435] binder: 22432:22435 unknown command 0 [ 712.449400][T22437] binder: 22433:22437 unknown command 0 [ 712.499962][T22437] binder: 22433:22437 ioctl c0306201 20000080 returned -22 [ 712.509157][T22468] UBIFS error (pid: 22468): cannot open "/dev/vcsa", error -22 [ 712.531223][T22435] binder: 22432:22435 ioctl c0306201 20000080 returned -22 00:11:51 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x4, 0x0) 00:11:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000006c05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:51 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="d91710d6479cccb23aa1226a2f6b5828bc0a838e95bd665bf63042e8b1f633d416bd480687871bfcefe9e2973aec3b4ced270d2aec8e01e699dc9c0ee7653f9fc24b3831e5d17c8d"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:11:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="126348400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 712.976421][T22600] UBIFS error (pid: 22600): cannot open "/dev/vcsa", error -22 [ 712.984044][T22629] binder: 22574:22629 unknown command 0 00:11:52 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x5, 0x0) [ 713.019106][T22630] UBIFS error (pid: 22630): cannot open "G̲:"j/kX( [ 713.019106][T22630] f[0B3H:;L' *ܜe?K81|", error -22 [ 713.073982][T22629] binder: 22574:22629 ioctl c0306201 20000080 returned -22 00:11:52 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000)=0x6, 0x4) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x1810809, 0x0) 00:11:52 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) socket$unix(0x1, 0x5, 0x0) socket(0x11, 0x800000003, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x7, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000240)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, &(0x7f0000000200)={r2, r3+30000000}, 0x0) 00:11:52 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000540)=0xfffeffff, 0x5f) 00:11:52 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="050a04400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000007405630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 713.315315][T22764] UBIFS error (pid: 22764): cannot open "/dev/vcsa", error -22 [ 713.349246][T22765] UBIFS error (pid: 22765): cannot open "/dev/vcsa", error -22 00:11:52 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x6, 0x0) [ 713.449172][T22771] UBIFS error (pid: 22771): cannot open "ubifs", error -22 [ 713.623040][T22791] binder: 22776:22791 unknown command 0 [ 713.646035][T22815] binder: 22775:22815 unknown command 0 [ 713.708508][T22815] binder: 22775:22815 ioctl c0306201 20000080 returned -22 [ 713.721441][T22791] binder: 22776:22791 ioctl c0306201 20000080 returned -22 00:11:53 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x105) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) recvfrom$unix(r0, &(0x7f0000000000)=""/59, 0x3b, 0x2020, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000180)={{0x7, 0x7a}, 'port1\x00', 0x80, 0x10, 0x8, 0x0, 0x9, 0x1, 0x2, 0x0, 0xc, 0x33}) [ 713.745918][T22882] UBIFS error (pid: 22882): cannot open "/dev/vcsa", error -22 00:11:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000007a05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="052304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:53 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x7, 0x0) [ 713.780696][T22892] UBIFS error (pid: 22892): cannot open "/dev/vcsa", error -22 [ 714.024585][T22963] binder: 22941:22963 unknown command 0 [ 714.082432][T22983] UBIFS error (pid: 22983): cannot open "ubifs", error -22 [ 714.085153][T22963] binder: 22941:22963 ioctl c0306201 20000080 returned -22 00:11:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000000b8905630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 714.180547][T22994] UBIFS error (pid: 22994): cannot open "/dev/vcsa", error -22 [ 714.223081][T23057] UBIFS error (pid: 23057): cannot open "/dev/vcsa", error -22 [ 714.238821][T23047] binder: 22993:23047 unknown command 0 00:11:53 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000040)={0x2001, 0x7ff, 0x5, 0x6, 0xffffd649}) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000004c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="3dd4f298282c9b93bc85c53780a2af7b1b225e08e64ae321f946b2b7d36bc480f5ca3d1d8e62d8fa9f7a0fffb80d600baf3723", 0x33}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) vmsplice(r1, &(0x7f0000000740)=[{&(0x7f0000000380)="506c0bca4de2a0c236d758623c813a7a6cdf54b0e587ce18e5943ab72bc0fc411b7b739488ef2776997e718e6b7f4897c48bf937f7133a68f8d92f359eb7975062ea74c1a4476e2eb54b809f597e2a14909eab4010f0a214ffd699762b06f5c97c83de82a9", 0x65}, {&(0x7f0000000400)="5c888cad1e0fb1717930fbe44024d96ee80afbdd0703a8f005c6099c3ac33696d3462d8e951a3f1ca3d914f25cf8ef94561668075474c15843bb5f19f76499092205b321d2d6b5a6c9cb544a5869edd877bf9d7c913cb87b694e923327536338978de183d423bbaa95e10b44dc69a949c6b0ba63deec9f65387dbe93166f053cc6549b00c2a0", 0x86}, {&(0x7f0000000500)="cbe53d5c32e5cab844722a1bf0eef13044e677da3d45b314bb0bd873534cd8706763a84154511ea1ab750f6ddf16d3b0a12193609387266df68ada346fcd86d5fa4fc00931ebef9519b55c22492443a02a8d129a0a5d9280935af4fbccb1dc2176930d26179a9fae2f8983976f4d3421bbdf2a5ec313cefab530dab19bacaa895d6b6506ca43d483760cf3357f287da7de6781c1aefe4e3ed70cdc8356b44bb7668804cbac58d139454a28bccdbaa31b9dc7b7d6db5af7273d574f97c181e4ed1202f403dc899d7023", 0xc9}, {&(0x7f0000000600)="abeccb2cf728da308344972c31be1f9b42aa191ec58f3fd7bbdaea69015da47eeaa6ad7daca2e5a543214f8975faa360a02eb89e40b64f52091730b7ff2cb7b9a7524f7c060f3d6ce9c3d99efdae802536d9b06b0af4a3728700d066075c3f3a2584b1e71b7dd9232f3aa28d1b63c52b3b24a16c1f98d0c4fde19fd87bad4c2f2fb7d2c5f88fdbb79bffe4a7ae3c9ad9ddfef20db5c3b9feb540b2f188fef55d8a3102482c41e0efc7d9d0770691c504d2e9b913756bc4b22cdbf963346c5c9baeddc726fdf2f4542e41dd52f50478737d17ec09a1165f95fb16f7286e0cab941b", 0xe1}, {&(0x7f0000000080)="2b272c4c3adb0d1cbae4a4a6e6e24a42c6ddd8a879f059cec1b482568c8afe68cb94ab411062e625fdd04786931d65fc28db69ff0af2", 0x36}, {&(0x7f0000000700)="0fc5224332afdf2761c9020e51ad319790f3bebd064986929efede95d77866f17c4e1722f97173", 0x27}], 0x6, 0x6) r5 = dup(r0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffff0000000000000a004e24fffff90c00000000000000000000ffffac1414bb080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e24000002000000000000000000000000000000000101000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000001000000000000000000000000000000010700"/400], 0x190) [ 714.295747][T23047] binder: 22993:23047 ioctl c0306201 20000080 returned -22 00:11:53 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x8, 0x0) 00:11:53 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000000)={0xfffff4db, 0x5, "7e6b1f2cc03583b6cfc1d003a94ee811e70c9fe4f712bf74712fa565b17335af", 0x8, 0xd50, 0x85}) 00:11:53 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="052504400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 714.534544][T23107] binder: 23105:23107 unknown command 0 [ 714.641356][T23107] binder: 23105:23107 ioctl c0306201 20000080 returned -22 00:11:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000000ff05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 714.683301][T23121] UBIFS error (pid: 23121): cannot open "ubifs", error -22 [ 714.722274][T23127] UBIFS error (pid: 23127): cannot open "/dev/vcsa", error -22 [ 714.723619][T23131] binder: 23116:23131 unknown command 0 [ 714.764491][T23121] UBIFS error (pid: 23121): cannot open "ubifs", error -22 [ 714.802606][T23194] UBIFS error (pid: 23194): cannot open "/dev/vcsa", error -22 [ 714.811782][T23131] binder: 23116:23131 ioctl c0306201 20000080 returned -22 00:11:54 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x10, 0x0) 00:11:54 executing program 1: creat(&(0x7f0000000000)='./file0\x00', 0xc7) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) mq_timedsend(r1, &(0x7f0000000100)="43acee651179466ea43ccb30eb8fb3ad6e2f5008055fe28d90b7ce5b0dca1c45a741c66430ce6c5692c1937a02a7a1f616a2e8df4d5dcdc0bbd01b76ccf15b6956ff4fde4689eddd0668ffa4e4516deaaa9187ad2d9445c6c7793469f9a797e96463002b7fa265e1e2a4aa5636412ca81bbc7185b1288ee7ca77f3fd7942aba5330d379c39644fc20ef50fb797c6a84d2acb85f747bf65dec1b5f09395650682644c52a3e65237adf06482fd8067cd98c356fa07086a4e3b5c199335a8d9e423e639c00e6e3edf57f8c006ea9c6aa972eb", 0xd1, 0xb07, 0x0) 00:11:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="052a04400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 715.138814][T23328] binder: 23325:23328 unknown command 0 00:11:54 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x7, &(0x7f0000000240)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) [ 715.187357][T23334] UBIFS error (pid: 23334): cannot open "/dev/vcsa", error -22 [ 715.195220][T23328] binder: 23325:23328 ioctl c0306201 20000080 returned -22 [ 715.227881][T23339] UBIFS error (pid: 23339): cannot open "/dev/vcsa", error -22 [ 715.231725][T23336] binder: 23335:23336 unknown command 0 00:11:54 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf0, 0x0) [ 715.301018][T23336] binder: 23335:23336 ioctl c0306201 20000080 returned -22 00:11:54 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="052b04400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000001630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:54 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000001640)='./file0\x00', 0x0, 0x10, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001780)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in6}}, &(0x7f0000001880)=0xe8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) r6 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r9}, 0x14) getsockname$packet(r6, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f00000019c0)=0xe8) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x2, 0x7, &(0x7f0000001580)=[{&(0x7f0000000140)="2666f7ed917f23258dbdf2ce02c4e52401b37db809d1836be1a6b88e277c650c4ff115f63c09bc51de2e228bc1650ffe2c69b9338f8964700a8fb6974d38cd010eac7a0aceea042270e98da8405b83117b83b1fe7b15bb8dfac4ba56dfc5e41ce421826c809f5ecf07fe0afb0406d1c4d6368e3004a11a17a49d4648703d533d59812b", 0x83, 0x152}, {&(0x7f0000000200)="dfd8282218e1e881811b2a25af22f9422e10de111b8a33afd9919f2737f2e1cd79f309863046b34038f8f2c644a3be7d42a2242c22f80819b436435acd88dcad7977c62ef4e75a87d04f5e69a1b2b60d5a11ed342b443186d179c00809376d1ca1bc4b24939b2a97277b67aa5d258b9268a36ca963ba9230916433817dbf53d25cf40b0ed923229ee77c3c2c08e6cf9ba89b51dcb6842e59cb68afac4f412ac744f6955ac4975454cd858ddb36bca537410905efd2984cd05976302e52fdb514c37f967c586dd75706c970a26789e13e29acba2364f753cfcc0a0cee6b3f4869a749e591ff2b7268bede18dba5b6f157de39d32c1635f8543170ba5c00d8d6cde6cb443b55f890b55d3c626bda8eea0254cce3709d9c13c372d82023b55eeeb0dd4d6e75a449cc17fded0af3461d7e1d6cae359efcf2aae8674a62c9d7b65c461c2c14af6cc3184194faf21c46e048883c136eafad4dff1e4fd23382f3fbd49ffb08a891745dc5dc42efcd1e6932546faf2e3113327d77f2ba5ccc125fe2c2852a30b0c1208368c1bd417da28acecfb7c3090a5f00797fb2577666cd2327bdbd3376d9dfc358219b6c0b4a18950d47c606b5fed305f7901c1f14e3b7c47d534f1d6bb5cd346cf228f47360a1052dd4073d47a5fc7346ff577a2c562d95358ca5244ead6ea11c01255237ebb2a6f967c5cfb498d7a7f5677c250fbd47fd31785766dc653de54ac481b9a17b4a1397260e9ae7d9f0b65fc77ab980ad4cf983cf4585664766219c17297f00d3e5dd0c3db395f93190f810ca6c76cdf408fe412285ef30856b2d2cf64c027eee000f20279a9a5a8596da4d6b70db709f7b99b15f27616435869096cf803979f8e2a5ec3e03b0d91ac41ca80c9f6ee11604104affce63b9b5625ae6beafeaad2311b61d6004284f5cd2b9289d1df8009b4b2b677b482f8938ff465b014f01b5e00780da3518cf21aa0423f4dff3152d14534f0329e88352da926f308fb89887be41dc5010bbf38a151887c79c848d28f4de6159ff31fc49557f2095e5e6d3b6585f1364d03441752a64f3cf76cc8d02e43af4d1c1acbb640e5d6efc4a3501b2ebf304a369ba616ccc38d5321b1ef7ead0ce48c8ace98d3163325d8db7ce44292314d5dac1f9f2408aac5e756be3348cef3f242575e5fd7b8b30bb6a79884a8fa89abeef9900bfc35d9ca0258127bdbddbeed9e5ee0d65de96da8e6b02c9ad3edc7a0984b4b3f344d5d322a45a42595a9cae41939d1b511e4fbe0ee8bf0a8c78d45c228f686c7c9857b15505ce25fa4d76fac712647d303cfec995d1693117eb1de12b73f0b75b9d38e64c467950223438d303557a302078b21e61e9d121e2e24b7d85a473d916b5660d10e6224a1565991d239ed53beba34b359cf0885ac50acb7fac3011c23a07a856f99f473c5c39847c86d12204aa1a54eebc146ae2d8d71a79473b97c862ba381455ff186949e569af7157f28725163900a4c85a1092578bd6fb1dd0e931332ed6795de432fa9a57b84a6180e547a0af2bc85f9abe1b1f3e95388cea459a9652322623e69e9808d7a6cb3747ffdd250043e665a73bc93808ee86fff388f43fce4c3a56e6bb495a8ad6fdd8c93a1a3babf66f3aced9422c3f79ba7f47331582ae47cfd95435d78180d39e4515579c010485de4b52d1a4e84e861befadfed8b6d3d916014244a2b766b7938a9b511c9024c97c1bc6b2c91b17dec041592a0a3b3ccfc76e893f02f9e75cc88572d692cb17c1f3ce960df73876503b84a2fd8b4776055e390d805a6056f6e62779404c7206efb1fbee48f23d400556bbe9f126541f77e29b08800fec2b6a7d71241b1a3c4ca744e4b7b1f0072645008212e5123b2fc0c8414ce8388736ed2ffb4ecc3286b34e6c5e43b8e852f96b1c1b95c25a7204a2fa3e2c27c0ff5a3366f938a6a9a9f3c12e7158e85183fbdb4935f1a86ba95dd67601849e25990650b632e981ba58712cd9f1242ae56c6f60b1bfd1bc7aa4e70a6bdb1d0265316b639f2f6445aea0b36ab249629fc5801b3fc33846d41bfa9da5ab60730f8f7fd6276c09fd12dc6e91614519cbef827f316f3b483e8f96f164476ed65d1f0c66c958715d5daa4959f94bb7867916b8d75509ec31f1ef6fea7d6dc7c1f4905b6e333e629f01d33a8a100cd7c86b256c7842816ad7dfd4de845852352a4b117d2b10435bd1ec0a6ad8738161b4bcea625b6ab00ef14b3bd081495c8e672fcd168a254ae3d6bdfd895d71cbb0519b12f30406e21d40be88d3dbdcacedb39ba0f16dce803d3e1f40ddaf60c1b7652104ffdb79a26ffec29b60e1bd48c047dba1ceba336d323bbc17bea4aa029ed11216f6b16f026d871c1ab4e82eeb89be231ec53c25b9c131a4195c29cfb06905993922a4c7a4f08a75ffdb00d3da8e99e7faa79c26e7760a3723f91b3d840a529b3c47976d5d265f92f152abbacbb72bd515490d552f48058258ca41e8d3813cb0a04c4bdf83d7b991722df8a0c9240cbc519738aaf44f01898ef173705bb819939978a9f44e2e0f9ed9890d63270e190d0ddcd22fd60b0528fc65024ed56efbdc152c9509d085b4fcf646a6a83aefeaf3bee34ab7333581c8dd06e8433c2a257527058dda60cf86d44845ff63cf05bed2f67349faed0997800afbd9ca8da7dcfc8ddd3273253c26304594fc27425cbfe531f12a45f7149319dcd8ad89022d78f9cca9f5ff34ef4521ce52ed657344ebb94a9e2c9e9ffdbb534ea067369a4acd770c71bfa741d457f4ff8b61ccc9ef952d5a387cd82d9e29311ea8cfc1024be781387ea3776f1c68b2a3cd57f1b3868ff1c0d64ee8248f10e04c49c4d894bddc56ba81b96d06ee19c1fcfcb24c54ae9f3f16d2b8af7fb33cfe3f13e062521286ac81d1b3786d2c95d5a4888f181bbc2c2822194fd060582b227b481a6fa840d908908c0e426b1e4a94beedc94abcaccc1be87bf5ed7b2ee25e454f40f25fc16901ab963954a364277037c784550afe1fb5d09539cc3dffd1590ed3560c3a9870e43e6eb5ca65c5e86b5f8f542cffb7f3ee7ab9ed76cef728319a1e087d88f619aa488c5bdb54e85fcee95e210917695d450f57ce40e30aad42ab2cc4b916c4dffeac4fa50fbcdfbb4427297d14244ee56d697a403fe480f498d1afeb22842f109a2d35b21e472c60c492006617824a278850f3b210aaabd98070487859908598a6e871465155abab2a953578af6253e1fb1bf6a7722f3893331e26cb62b55a48d861bb995d9f09283bda40e7bbf1ebfa81541df89aef7764b9cfbfc613236e576970ba86acf7c0ea1c742702e627d415ee529de23d8a70a1a25f00d69dcbf95d6c68345a79c535c0558b3ef009166c7eba98e4402ea3a5edb561ab37e00e2491b82e798a88fa4d9dabe21c367d1a54a57ec0109e8cd66aede5d162dd299afa94081a0fc2befb82f41e7841c7436d73ead88e92448f11d6b13cd5d2a15e343cde844b9d312e0f69def688aa8f94bfd596d671f54a92185360c64000f30abc004b734a9bed667b0bb03a2dced62d7f4315418b577ba932db453d9c3f896845fb43f33245f2e600efcda7d25eadeb9e7c3ee344150fe54e11fffacbfc6b13f92fcaee6cda9ee947862c93be80f295514b87a210dd93c7fbc83b46e4a902e907d86d33fff79568b6572a078726b17a99b260183fbfa2ab3c07a1376638ff97a4042bd0700b0ae82ba4329d9e124c2a4c6a38733e20e3da2c0133ff686ca1431b9d18008c4b5cae5b397a913ef0c4539c3a4cb4d17e4aebe0256f19f3fd8cdfbef35d350acf5209ab20ffacd29bac9ad667167d8310fd3eeddee13a6eb8332605d774966ec8e6e8f33847e8045a27ab5d54f2af1a84696f2ee0c3edc9deb7ca2c2fb9d44526bfaf5701bfbf55942df2c2afeec52c3812bc5ea33d4a59354b5e2498ee5dcee733d09191aa2f9bbe49a0d2a240534a0085d6f0ae3278d49618c4b07d7aea32e924ccc40a56262448119062de9c3368ad1a83693c1efe42a9a276c462e5b4d8c2fbdbf35b8dcd474ac085332e61bd26b2083f138fd79b4f008041ff3258488a8610f857e832366cdfe762ea85ff47c6177e3921bed751c46a7402849442992ed87d83e3543d0d404f27922f151e6d1e84e64c25bff349510404e7c2f3a3bd6e582b42abcb41e440f5e4b4b4d4e2b0d3ec0cdd794cc35fada938789333d37eb1de8ac273ad336c785fc1499383910d7aaff68a8de0eea8943c3a35d0ef0c2029a50c63bccc8ba509005cd11fd2ad79e5e3b3961a45e6902232bec8ed57b809d4eff60e3f52c2b58c2078b9d20e707df0127644a743ce80013c1d7dddb1268cf07c2f9540cea4ba23642bd7994654ebe07c7c3d1f25d097271853cd90ad52e7cf5613958e1a764bcc18d621bad9a4700c546b2eb73899290cd0b30580762193031998092ee137aaf9fdeb1ebe3d159d5d9a6c5f0956e2fe33d8f2e192b4736c226500c5c04e5195d1b6ffc64d0c365377c29f794c1f9b22b642392e6a9d481e65b3ec9ca34fc77a70027f9e9a220ce37c1104674a4c03a81d3f8c88b8dfa452bcded53881ace96271f9d484e2cca6129e95b9b6c4a7ac9cd919a2dce6ac841e58d75d52c308722c99588fd66f1da4de9f7390ed882ce57fa396e01bc57c08b84937ec5eb61af1b92ccecd952f04d43c1ad22ee3ec208c316dbf477d9046a5df45d6fa697dee2bd2da28e87ad1cf6041115aeb5e7503bc6e99da2e5707521b9912a02cd43fdee4262b540a167d7f727e1fe1127239cc65d0811877fbbaa93772584024fdc0626834e8557186a8c1c96b9488ef89b761590b4112c19c9c382848868266316a607c0747446855bf2ee8dc193ce86a01df4c943e742dc42932c10e15739d93d4daece26d77c76d5ccb5b6ed06ef3002c7beb167af0447ed0f26b966a8d095b4f7d836f8705a2770eb8276b6a3a18f7f758fdadcce6fc59192566d5ea1c199c0a02b4ecec00abd2f10419a2a33e238212b651c3319e3f52ca13da1237cab63bb9ca112574874a94f0a72cdba5551466aa7a799e63654661c80282851ba494a190208d04902f08da0122531f8e3c60884a6b97c00e145eb96adef089e61dbea82a01a9c56ef6ab4e29b5cc007cc5364619266f0658ea1cf86d3689476e15ef51c4fb82f1f0fad2490a2b262785ce84cc408ee2697105d34e37cf4dbae7c31d2f585c1c7d706cea5be2f02308c502bf85563bf7a31f9a12f9021116b7322dd27784782b19ac1596e89ecda3cd6281a155cc6e03f9b2207d47e37e5f5e87697722e26326e414660f03bce68fc930d6ec13b1327bb7487ae6342b812449d06b00d84548eecf64ccac49654f78dd978a9565bca6256b2f262f166f39237e5690dbc7d2d931c1c6b03cd975d6f757243b310188bc732e650110037494fae8b97b8e961294dcea9837ea292d6f15211bd45a59483dbc661e330bef868540acf6eb8e2490bd9830189eebced60ebc8ffd770b46d410804c5c4e1170ca316d15376924ed610bdf9cd5267f4cfc4172a31a9cf9dc72502df0b03778628faf0a6cfe803802ba6c61bd925a80a51d98105e14d321933214cab5579fc4f1adfd8936a8f1d7fe643b6123f82ab1907875903598449f0b43e948ad3124115092d640fb0d877f61b734a2ec4e24a72508ade9f3e776f32f833c6f68f7d502ab3be42f164b960756732e39c2fbb1d0a663145e3e85b9d502b892dc2d449291d67c265e8e50351d6a40a88892e3f6938ce2cba8f3ec49900743bdf0acb2", 0x1000, 0x6}, {&(0x7f0000001200)="e42d96817e0c2cfb3307791ebb9b006523d17285ef1042a8d09490034e9345003e3471655bfd2aa966ca06fdf4a028e4ea1a6ea0dae281c9cf58f1b5e1b021f459b4b2c411e535f5d4a7e30218f70c136b4ccfce67daaa43011c87484e7fc78e48", 0x61, 0x4}, {&(0x7f0000001280)="1fb9127985e3ce98a85f08836d512c70d1f013ea830d22f77cd27b4c95dbda38ac03ededa67afe06fbdf38f024d442ba0e14221fc601bdfe4a88966407c5da39a7036e1b7bb8fdc5ca9254c0f0999e14f12272def55668d1b705a64b8b9fb9dfd4e130e59b5fedf4190b1c5d916ad1585d0eaad2b879cb906b57305a7ae4ab8943da7a2fa31ff4c110f18be9d844a13bb3613e760a42292f5d646b736b69a20412c10eeaf35caa9c37d04048b4f9c374761a3ca5a0e0e4d1d023aab8ce", 0xbd, 0x3}, {&(0x7f0000001340)="53c670dd8ad39a2d0b80695acf96e17637171f7e74c6e140790ca447790b31668cd808452f8bb53b8085139bf7e4ab579612dfc68ef9e2e26343c5437bec45b4b864a1e362a30886c8b96573f12ba899ffc68fc583368398400682450ebdbfe9f9409d206e88194f5c15283787be74b71f1490366f1fcc99fc047017e08e601f6139a5d79b446408b434b58a701f66feca8524fc4503940e2d5156306e72c7907705b47da4d998d8605555107f98d2dee3259696e6f00a8099f28ec9820f9e224848ae64d50b627443c391ddae542a0c06e41b01499053421d7b30f05f5a874724f43511a65093efafdbd19ad9156d4acf2272f6333f", 0xf6, 0xb68c}, {&(0x7f0000001440)="fe1e6a8aa625624aab0a243a06535a1cb155c012a83edad594134d516222c341df0b0cc705ce25fe69b85653a718fe46f83aec72c60d3347ad8047a2700366f397770298017fd2f3a6eb95d80cef9347fd64df17d4086484f262cc3ef7289d3a27aa7ae0f1d75e7ac1cf519d0073a09a1a34f6d4214c2b35920bfdde6ac08cae2c27fc823fee3374a647723467d6af9f28c7ed86d9ce61070af2d5448399ece1991ecd5b4d8602605ac12821825c4a9d99fd31501f252eb43b", 0xb9, 0x9}, {&(0x7f0000001500)="e12c91761ee02e54dbad9cdea52e64240647f9ec6b6f6a391efc38e01c6fa6c503a9e6949d5144dcbc902212d1387c9d8cc5ed164d9c1f8e68bba67b0afb09aabd178b014f9db81e484619cdd0197819848e8ac2bb00a046f5", 0x59, 0xfffffffffffffffa}], 0x1400, &(0x7f0000001a00)={[{@uid={'uid', 0x3d, r0}}, {@creator={'creator', 0x3d, "0b21f662"}}, {@dir_umask={'dir_umask', 0x3d, 0x4}}, {@type={'type', 0x3d, "afd44d61"}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@codepage={'codepage', 0x3d, 'macinuit'}}, {@codepage={'codepage', 0x3d, 'iso8859-14'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nodev.-cpusetppp0$GPL)(@cpuset'}}, {@fowner_gt={'fowner>', r3}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@dont_hash='dont_hash'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ubifs\x00'}}, {@uid_lt={'uid<', r5}}, {@euid_lt={'euid<', r10}}, {@obj_role={'obj_role', 0x3d, 'ubifs\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) 00:11:54 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x300, 0x0) [ 715.718378][T23509] binder: 23481:23509 unknown command 0 [ 715.756648][T23520] binder: 23503:23520 unknown command 1074029313 [ 715.798724][T23509] binder: 23481:23509 ioctl c0306201 20000080 returned -22 [ 715.835103][T23520] binder: 23503:23520 ioctl c0306201 20000080 returned -22 00:11:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="052d04400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000002630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:55 executing program 0: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) shmget(0x1, 0x4000, 0x1000, &(0x7f000096d000/0x4000)=nil) uselib(&(0x7f0000000000)='./file0\x00') gettid() r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$setregs(0xf, 0xffffffffffffffff, 0x200, &(0x7f0000000040)="1f2bb3af40c93aa8f4747c70ec900f819eaa35eb0e9c65b72819d8588ac7ce2f36f42c9ef64468556efd607149aa62a169abd5833540e67b7ced16fea41ba59a5b3409cc583a5249efee0fa1cb6935b3c176befc25401dd6f7085127c1") [ 715.875615][T23559] UBIFS error (pid: 23559): cannot open "ubifs", error -22 [ 716.001104][T23597] UBIFS error (pid: 23597): cannot open "/dev/vcsa", error -22 00:11:55 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x3a, 0x0, [0xfffffffffffffffb, 0x0, 0x1, 0x4]}) [ 716.077425][T23666] UBIFS error (pid: 23666): cannot open "/dev/vcsa", error -22 [ 716.171273][T23668] binder: 23665:23668 unknown command 0 00:11:55 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x500, 0x0) [ 716.249022][T23670] binder: BC_ACQUIRE_RESULT not supported [ 716.292286][T23670] binder: 23669:23670 ioctl c0306201 20000080 returned -22 [ 716.330002][T23668] binder: 23665:23668 ioctl c0306201 20000080 returned -22 00:11:55 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="052e04400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000003630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 716.353599][T23674] UBIFS error (pid: 23674): cannot open "ubifs", error -22 [ 716.435019][T23674] UBIFS error (pid: 23674): cannot open "ubifs", error -22 [ 716.509894][T23677] UBIFS error (pid: 23677): cannot open "/dev/vcsa", error -22 00:11:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) accept$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 716.605654][T23753] UBIFS error (pid: 23753): cannot open "/dev/vcsa", error -22 [ 716.686569][T23786] binder: 23751:23786 unknown command 1074029315 [ 716.735037][T23786] binder: 23751:23786 ioctl c0306201 20000080 returned -22 00:11:56 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x600, 0x0) [ 716.798892][T23787] binder: 23785:23787 unknown command 0 00:11:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000004630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 716.846756][T23787] binder: 23785:23787 ioctl c0306201 20000080 returned -22 00:11:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="053004400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 716.937927][T23790] UBIFS error (pid: 23790): cannot open "ubifs", error -22 [ 717.031787][T23805] UBIFS error (pid: 23805): cannot open "/dev/vcsa", error -22 [ 717.092249][T23893] UBIFS error (pid: 23893): cannot open "/dev/vcsa", error -22 [ 717.162907][T23899] binder: 23888:23899 unknown command 0 00:11:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000400)=0x3) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ion\x00', 0x10100, 0x0) close(r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, r11}, 0x14) getsockname$packet(r8, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f00000004c0)=0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000280)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='9p\x00', 0xa0001, &(0x7f0000000640)={'trans=virtio,', {[{@msize={'msize', 0x3d, 0x1}}, {@msize={'msize', 0x3d, 0x400}}, {@version_u='version=9p2000.u'}, {@posixacl='posixacl'}, {@cache_loose='cache=loose'}], [{@smackfstransmute={'smackfstransmute'}}, {@euid_eq={'euid', 0x3d, r7}}, {@smackfsroot={'smackfsroot'}}, {@obj_user={'obj_user', 0x3d, ']'}}, {@fowner_gt={'fowner>', r12}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'ubifs\x00'}}, {@pcr={'pcr', 0x3d, 0x10}}]}}) 00:11:56 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x700, 0x0) [ 717.208602][T23900] binder: 23890:23900 unknown command 0 [ 717.224992][T23899] binder: 23888:23899 ioctl c0306201 20000080 returned -22 [ 717.273221][T23900] binder: 23890:23900 ioctl c0306201 20000080 returned -22 00:11:56 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="055804400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 717.503750][T23960] UBIFS error (pid: 23960): cannot open "/dev/vcsa", error -22 [ 717.530768][T24005] binder: 23962:24005 unknown command 0 [ 717.545641][T24019] UBIFS error (pid: 24019): cannot open "/dev/vcsa", error -22 [ 717.575161][T24005] binder: 23962:24005 ioctl c0306201 20000080 returned -22 00:11:58 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000040)={0x2, 0xaf9a207e14110f1c}) 00:11:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400002000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:58 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x1020, 0x0) 00:11:58 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056404400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:58 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88b0}, 0x40) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="3502000037000535d25a80648c63940d0324fc60100002400a000200053582c137153e670a02018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 00:11:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @multicast2}}, [0x32, 0xc6, 0x5, 0x1, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0x6, 0x67, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r2, @in6={{0xa, 0x4e23, 0x80000001, @loopback, 0x2}}, 0xfffffffd, 0x7, 0x20, 0x5, 0x4, 0x4, 0x7}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={r2, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x8, @mcast2, 0x2}, @in6={0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, [], 0x1e}, 0xfff}, @in6={0xa, 0x4e23, 0xc800000, @ipv4={[], [], @local}, 0x6d9f}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e23, 0x8, @local, 0x80000001}}}, 0x84) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_RUN(r1, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000f001000000000000b8000000b800000000000000b8000000580100005801000058010000580100006101000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000f000000000000000000000000000007000b80000000000000000000000000000000000000000004800544545000000000000000000000000000000000000000000000000000001ff02000000000022a346000000000000000001726f73653000000000000000000000000000000000000000ac1414aa00000000000000000000000076657468315f746f5f626f6e6400000076657468315f746f5f68737200000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000a000000000000000000000000000000000000000000030005345540000000000000000000000000000000000000000000000000000020000000000000000000000009b82000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000000000000000f3a68bf12720a5ab4f6b9e170000000000000000000000002800000000000000000000000000000a00000000000000000000000000000000fe"], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r10 = socket(0x40000000015, 0x5, 0x0) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) sendto$inet(r10, &(0x7f0000002200)="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", 0x480, 0x0, 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x4c, r11, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x480}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r11, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x95) getsockopt$inet6_mreq(r7, 0x29, 0x7, &(0x7f0000000140)={@mcast1}, &(0x7f0000000240)=0x14) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r7, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="abc1fd3f72a6be52a5b3702ffd", @ANYRES16=r12, @ANYBLOB="010025bd7000fbdbdf2503000000080008007f000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2010) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r12, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0xf, 0x1, '/vboxnet1:\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, ']*\\\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x4000040) close(0xffffffffffffffff) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) 00:11:58 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x2000, 0x0) [ 719.675375][T24133] binder: 24128:24133 unknown command 0 [ 719.688396][T24133] binder: 24128:24133 ioctl c0306201 20000080 returned -22 00:11:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400003000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 719.756083][T24136] binder: 24130:24136 unknown command 0 [ 719.761832][T24136] binder: 24130:24136 ioctl c0306201 20000080 returned -22 [ 719.771843][T24137] UBIFS error (pid: 24137): cannot open "ubifs", error -22 [ 719.780255][T24137] QAT: Invalid ioctl 00:11:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056904400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 719.871229][T24137] UBIFS error (pid: 24137): cannot open "ubifs", error -22 [ 720.002682][T24250] binder: 24161:24250 unknown command 0 00:11:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x260c00, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xbff51b181d61ec0b}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x2, 0x70bd25, 0x25dfdbfe, {0x80, 0x0, 0x0, 0x8, 0x0, 0x3, 0xc8, 0x3, 0x1800}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="6800000010001fff00"/20, @ANYRES32, @ANYBLOB="00000400000000002c0012800e0001006970366772657461700000001800028014000700ff02000000000000000000000000000108000a00010000000a000100aaaaaaaaaa00000000001c00b40600ed0530faf7c7fc5f0d771e6a1b7d0b34764ea3fba1171bf17535f22e72f6e4b9e479b11dbd28d99261fe4ac1f94a21e96dea098b2b1127a7748c8f331879", @ANYRES32, @ANYBLOB="b298283b6badc64c9e85a0b6ec3e4d0170bcf3362e1459500666ab8d43838bb775ad5b77c3fbffc93b4be490e7bd5696e4ac2b6c6e8af38804e239610e18b0d03eeafee7b6f19f0f2d1c2bacafce8009aa3466586854a3d0334a7a09b685194881579a381c9c766c9a462e4894f826547f774aabd303adc51786dfdf428289434b33ce269791e35309000000000000000365946de914ea084e39d94302c5a9a22a29d23cbc725183732d23d9b81cebab60eba78d0609c92fd328eb8c106f768e95fe72e32073cf4e4d0c6f8bed6d29fd8ae5346e89"], 0x68}}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x200c00, 0x0) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) 00:11:59 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x2010, 0x0) [ 720.085355][T24250] binder: 24161:24250 ioctl c0306201 20000080 returned -22 [ 720.170421][T24288] binder: 24252:24288 unknown command 0 [ 720.188747][T24288] binder: 24252:24288 ioctl c0306201 20000080 returned -22 00:11:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400004000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056c04400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 720.295113][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:59 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xedc0, 0x0) [ 720.502274][T24370] binder: 24355:24370 unknown command 0 [ 720.502883][T24368] binder: 24366:24368 unknown command 0 [ 720.522348][T24368] binder: 24366:24368 ioctl c0306201 20000080 returned -22 [ 720.530068][T24370] binder: 24355:24370 ioctl c0306201 20000080 returned -22 00:11:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400005000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:11:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x100000004e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x304}, '\x00', "0000000000000000000000000000ffff", "20040100", "1500"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x2, 0x100132, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x0, 0x0, 0xd8) dup(0xffffffffffffffff) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 00:11:59 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056f04400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 720.642281][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:59 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf000, 0x0) [ 720.782905][T24378] binder: 24376:24378 unknown command 0 [ 720.820934][T24378] binder: 24376:24378 ioctl c0306201 20000080 returned -22 00:12:00 executing program 4: r0 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000d25758244041dfeb00007f41de73d026e2660000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0xc) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x4) socket$kcm(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r4 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x8, 0x181300) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r8 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) getsockname$packet(r10, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r8, &(0x7f0000000000)={0x11, 0x0, r11}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', r11}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) getsockname$packet(r14, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x81, 0xfffffff9, 0x8, 0x1, r5, 0xffffffff, [], r12, r14, 0x1, 0x1, 0x1}, 0x40) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$VIDIOC_G_OUTPUT(r15, 0x8004562e, &(0x7f0000000040)) [ 720.918042][T24383] binder: 24382:24383 unknown command 0 00:12:00 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xff00, 0x0) 00:12:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400006000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 720.962553][T24383] binder: 24382:24383 ioctl c0306201 20000080 returned -22 00:12:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="057004400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 721.162935][T24432] binder: 24392:24432 unknown command 0 [ 721.182438][T24432] binder: 24392:24432 ioctl c0306201 20000080 returned -22 00:12:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400007000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:00 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf0ffff, 0x0) [ 721.317834][T24501] binder: 24470:24501 unknown command 0 [ 721.339347][T24501] binder: 24470:24501 ioctl c0306201 20000080 returned -22 00:12:00 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0xffaf) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000002c0), &(0x7f0000000300)=0x14) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r1}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x3, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @rand_addr="aee86d48afba2cff19c2a2f84f682971"}, {0xa, 0x4e22, 0x0, @local, 0x10000}, r6, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) [ 721.453077][T24512] binder: 24511:24512 unknown command 0 00:12:00 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="057304400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 721.495146][T24512] binder: 24511:24512 ioctl c0306201 20000080 returned -22 00:12:00 executing program 0: getcwd(&(0x7f00000001c0)=""/14, 0xe) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) close(r1) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="6ffe000011882f14a2a5197f1059f70000000012000000"], 0x14}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x9c, r3, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x138}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x705c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe69}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000000}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x2050, &(0x7f0000000300)=ANY=[@ANYBLOB="747261bb7f37bc3a816a9e6e733d66", @ANYRESHEX=r0, @ANYBLOB="2c77010000a7aa", @ANYRESHEX=r1, @ANYRESDEC]) r5 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r8}, 0x14) getsockname$packet(r5, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, r10, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x108, r10, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x40}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xee}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x44890}, 0x20000000) 00:12:00 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x1000000, 0x0) 00:12:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400008000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 721.703901][T24524] binder: 24518:24524 unknown command 0 [ 721.722327][T24528] binder: 24526:24528 unknown command 0 [ 721.735180][T24528] binder: 24526:24528 ioctl c0306201 20000080 returned -22 [ 721.785149][T24524] binder: 24518:24524 ioctl c0306201 20000080 returned -22 00:12:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000a000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:01 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x20, &(0x7f00000013c0)={[{@device={'device', 0x3d, './file0'}}]}) 00:12:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="057504400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 721.973644][T24540] UBIFS error (pid: 24540): cannot open "/dev/vcsa", error -22 00:12:01 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x2000000, 0x0) [ 721.993759][T24577] UBIFS error (pid: 24577): cannot open "/dev/vcsa", error -22 [ 722.037214][T24614] binder: 24579:24614 unknown command 0 [ 722.075470][T24614] binder: 24579:24614 ioctl c0306201 20000080 returned -22 00:12:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="057804400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:01 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x8, 0x4, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xcf5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) socket(0xb, 0x80000, 0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="0000000000000000240d12800b0001f761726964676500001400028008001a000000000005002c0000000000"], 0x3}}, 0x0) [ 722.181791][T24643] binder: 24613:24643 unknown command 0 [ 722.240423][T24643] binder: 24613:24643 ioctl c0306201 20000080 returned -22 00:12:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400012000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 722.346130][T24651] binder: 24649:24651 unknown command 0 [ 722.385108][T24651] binder: 24649:24651 ioctl c0306201 20000080 returned -22 00:12:01 executing program 1: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x34002, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = dup(r2) ioctl$NBD_SET_SOCK(r1, 0xab00, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') dup2(r4, r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000200)={r5, 0xffffffffffffffff, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000040)={r5, 0x63, 0x9ac4}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:01 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056302400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 722.486461][T24655] UBIFS error (pid: 24655): cannot open "/dev/vcsa", error -22 [ 722.508123][T24658] UBIFS error (pid: 24658): cannot open "/dev/vcsa", error -22 [ 722.532538][T24659] binder: 24656:24659 unknown command 0 [ 722.559904][T24660] block nbd1: shutting down sockets 00:12:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) setuid(r1) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r7}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000001400000001000000854422e1000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 722.596297][T24659] binder: 24656:24659 ioctl c0306201 20000080 returned -22 00:12:01 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x3000000, 0x0) 00:12:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400048000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 722.746220][T24766] binder: 24688:24766 unknown command 0 00:12:02 executing program 1: syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0xc8a01) creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80800, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 722.787070][T24766] binder: 24688:24766 ioctl c0306201 20000080 returned -22 00:12:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056303400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xdc92}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000030000000000000000a5000095002b00000000007e4754c2f0f4e06efab1350aff00000000000000035c8d63dd359a7a758587200be38d99ee431f24670097683c3ed4e599233cd981817cc50e04811611b75deb"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000002, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) recvmmsg(r3, &(0x7f0000003540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0xf0efc305c133e6c7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000380)={r0, r1}) sendmsg$rds(r2, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 722.955674][T24775] UBIFS error (pid: 24775): cannot open "/dev/vcsa", error -22 [ 722.982374][T24778] UBIFS error (pid: 24778): cannot open "/dev/vcsa", error -22 [ 723.014591][T24777] binder: 24773:24777 unknown command 0 00:12:02 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x4000000, 0x0) [ 723.073700][T24777] binder: 24773:24777 ioctl c0306201 20000080 returned -22 [ 723.083107][T24784] binder: 24781:24784 unknown command 0 [ 723.107421][T24784] binder: 24781:24784 ioctl c0306201 20000080 returned -22 00:12:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440004c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056305400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:02 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvmmsg(r1, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000005280)=""/118, 0x76}], 0x1, &(0x7f0000005340)=""/250, 0xfa}, 0x3}, {{&(0x7f0000005440)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000005840)=[{&(0x7f00000054c0)=""/230, 0xe6}, {&(0x7f00000055c0)=""/78, 0x4e}, {&(0x7f0000005640)=""/192, 0xc0}, {&(0x7f0000005700)=""/140, 0x8c}, {&(0x7f00000057c0)=""/80, 0x50}], 0x5}, 0xffffffff}, {{&(0x7f00000058c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000005c80)=[{&(0x7f0000005940)=""/229, 0xe5}, {&(0x7f0000005a40)=""/60, 0x3c}, {&(0x7f0000005a80)=""/209, 0xd1}, {&(0x7f0000005b80)=""/226, 0xe2}], 0x4}, 0x2}, {{&(0x7f0000005cc0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005d40)=""/129, 0x81}], 0x1, &(0x7f0000005e40)=""/136, 0x88}, 0xfffffffd}, {{&(0x7f0000005f00)=@hci, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f80)=""/241, 0xf1}, {&(0x7f0000006080)=""/43, 0x2b}, {&(0x7f00000060c0)=""/97, 0x61}, {&(0x7f0000006140)=""/104, 0x68}, {&(0x7f00000061c0)=""/180, 0xb4}, {&(0x7f0000006280)=""/40, 0x28}, {&(0x7f00000062c0)=""/130, 0x82}, {&(0x7f0000006380)=""/151, 0x97}, {&(0x7f0000006440)=""/81, 0x51}, {&(0x7f00000064c0)=""/228, 0xe4}], 0xa, &(0x7f0000006680)=""/201, 0xc9}}, {{0x0, 0x0, &(0x7f0000006b80)=[{&(0x7f0000006780)=""/18, 0x12}, {&(0x7f00000067c0)=""/100, 0x64}, {&(0x7f0000006840)=""/166, 0xa6}, {&(0x7f0000006900)=""/206, 0xce}, {&(0x7f0000006a00)=""/235, 0xeb}, {&(0x7f0000006b00)=""/116, 0x74}], 0x6, &(0x7f0000006c00)=""/85, 0x55}, 0x5}], 0x6, 0x2, &(0x7f0000006e00)) sendmsg$nl_route_sched(r0, &(0x7f0000006f40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006f00)={&(0x7f0000006e40)=@newtclass={0xac, 0x28, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0xfff2}, {0x7, 0x3}, {0x0, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x15}}, @tclass_kind_options=@c_hfsc={{0x9, 0x1, 'hfsc\x00'}, {0x74, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x3, 0x1, 0xd03}}, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x8}}, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x0, 0x3ff}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7dbf, 0x8001, 0x4}}, @TCA_HFSC_RSC={0x10, 0x1, {0xfa, 0x2000, 0x3975}}, @TCA_HFSC_FSC={0x10, 0x2, {0x8, 0x8000, 0x1}}, @TCA_HFSC_RSC={0x10, 0x1, {0xfffffffc, 0x3, 0x6}}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 723.269899][T24889] UBIFS error (pid: 24889): cannot open "/dev/vcsa", error -22 [ 723.293748][T24891] UBIFS error (pid: 24891): cannot open "/dev/vcsa", error -22 [ 723.385577][T24895] binder: 24892:24895 unknown command 0 00:12:02 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x5000000, 0x0) [ 723.449779][T24896] binder: 24893:24896 unknown command 0 00:12:02 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) socket$inet(0x2, 0x4000000000000001, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) dup(r2) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0xfffffffffffffff1) getsockname$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x18088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1580, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) close(r1) r8 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r8, &(0x7f0000000140), 0x10) io_submit(r9, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000004580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) io_destroy(r9) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r10 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r10, 0x2, &(0x7f0000000040)=""/4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x1) [ 723.514378][T24896] binder: 24893:24896 ioctl c0306201 20000080 returned -22 [ 723.537787][T24895] binder: 24892:24895 ioctl c0306201 20000080 returned -22 00:12:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400068000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:02 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056306400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 723.545944][T24900] UBIFS error (pid: 24900): cannot open "ubifs", error -22 00:12:03 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x1000, 0x0) [ 723.673717][T24965] UBIFS error (pid: 24965): cannot open "/dev/vcsa", error -22 00:12:03 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x6000000, 0x0) [ 723.756361][T25009] UBIFS error (pid: 25009): cannot open "/dev/vcsa", error -22 [ 723.869036][T25014] binder: 25008:25014 unknown command 0 [ 723.879276][T25016] binder: 25010:25016 unknown command 0 [ 723.925402][T25014] binder: 25008:25014 ioctl c0306201 20000080 returned -22 [ 723.952977][T25016] binder: 25010:25016 ioctl c0306201 20000080 returned -22 00:12:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056307400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440006c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 724.091766][T25025] UBIFS error (pid: 25025): cannot open "/dev/vcsa", error -22 [ 724.103945][T25027] UBIFS error (pid: 25027): cannot open "/dev/vcsa", error -22 00:12:03 executing program 1: write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000040)={0x2f, 0x6, 0x0, {0x3, 0x6, 0x6, 0x0, 'ubifs\x00'}}, 0x2f) creat(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x81008, 0x0) [ 724.143901][T25029] binder: 25028:25029 unknown command 0 00:12:03 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x7000000, 0x0) [ 724.200848][T25029] binder: 25028:25029 ioctl c0306201 20000080 returned -22 00:12:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056308400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 724.282264][T25032] binder: 25031:25032 unknown command 0 [ 724.318937][T25032] binder: 25031:25032 ioctl c0306201 20000080 returned -22 00:12:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400074000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 724.433362][T25039] UBIFS error (pid: 25039): cannot open "/dev/vcsa", error -22 [ 724.456932][T25070] UBIFS error (pid: 25070): cannot open "/dev/vcsa", error -22 [ 724.508034][T25119] binder: 25066:25119 unknown command 0 [ 724.564226][T25119] binder: 25066:25119 ioctl c0306201 20000080 returned -22 00:12:03 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x8000000, 0x0) [ 724.610076][T25145] binder: 25144:25145 unknown command 0 [ 724.675654][T25145] binder: 25144:25145 ioctl c0306201 20000080 returned -22 [ 724.799246][T25150] UBIFS error (pid: 25150): cannot open "/dev/vcsa", error -22 00:12:06 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[], 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) socket$inet(0x2, 0x4000000000000001, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) dup(r2) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0xfffffffffffffff1) getsockname$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000000c0)=0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x18088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x1580, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) close(r1) r8 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r8, &(0x7f0000000140), 0x10) io_submit(r9, 0x2, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000004580f02000000003f420f000000000000ffffffff000000", 0x20000238}]) io_destroy(r9) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r10 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r10, 0x2, &(0x7f0000000040)=""/4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x1) 00:12:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056309400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440007a000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:06 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x10000000, 0x0) 00:12:06 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x101000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x3}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002c00270d00000000000000001ef01cfd09baf87f89c778f1fb5f61001f0000acaa7429e769c8bdc06cff44126cd942dc385df3dfcdeeea2a941ddf0c39634684ddf4eecb5f43", @ANYRES32=r3, @ANYBLOB="0300000000000400771b1a1e4d7a2468ecba4b65aced2a"], 0x30}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100686600000000000000000200000000006440dd9b68a5ab8877efb62f00014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) fcntl$getownex(r5, 0x10, &(0x7f00000004c0)) r8 = dup(r4) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000480)) sendto(r0, &(0x7f0000000140)="14f4c6b1e6f5cc9e22240f8c5296eea5072c750f86dea1e44375b13e561d02c1e947e6f1569bdb1814c3f5a4764065e690bb92c58610b3ca54479802db1438af29c6b2ac73416665c6765f65066ff91eb624bfcbdf5df4d66a919377b0d7893b8c5a78a373b6dcefc77e5ca35fc78aa956854f828e481204a668713dcfefabde317e3bec0d50d218e5790fd6489b999a1709365443b4c1cee70865c5612907f307999dd9c63fb5e25f3ee7a8256870b823a864ea98bf856fda783b655dbe11a1ffae1606797315a0fe142c930879827b0167131ef58ad3e6929d4b7e98d3c3a45b67e53b34968af8b0c11faecda1f581976cc2c0519b9ca9", 0xf8, 0x8, &(0x7f0000000000)=@ax25={{0x3, @default, 0x5}, [@default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80) 00:12:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x40) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) exit(0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r2, r3, 0x0, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setsockopt$inet_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000140)="f4d0a6a60ec8631127e0d89dfc38b5f3f870a17ea78ae62d04392243ab1ffe9c9b9aed8436c18ae0dcfed9f61fff97772e99e8887b062922d79ae7814a535d8b6b836c802ddabea0a0d6f4f06f726f1db467431dea550e34a84d909bc19f3773faeed4765420079369fbaa8073254674e7d8294c68f473d944d3e701439f48ebe321efadfd934349443e039c9c8abf94ec85ca4fd224bb7f5ee4448a0f661f56a4df4941e7", 0xa5) sendfile(0xffffffffffffffff, r1, 0x0, 0x1) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f00000000c0)={0x16, 0x2}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/qat_adf_ctl\x00', 0x4a2000, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dlm_plock\x00', 0x2302, 0x0) setsockopt$ax25_int(r5, 0x101, 0x9, &(0x7f0000000580)=0xe1, 0x4) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000001200)={0x10, 0x30, 0xfa00, {&(0x7f00000011c0)={0xffffffffffffffff}, 0x0, {0xa, 0x4e24, 0x0, @loopback}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000001240)={0x11, 0x10, 0xfa00, {&(0x7f0000001180), r6}}, 0x18) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000500)) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f00000004c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000480), r6}}, 0x18) [ 724.826563][T25151] UBIFS error (pid: 25151): cannot open "/dev/vcsa", error -22 [ 726.908245][T25163] UBIFS error (pid: 25163): cannot open "", error -22 [ 726.909936][T25164] binder: 25158:25164 unknown command 0 [ 726.942294][T25165] UBIFS error (pid: 25165): cannot open "/dev/vcsa", error -22 [ 726.943918][T25163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 726.972644][T25233] UBIFS error (pid: 25233): cannot open "/dev/vcsa", error -22 [ 726.981622][T25164] binder: 25158:25164 ioctl c0306201 20000080 returned -22 00:12:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630c400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:06 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x20000000, 0x0) 00:12:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000030005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:06 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000001140)=ANY=[@ANYBLOB="f4775a3a26df4c3da4fcbfe03a7546fe671fdcaf13bf7aad9c859d9f52d4b65bfc0360e18444a44f5a8a339f151388723f5b6416d1694009c0b291ba891a6491334292470fa56d1e9a7ed4f4ad4de0ded9c2edaf8639e0d45b02a059fe7d3ff63e89ff0a60d025ba607bb96be0214e13cebf2008a9b615797ba043097d6be8a5e3f8d48656bf5132b86d5455db5c936192407457ae"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="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", 0x1000, 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r0, 0x8001) [ 727.371145][T25481] UBIFS error (pid: 25481): cannot open "/dev/vcsa", error -22 [ 727.387830][T25470] binder: 25444:25470 unknown command 0 [ 727.405485][T25480] binder: 25454:25480 unknown command 0 00:12:06 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x20100000, 0x0) [ 727.412726][T25481] UBIFS error (pid: 25481): cannot open "/dev/vcsa", error -22 [ 727.439527][T25480] binder: 25454:25480 ioctl c0306201 20000080 returned -22 [ 727.468302][T25470] binder: 25444:25470 ioctl c0306201 20000080 returned -22 00:12:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056310400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 727.600761][T25486] UBIFS error (pid: 25486): cannot open "wZ:&L=:uFgܯzRԶ[`DOZ3r?[di@ d3BGm~M9[Y}?> [ 727.600761][T25486] `%`{k!Nο y{C }kԆVQ2mTU\a@tW", error -22 [ 727.623785][T25486] UBIFS error (pid: 25486): cannot open "wZ:&L=:uFgܯzRԶ[`DOZ3r?[di@ d3BGm~M9[Y}?> [ 727.623785][T25486] `%`{k!Nο y{C }kԆVQ2mTU\a@tW", error -22 [ 727.797019][T25594] binder: 25506:25594 unknown command 0 [ 727.840030][T25594] binder: 25506:25594 ioctl c0306201 20000080 returned -22 00:12:09 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="654ae219b3d7ff8b61779d3eed942c3541e8ab5bf5d4d09539c11bb432dd7cbaa4ce28f3b4fb719a0a300a59b8fd1ba3946705bb44eed6efe83e43e61c40e17d25dd0e12532f2c3b125b1ec6fd7e658854075532d11ab705904155e77d70150f12f4c9e1b3c3de9e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000050005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:09 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r2 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000001140)='\'', 0x1}], 0x1, 0x1081804) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "0eb61538a462ee812ba43ffc89bf1173dc3d06375d14638fb21b49d26972d96ef0b4b2e6d730ad6a7562b478c2974a9896747dccb30e7f63a1b51ec059554277", "1d0e47f158fae68f4d2aa224439c30eb3b3e468dfc3035d92c0929eeee707650bb008bd2cfa188d8954a0ede9661149d95659eff1ce2212f115951f98f736335", "3edea3fa98ed88e7de49fc2596c78e888e955cdca02efa85c8116766d8f71310", [0x0, 0x6]}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) openat$cgroup_procs(r3, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000000)="1c0000001a009b8a14e5f407000904241d000000ff00000000000000", 0x1c) socket(0x22, 0x2, 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xb, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0185648, &(0x7f0000000300)={0xa20000, 0x0, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x980912, 0x9, [], @p_u8=&(0x7f0000000240)=0x40}}) r7 = socket(0x2000000011, 0x4000000000080002, 0x0) sendmmsg(r7, &(0x7f00000017c0)=[{{&(0x7f0000000500)=@phonet={0x23, 0x2, 0x2, 0x1}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)="7605db16bdf66a86bd050691ab85dc438df3b87cdba500ddbc7797261e14311609f644bcbd73ab3927a5fb0ddb2d6872775079ab186a82d85eaa4c46bf098e9513a716c79a7c4f5d6a94cf54ca2b478f09b91efa35bb8818dbdad5a3ad6dcaf50775a25cc52d59b8cc2729b5", 0x6c}, {&(0x7f00000006c0)="8d04c7a9fa170eb1c1a2150497ce01cdef6ec963eb351a37941377e2fd54d77863d6c7ea6c005491a8067c5025299886881a918ea4253c880db94e14a13ff2d15ae10fc30755678e4f2eb691e0fcdae7cdbabce5abc1f7bfcef549fe02fb9b6e35e6ba509c23e05757c734775e32772cacbb57ff8203b986a952481539018b0a8be8577463bfd4298fafb35f840236ae55895ae934b116a958319c343dca39c03b2e94ec45fd701d4c", 0xa9}, {&(0x7f0000000780)="83457399489be6dfa822ffd5f972f907357c0ebcc590d92fb4c5870d50c24d26a5705fe1649ce9100948b7ea6618c1969a472196c44d310f172b63d72dab8013b104d1203722a90ffbca372d1076fd63a6cf8e4964a2f21933efbf2a52bf2581f520133607c4aa4ccfbab1bff0a9d5421b95053310425c3fa3281f1712d581b0b15d36f80a199ff71aff134ebb91af8572ccc78dccd0ce11dd430e871c3909183e7ea147a18e492dfb287109147aa5", 0xaf}, {&(0x7f0000000280)="5cc1d6d24f1c8123c3c14c7d2070abff", 0x10}, {&(0x7f0000000940)="f5ed1f7e7a0d4897eb30291172b3c53245ba44312a58b1bdf17da2fbaa9aa71d6ff35c7f62b289f0c1c57a0bea10880a6026d37cf7e1fdb8a5ac6b31fe7e682a8f767433cecdc7d866aca7d66c6326e597e47974884ef288f004642fe1b2cbdae826fc958a404f4f87d13c870186073a6873b73baccaf6de730bcfca16548e0cca2948cc0d96e99532b212bf37e114ae2ada25eba1cb15ea880e2482ba01a4525be7aed7a79af851f8ba325c228986ae573e56643a3d891e9bf61c0225249b47", 0xc0}, {&(0x7f0000000580)="d91f777c81a6a4d67adda5c501c337992cd6882b2995665333df96bd9541732ad70a9c", 0x23}, {&(0x7f0000002040)="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", 0x1000}], 0x7, &(0x7f0000000a80)=[{0xc0, 0x105, 0x3, "7dca229db0904bb07e179de3ece559837240f39bd046736859acd88790871e93da90df4a2fb81dfc48e0bd6fd9163ec2835da719db48abcaf5d2d65ed7a567eaf8223335079318c8cddc3d2f46dd8a7af7308466730831c12dd01bb2987425f0b62c123c03d448f347f6a05405eb20d82e42db86ef94a72db534022b288a5896d20fb849030fc9304bc35b0dfc02542051f14f13d821b476b7ed250234937a4002aaa542b095d9cb92"}], 0xc0}}, {{&(0x7f0000000b40)=@nl=@unspec, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000bc0)="00ab2149f966d2cc700bcd624f71a9b56b662c71da700c3ef63bdd3e9938d4c8aa6b3a38b8839d0d4997d30b3e557c66d8b64bafef58731b841715e7a18c7a7f692241c425683b6ee3ac4d9a28af2c8a0fc9b945cc9043dbd3f10597d33308ddbac1d769", 0x64}, {&(0x7f0000000c40)="f4431122295913cad0e4a92f572a8c449f482180dceba5818d9929d7a640c0a3a99da26893a6fabc3b45627a3fd349ace8e717a2f93a398e2380a154bde37381d287f674232af94126f6be1d686612116cc32aeca8f0f72d97e3c45a299055553cc99164fcafcdf89e85f4c03408113a094caf7fd26b3567f3ce9b5ed6da32a182b42fe16dd01f10041639aaf9", 0x8d}, {&(0x7f0000003040)="546efb8c5d1cc5e36894fe9daf7e05194cf511ea7a4649dec6d335bd092fc7fd38a1d21c03aaff9d3259d1cfc4f1d7fd110fd1bb6126b9953b0e20910813f3bdd0e9ee06796c0250227f8b08a47a2e1a28e440514b7d8b21524220ca8f73d7187d1f7f498d8bd75f69826f258c734c8a7efe3a9e8800248d1fac451c93c5fece54da9599bdeb68e4d1397f7756a6e100ace5e71ea98635a5cb4d99831df475fb7bd1c780f608eff75eb70cd0af7604acd1aedd79c0a3b803b0c03032a06e618a1eb673dccea79d3a34c1c70591d1bfbeeaf453b20a3cca880ce2137d7725d83512aba2a8a2be322b9fb7613c6bfefee311682454e6bc63589a28d62e769ea80fdeb1fb0c6ce8c74f946a8a41dcbb2c2d2307066fb24ed3f2f6a598d2e6a3c6fbbaa0fafd0b52748bba4cc3ca6537e5fbff64c95d759a7d0f567b5ce199f53d9b591e0cd4108178abe54ee641467ecae0e2d31e8181b96facf6643020e26f0dd0cc7af44889087cf022fd6469c3f545a48989ede199ff358ccacfafe0fffc7f8b80b9dc7938c0d5ec388be77dd417630b18ecaea0d71367cfbc87842e67af1afc85c3fbcebf3601b40fed8e5da9852fe3df281f61a9a53479062771519c40b9e080c3b3744cf4ab95be72989a5b48fb55ce30d89d36e1726d1eddf01f2f1e165f070c74309db0bd572236b9babd38c881d2b413354e9d7b6d700132a010b4abe7ca280a1e8e204a87d83b7d9311ea1f7a96d5261e376529ee465388f3a7eecd99f04df3ae5faa7b6bd5baffc1633bf802c54c04f7acd84b1211af0df7d37672ee48afe39bc8aa0270ddf1d932bbcc96bf4f88007aa42f927dc11ef9e041a2861f4fdd607b9d469dd741f402df9fe78959c5de646e8ed2e643c457bb6e998af27e455ca5f08c999c67e59c9f73d1d7fa919a52753da0f15511fb581def91c7d434f406f3270dda64894f478f29a996c942e1c615474c4b5853f72fb81dd1809eac035e71aced80059dfc754dfec5e9cb37dfbb613c757181cb42038e2c6059174f3063c996889fc643a69e5546c5101fc245ee2a1eb7d35588a4bbbad6ae333444539a350a3d3e94d9257dd2e21614617c96a8a1cbc14624fb48096e1d0173753e300ab1f4c5d49f5daf0e581ac467adb78d4400fdeb2a32884de83777e73b700aae68f4a7b6de04ebca72eb79f6d25a83576c04ca582c039c99b32050d163db74714a946d626c7e27e74c5fd59b6dcfa926564d12ca7038937ddac7e98265e343fac0db70c1025ea190872220a57e86f2e20eb91a8b0aa8f2e2427d38690f7353afa72785bf189d3a60e29a636d5ca8b607138774e07c875aee7f687299b66695bcd50e9e4fc93c7a505b987c1317242735f0400bab220dd06dab564dfa44744bf1bb3599fc4b5eb9562a816244c3652f3cde04a1aaef6e83ca2bccbcf5e00da48640bde954b88864763318645cdd17136c72fbdfb072b89b0197ce6e23cff5e13f4a1deebf6cdce26de1a3c966fdc8436f09a7e8d63741be3a9f2d8838dac6b4c301759daea88154bf06a2f5b0afbc43bec29d4344314c74edfc12fc2ea1ba24ab628a92eaa3b4dbd81647323af1dd724a9769cbd28b5bc57b703f07c46807c0f71904adbc46db0d4e7c9b2a247a68a98fffb887480c156f509d7ff697176dcea1c6aa81c58d7a86e4bc753905ffcfc3dbb021ccb552965e5959c3db06f37bf894678e24ba7d54c94ef15e0859220f2c7321449c71360c00d20cc9320606956a83dbe0cda54889f36c0c1f2824f4d60f9e66f9d58b525c5a127419132a18f75a352f05117b0e79bdcb5a557552bf22ef6b9b870935ad0b7f942f51e9e4fb8a1a71de1fe960b510b4114e959457ee07d49da186926041381fe6fb0d03237d4df9a7399f2f879d7ae85c90e6f399579d0ba2ed1f2c700331250f79dd5129e4f410def4ccdb81d90b71f1bfde28118f1e50cd4d2d4bd90f9efce4473449a5af300e7dfc8c2ea072e90ad3d48a046f71209405f717f0d7efce29f686f482659585161183a66e664cf8dfe23c1675c8f19ac43aa59102aec82a133a050c469ce174400d701d833934797dabb82f5e49d69da24ee27a5995f311d2a315dae16d3d650aed4e91069fcfd79c87f52c6fb08cf878783cf56cd74e3b6c36ea458837984785b6c5ecb8ee288dbc3cacd7866fd3cfff6dbca4e68e0368673c33ccee2bb954dec57939d7d271275cdb2cab64010922c00ab2eaca0c6d857d5f679c8fd8cc3af88fd23b82debefb8f49685e51c789ad89d7abda491ef6204514294cdcd3a6fc234c5fd774e4f868a85928dd3a2f40f86082dad37c4e39740d08c02e01f806715e9aea3bedb8b6f10bdd88109a466ef39f1825e46266e13124aa005cc3df3525e3967a95c59858438e2f997ca43222d944d8afc7eba0b2c1e5dcf438451783164526c5387ca562a4022a813847387a54bfd7773cf00f94f9f5eeeac0f3c7509794bb538f369f71005f4f3e3fff5cd6e7f509a5d6da12b43f283a07ebc4861e5b9a3f22bebaf951d42029ab234a88065b2336d791a10b8487e616ff88de7aeacb6466fce15f63e3ccb6599b3c26103be6c8000915aa0ddf72f968a55fb16a9774a59beb7f8f139561f2897e8fc184aedbd85e89a7c7d53b180e03637b896abee4e3b9ddbc565897b3eb9f699e9f9cf59667bed4680d21ef78fcd7aa12c235b95a693ea1c333325eee855b9e5486f0ffda0fff217d9b2ef1d6d806ea8c341893679ad8b7546cffe1ca8eb491f4f51a7c41c7d1b5a605c9ca7e53070deaa5892632b838a58b48c4ab23b3a5bb1d4ad535d3e3935411128b435f884a5ecaddf76889d1bb64a6dc63f89ecdc978ee2f64e7e59c8bd34367256e9af7e643c1a595e1ecf879af143c270b942264517db4b521e39640d0256d8323650e2536f2c02cfd476993545acad68502329f455ed1b4178c1946e055765275b56fcc337da9647645d317910fb47ae57cfaee94140f3e630fece2915756dd4e0297ddcf07c659cc34919e4a4296ef62f854badbe9ea5c3abe519f5ec34a59c0fff01e6c57ca59f0d45be0f8ab3b7e484b5329820e13cc587a651c286ccfa1b8db4decf72d2d522af76ae13aa45b5a2a802040653c53bdc51c3f45b30173621f27deb7016dc79c179f8e27a8298afe3172d77be54719e68186b4920b22d98238b82c74d3bd155047936ecdce41cac97d4f3c115af8104cea08a1f69fc60cbe951c48ce263bce6589cb7b162098dbc069fcca9062e8f3c76f25c5a7409ab4eee8f171169d969437cc67095b784dcbcf27268f905d7d2a3b80bc1fe0d0456a5ed07af01d5f3825224bab486cd617f5e853d504ad0b33d97f4b6c4f79ed6b2269ba0db601da599a2e99fe4f0fa14c50a8b26e2b42011a90cdb4ef6b6830ec4d1a77480e5443b964d5289e254e81bd272d2577598b5b9368063fb9d465f6a3b91bf142b3f8883479aa40fd16509bb87f6502ab65cc7bb8b2dc2d0356f38802799672388383bbeea612a2a8d61c0109590b160bc74756a009bd327f5e628fb54b7a762e49818da77dd341ebc556563f543771be14cac959ad152b5693904b6a70bba05555279d8f10a4b384e1594b0cc6ee8823d1d9c21c564aa7519c30bc2662a53ebd03d77b087119f9275e6a32895f60129c962c34e76cca0baffa5e6d8bd90e2eb070ee5a3b7593c451778386aca863fd9d44680c8f9d0d07e8371caf3d3d63824abb476eb0c8bb6c43e5fe8d2a922efedc72087e8e0ebb11303e20350ecf740dc1946234c1468d141d83c0c3fbc3d21daae854b2156e7b6241e505a4f80f9ce294438c0904f7df4b13d06674ab1e9e97eb30480c9872dcba2de0a7a8f296ce689a8834d442117e11bfa1a1351ff2dc8ec7f35e6da64be0d0f34834e04c621a0b062a339f20fafa928e60560ecb3493c5ca57cc90a074d54ea607eec226e00d13bfaa0cf8f6abd70d9537ce34a6c59b3cc095bb64f04dd6c1f3c9945abe6ee61566dad2478ab96eea3578445a472594181638e91f95eef2a0aeb96a8c0c0c97183f106ae94a37b35e7a7dc99f3854565d6bc1cbe66b875f9b6648174a936a3e80466b6aa4daf427d882fe58b48bfda75f4cdb1e2f627837e131eb259941187b1f6ff30f9f13c6da231b8bb76d00ddf79b9d51f2e05ffdc64a33fd53052e5a934d0dc8478dd837b927aaaebb1d99e06372e7424fbfe384424b9a8cbed19715d8ac4eec0ba1a7c60cdb093d81f3f89a483d94dd894e640fc66d7d28d18e823a69249d1c3618d17b737ff542c9f1087a8791649285c6072639b367f356fac7e725d579c2e000094bb5d364f7a3a6428be3b8798b26c5aad3d9da6389c0d0ad3d38d3c04351a90b03ef7e9710cb9eb4ca85f1dcae30735147ebed499708faa5c19cc26298c6919c692fde660410a9e1437d562d0ad9c3975f6309f10ac83410f4f4abb3935f5af7103be47dbf93231081f26151202e87fb259c7875b3bb7e17313c6463245726a17c715e409c1eaff8a12b17b59c28f60bded28a1d79f942460f0ca70c8bac2d55f2c117c1b684ffae9157309176d4d72ae53fa25fc65ef85afc63ae2d2eb100889ef186309919e864c513b51e576b9ab063d73c1929728fc36da70ad1f6124b94f224e3f03debcd515557140df1ce4b864dddb564fbe6c201a55d1cd5f19b8abee7724d84cd670218667f1006c2cf7973e605e2b30c9f953d10f47e41ae6069d729e5987c04bfdfc28acc00c61fb1f7f4ecd3e3c6ccf11800cfd58b1b104d516d4cda794ea0a6d42f3986661a2e28670572b7d6e555c6368aef573c003903d06f6e6cf940c03e6ff9ab30b5416ff750a8cdd12eae121a5292f797593c2468b8406a10d1f1ba0e02a4ab49539c4d44ec14941c1f18aa292abb90ba6a281f85722ebe3c4c08e61931979d6d7869d77218b5b48e2760d9001769ec119d9cfc1bafcc51bec2a0b77be9f6015cb0894b5e1378bf80237156335b01dfe583a92ef67f608b86f2c8d096726dba08455bc4d671485b3c58e144421a27e4a264dc547ea68340758863201880a26517445e24b17e0e01320dd9429fff17f112cdfd1163763f7fc10e1f3500982f854d885bcafdc4799d9662c04e9342192caf691cfd378273686bc82590bdf99288603a1ea0d65578a700416da59a6dbb540f0029fb2e32b2ba451ccd88fc08c26ea7d0c827ffaea44949d0820190ecac317ef0f993180253974b683f79b0cf1c17e873076d97b9002c575969f9b4b3c3406eabeb62dee1564472832429540b6e38e6e87502e31cd292c72e56d11a29268c48210bc8326928f0980ce7f3fd11995c4e63beca8316d468ca33755b36931a3266c0d4e072008fe91ec0c08f052bfd2cf69b1fd124015d3216a36cc213dd827a6214d008f12b640a72fe0e6543f0ab7e1433dab02ca98cc2e2d44fc118737c061345731025391d008762a6f32a03c52aa7312568ac14d917bcdb3892c5c305d78f1f7e6d1692b69d81879fac1be4977040bc5bea49bdd0501dd0c40c52bf9eefa5362bba2a953ceaf4840ed4a7b3d43a6515c2f874a119b89cf9286c1d3919b6ece87e2891d6d789e1c5d541e0537679314510aa8a0dee267a12343091b19ef2a3048355bf0406daa6a6f90fcee3ed49a788d914cae3530d1a57d8ea5fdefac574e72278d3528b3f8b08ee954013d456418a900319da37f91f461e0146900830b68a872683c380e539bbee845dda3e6485020d19cd8794ac09376ae9bac1bcb7971fbaa54453c0997f1e8985", 0x1000}, {&(0x7f0000004040)="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", 0x1000}, {&(0x7f0000005040)="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", 0x1000}, {&(0x7f0000000d00)="4aa520c7e6f835f42b7d043af0897a69c034541c3a4522064ca3687fc3b2", 0x1e}, {&(0x7f0000000d40)="f08d94a08464193d03edff282c2c7947baa54b6e4bc27bfb7c9fc20cea3bd914324dbb4a00c6a7ed484992abd2d2e240bf489c31c8e7578d771061f8bda3a07ef48613dae594262b36c60d99ac0532d80b1a84caeb727e7aff8940919cee094b636bcee2848c654ad43147", 0x6b}, {&(0x7f0000000dc0)="9335235e3db48023d249b67469a3d71f4196ff7f92f6609f2d89c0c59a642350604f772aaa0fd67812df5b4cf1c7f213757262e71cedbf0e0274d8073c19e3ed426f229483f006aaacb69ec3c660fc662ec23468fe76eabfb8c763d12ccbe87f07200732ffe5f5c2cabcdf79168e228c56a7e15bddd838ff0551c4b2e7929665ded5d40b313b7e2141a3ec98d9de4b361dca6f2c58174dd4073ed9b73b531bd3ac5d89308ef1c3d3dadb", 0xaa}], 0x8, &(0x7f0000006040)=[{0x60, 0x100, 0x2, "af92a4f0cf7c0720a6a35c0992a71ca7b83039dc4a28a41a79d4f5917351261e13ee950fbe4690ecb8f455b6dc107e5bad24fad35de0a9c04a7895e6eb15e034fde13004fdfd0fc47fbb346374a1"}, {0x18, 0x84, 0xffffffff, "26f6b26105c1"}, {0x20, 0x0, 0x3, "34ae2decf2fb3d243cd3d6b4c2b9"}, {0x1010, 0x110, 0x7ff, "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"}, {0x20, 0x116, 0x2, "a16eef748c4e3367195c7fca9ba5a3"}, {0xe8, 0x117, 0x0, "1d92abe29962886f75b0c7879009950e21b7f833ffd9f459102efa565e542442d4f0b7ec0fd1aa1c8c562c228408222cf1a940ffd591fced8c08dd85a6e071e6d715f935b2d724e439c1d4e2851a4516c5622612a9422a8242f1b9a80dc54ceec6eb6e919f5e93215e7abff1e4fe1e78ee4317a53f1141b459c698022051cff82e3bff567f80ce7b3dc8bf9474fd480c66c26619ece02008dd9943011a2f6597345b58d87b6651743c1416d2acb8bb048ef593b30659ab68f9feacf92d6596be2bb3c4894a1138e5ef1fb9546b1fb1d1b8"}, {0x48, 0x29, 0x1, "ff806fc0c9075c5a923b11251578f7f37943932e394ecb510d77cd205cdce78a3ce258332974eb01940514dca002d3b00cc437a3"}], 0x11f8}}, {{&(0x7f0000000f00)=@in={0x2, 0x4e20, @multicast1}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000f80)="69213e3069d8de841bf85d76d63a1258", 0x10}, {&(0x7f0000000fc0)="2ed4e1cf1162bb9ad7c800b24d0d53fd62bbec83b62f5600041b842b40f7c0ce477218d4ee6bd594af7da8ec2ff3b937a637", 0x32}, {&(0x7f0000001000)="81e3361ee4ee29b1a65c39b03d3f124ffaa2d3ec7e3b872a54288ac555125848b647f84a92", 0x25}, {&(0x7f0000001040)="38a5bb49150ed0730761094b61e961d6e9f80910f5bc287a77d10a577cf361e2b56e0f5de6fe54a1ea48ad12583621d6cbcbb1a4043672b8236774b8", 0x3c}], 0x4}}, {{&(0x7f00000010c0)=@l2={0x1f, 0xfff8, @any, 0x2}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001180)="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", 0xff}, {&(0x7f0000001280)="f642888bb28fa778a0a7b3430d49dc381a87419eeebb8505c37a9fc4c34e1ddba13e99350170e36c3030a6f3188e559a5668b10c2ec435253a2170c5", 0x3c}, {&(0x7f00000012c0)="13db222afb10c53a2aaffdef48ad515e16c0798760934d1e36fc3918f0b7d74c00ace93d96cf37f5f41cadc9d8a2d3b0834e923eb9c94b281f495f52078d8ba855051a9f78ec54ae2b66682035abe0e6c5785488172897bd0b460a416dfe176995e9b3a7e14bddb4052cce7df3a5dc380ca5cef06eda8d018f7589d9fc48e165d4141f35ef9ad5634de828e7bd573cb857c54e888dd124c8fdf3042eb7d25928ab0cf7b4bf5b01e747", 0xa9}, {&(0x7f0000001380)="bcc43e70cfb0b8e859d5e56187c5a1efa1a26178571386bcd0bfcaa4d8fd160b7d2e843a73affda391d61379084f8a9fbc53020505b292584bf66baee7e878e9af22aa4c727c8c87464759a60543fc", 0x4f}], 0x4, &(0x7f0000001440)=[{0x10, 0x6, 0x9}, {0x38, 0x116, 0x4, "698dac3cc6ffc8f111ea2f484c28e33c2f01abb13db8c15a59abf2d17d62b9ed292ea9eb46d472"}, {0x58, 0x104, 0x8b, "c33bc1c145fe8a11c181ad7714e17993f90ca22466fab5511c186d5fcc69280b2e013963e8249b024107d0d98fec54a58874a854573850f4c641a08e67066412220ed6ccdd"}, {0xd0, 0x111, 0xee0, "82935ac18230fb145f98b444c3f32fa25a681d22d2dc4889bebf5a90ccbb394dd68d5dda7f561200d2dd0483bbae59b30ddd0ec5871419f4bf6835021c75b0e172d4ffec25d61cb15c1d26a81f4ab1e7d8897ccfb6c247a6ea7bd63bcf754414d311d96a8ceae0de0b0ab70175ee6c48f4f4cc5ad908be96e7953c2aef0793ac7581ab2a85304dce13d299aff53f3be33fa070a454f7782584436b7ecdf06637437c3cf91e6f40ef5804f7865e2f19cfb305a33baa327e89d8d287ba"}, {0x100, 0x115, 0x5, "b76b94899a3edd8a5834365122554362a37b2e2ed853c9bc584d37359c011552d98e087dc3cc8224dd7d69c5012110f3c776c5ee20a6c02d5e4b2d202c2f70c8504c203b8d4fcc55026fe8e8fb7bf72d11e1dad7ed3c5ceb8aedada0725e8fd0f3b21fa87202721899ed53035cdbcd25334b0d78abf4f1963b5a428367e8c2cff57ec8d3886af1b74a132e5afce6aa7d12d508226bae35f06f79e4cc8eaa87891b6f52f7728afa2a772b5cec192826502951adbbc3a05b4ad4ced0ba95bcfb7b6937edfb1bf8fbafd138847397b6a8b4b58842c3d03d41cc53b4ec8e2a1060a8fa7e2a36d5c3c9c35b151e2cf4"}, {0xe0, 0x111, 0x5, "a688bfd5f6019f94424f43502a4c57e0c60bad3ec89ba4d7efc493c3bbf227eb195158fc28630d858baecb5f6b5ddafe7bfa100f918f48f4e7d03c47f6a6f2756e6ab1f0fd7c1c1044314495cde349eb8369200c731eb6413249fdc3351d07e3c661a5934ee2b1cd13467e41a64115478becc35096c50e60d0d8c48cae94c7a7fa8d4241aa3bacd09467d3d9747e0f0614a412271feba1ad65992bf27827f119b274cda7891c7e17a591726dbc672fa16592c9e201ee6086cf12da2eac883f4634784eb9bac7997f3951fb2eb1"}], 0x350}}], 0x4, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f00000001c0)={0x0, 'netdevsim0\x00', {}, 0x4}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_MODIFY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000006c0)=ANY=[]}}, 0x4000000) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000840)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000826bd7000fcdbdf250300000005000d0000000000050007000200000005000d00000000001400000000000006001c000800000005000500010000000600030000f800000500050000000000000000000000000000000000000000000000000000faa5341b57efd01f8666bbc1e73f0833a9d6aaa5026a217f5d9e7a202f75f14c5e0af7355bd91cbc3999af4a67ea824a2de05ec467f4f557089b89ca6a11ae060fb58c2fdc84460438f65b9ded4909f5a002786236b37dc5a41e37cf8ab25b02271f3bad15a7b4b995f0"], 0x68}}, 0x800) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r9 = userfaultfd(0x0) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60fe01, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000400)={&(0x7f0000000040), 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x70, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'sit0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x0) 00:12:09 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x8cffffff, 0x0) 00:12:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056312400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 730.004359][T25602] binder: 25599:25602 unknown command 0 [ 730.040687][T25602] binder: 25599:25602 ioctl c0306201 20000080 returned -22 00:12:09 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90}, 0x90) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000300)=[{}, {}, {}], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0x8, 0x4) set_robust_list(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap$perf(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x5) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000200)={0x1000, 0x400, 0x1, 0x787, 0x4, "a4f1c57e545d2635"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket$inet6_udp(0xa, 0x2, 0x0) 00:12:09 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xc0ed0000, 0x0) 00:12:09 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="931119e4dbcfe1e4fff2ecf834b42772194bd0e929feb2e9056757c024dd3ed607ab18a6acdd6c00e193cd62d45905c7d9e5019acf81d596d3e0e60c4212ef8a8d30f75714782307ba974164882d0cd8776e49e2b6809e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$SIOCRSACCEPT(r0, 0x89e3) 00:12:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000060005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 730.050263][T25604] UBIFS error (pid: 25604): cannot open "eJaw>,5A[Е92|(q [ 730.050263][T25604] 0 [ 730.050263][T25604] YgD>C@}%S/,;[~eTU2AU}pޞ", error -22 [ 730.110808][T25608] binder: 25601:25608 unknown command 0 [ 730.322347][T25608] binder: 25601:25608 ioctl c0306201 20000080 returned -22 [ 730.347508][T25619] binder: 25616:25619 unknown command 0 00:12:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05633d400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 730.360175][T25620] UBIFS error (pid: 25620): cannot open "4'rK)gW$>l", error -22 [ 730.370310][T25618] UBIFS error (pid: 25618): cannot open "/dev/vcsa", error -22 [ 730.379569][T25620] UBIFS error (pid: 25620): cannot open "4'rK)gW$>l", error -22 [ 730.390916][T25619] binder: 25616:25619 ioctl c0306201 20000080 returned -22 00:12:09 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf6ffffff, 0x0) 00:12:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000070005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:09 executing program 1: sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x19, 0x1, 0x0, 0x0, "860874920a2297973bd2962ce623b4499db4c74b659fe5614933c6ff89fb913b8a8a210937a8889b3f869a05ddec712fa09c2566553344e727f6662361910c31"}, 0x48}, 0x1, 0x0, 0x0, 0x4000810}, 0x40040) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x20, 0x80200) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x401, [[0xffffffff, 0x1ff, 0x1, 0x5, 0xffffffff, 0xffffffb5, 0x2, 0x2], [0x3, 0x3, 0x80000001, 0x7, 0xae2, 0x101, 0xff, 0x200], [0x7ff, 0xf4, 0xe55, 0xa133, 0x6, 0x3, 0x5bf4, 0xfde]], [], [{0x1, 0x2, 0x1}, {0x100, 0xbf1, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x7, 0x0, 0x1}, {0xee7, 0x97d, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x80000001, 0x1, 0x0, 0x0, 0x1}, {0x1000, 0x80000000, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x5e, 0x1, 0x1, 0x1}, {0x700000, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x7ff, 0x1, 0x1}, {0xd0a2, 0x5, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x64, 0x1000, 0x1, 0x0, 0x1}], [], 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 730.473546][T25696] UBIFS error (pid: 25696): cannot open "/dev/vcsa", error -22 [ 730.661061][T25726] binder: 25699:25726 unknown command 0 [ 730.746103][T25726] binder: 25699:25726 ioctl c0306201 20000080 returned -22 00:12:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056350400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 730.840427][T25735] binder: 25729:25735 unknown command 0 [ 730.882474][T25735] binder: 25729:25735 ioctl c0306201 20000080 returned -22 [ 730.923769][T25738] UBIFS error (pid: 25738): cannot open "ubifs", error -22 [ 730.988230][T25751] binder: 25740:25751 unknown command 0 [ 731.021895][T25751] binder: 25740:25751 ioctl c0306201 20000080 returned -22 00:12:10 executing program 0: gettid() r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="01003ddf45f187edef68441dda35bf4a7be7b9973809ae62f5c91c00000000000047027fa1b9b385b4000000000000000b34dd1361e3d84534f9b43c3f00ffff003f5df5c20bd12a9010b5"], 0x4b) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{}, {0x0, 0x7}], 0xee01}, 0x18, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(0x0) ptrace$cont(0x9, 0x0, 0x401, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="00262ccaa1d17ab99b1c61e88a88ee082e15119d509dc7cb14524a7d97f8df3b547a2869d36ea659408fb5c687a4d217e44a000000000000"], 0x3b, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x84, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x58c1ec36}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004081}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 00:12:10 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) write$FUSE_ENTRY(r1, &(0x7f00000000c0)={0x90}, 0x90) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000300)=[{}, {}, {}], 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040)=0x8, 0x4) set_robust_list(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)}}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap$perf(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x5) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000080)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000200)={0x1000, 0x400, 0x1, 0x787, 0x4, "a4f1c57e545d2635"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00') r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) socket$inet6_udp(0xa, 0x2, 0x0) 00:12:10 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x1, 0xd7, 0x1, 0x3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000080)) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='9p\x00', 0x18010, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_any='access=any'}], [{@obj_type={'obj_type', 0x3d, 'reiserfs\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, 'uvmnet0K'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x66, 0x66, 0x31, 0x36, 0x39, 0x31, 0x30], 0x2d, [0x30, 0x35, 0x0, 0x64], 0x2d, [0x35, 0x66, 0x31, 0xe], 0x2d, [0x0, 0x64, 0x35, 0x49608e075778a465], 0x2d, [0x32, 0x66, 0x38, 0x37, 0x63, 0xac, 0x30, 0x65]}}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x61, 0x66, 0x63, 0x34, 0x36, 0x66, 0x63], 0x2d, [0x61, 0x2, 0x35, 0x39], 0x2d, [0x32, 0x66, 0x64, 0x66], 0x2d, [0x38, 0x39, 0x39, 0x38], 0x2d, [0x34, 0x38, 0x36, 0x66, 0x65, 0x66, 0x61, 0x62]}}}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) mount(&(0x7f0000000440)=ANY=[@ANYBLOB="9ccec1f5fef180aba8637e9b0c684c4dfa9b91ac461d33b3525ded0c25b943afecc2e57f46df621e2164508a8faf972a4909d391fcd054f373417ef4932b1a42715621cb10111cada3540ac8feb864d5a78c81a40cf7e3095dbf589f5b00"/117, @ANYRES16=r8, @ANYRES64=r5], &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x0, 0x0) 00:12:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000000a0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056363400000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:10 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf9fdffff, 0x0) 00:12:10 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xff000000, 0x0) [ 731.460228][T25952] binder: 25947:25952 unknown command 0 [ 731.468987][T25951] binder: 25948:25951 unknown command 0 [ 731.484400][T25951] binder: 25948:25951 ioctl c0306201 20000080 returned -22 [ 731.493565][T25952] binder: 25947:25952 ioctl c0306201 20000080 returned -22 00:12:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304020000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000630b0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:10 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x102, 0x2, {0xf9, 0x51, 0x3, 0x2}}) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 731.734047][ T27] audit: type=1804 audit(730.969:612): pid=26058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir881526310/syzkaller.RtqJ8T/394/file0" dev="sda1" ino=17492 res=1 [ 731.822063][T26078] binder: 26062:26078 unknown command 0 [ 731.834771][T26087] binder: 26061:26087 unknown command 0 [ 731.862394][T26078] binder: 26062:26078 ioctl c0306201 20000080 returned -22 [ 731.878496][T26087] binder: 26061:26087 ioctl c0306201 20000080 returned -22 00:12:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000890b0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304500000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:11 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xfffff000, 0x0) [ 732.249536][T26278] binder: 26237:26278 unknown command 0 [ 732.260394][T26279] binder: 26257:26279 unknown command 0 [ 732.276867][T26278] binder: 26237:26278 ioctl c0306201 20000080 returned -22 [ 732.286518][T26279] binder: 26257:26279 ioctl c0306201 20000080 returned -22 00:12:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0xb, 0x0, "9cb4aa39e1bd413767b251106a71d3a1dcf3eb07b3ecd4d781f55175b3de575b1269b01fc34e10024d64b0c95e9e86d37d57e8a63c94c9489afca5c76ac77e3e2297c70b0a0e0039fd5af5389f988c9d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x9}, 0xd8) dup2(r0, r1) 00:12:11 executing program 0: r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x2, 0x40) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000000c0)=r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @multicast2}}, [0x32, 0xc6, 0x5, 0x1, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0x6, 0x67, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r2, @in6={{0xa, 0x4e23, 0x80000001, @loopback, 0x2}}, 0xfffffffd, 0x7, 0x20, 0x5, 0x4, 0x4, 0x7}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x400, 0x0, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x56}, &(0x7f00000001c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000fd8f61101800000000007e0500000000ca0095005ca5d7170000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 00:12:11 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="6e1ea7c200c16e23e76f9f9c7fd0f534afc96596ce7d8585c4782daaf6897e42bb1d64136b49014976848b93201efac4b34d0c0487b610f846b1eb6310bc775eccff74c6bc0aec3e611e985932ba586fb5ce9912405e2cdee09c1aa7077dcb40c53324f4e04d91faa6e92413a2a58f687f6779f61cd47366f2f5feae5cd93b13101127f51f1f28d339418ce374d33e030242c435ea5304030cc0b9a6f93c"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:11 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xfffffdf9, 0x0) 00:12:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000630c0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400200000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 732.603805][T26294] UBIFS error (pid: 26294): cannot open "n", error -22 [ 732.619912][T26295] binder: 26289:26295 unknown command 0 [ 732.638024][T26296] binder: 26291:26296 unknown command 0 [ 732.650605][T26295] binder: 26289:26295 ioctl c0306201 20000080 returned -22 [ 732.658318][T26296] binder: 26291:26296 ioctl c0306201 20000080 returned -22 00:12:11 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xffffff8c, 0x0) 00:12:11 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x210000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000240)='task\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r2, 0x0, 0xa, &(0x7f0000000040)='net/nfsfs\x00'}, 0x30) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xfec2839194685645}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xa, 0x2, 0x0) getsockopt$inet6_dccp_int(r4, 0x21, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000140)={0x0, @rand_addr, @initdev}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb, 0x1, 'macsec\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x14]}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}}, 0x0) 00:12:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000630d0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400300000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:12 executing program 0: newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000380)={{0x3, 0x0, 0x0, 0x0, r0, 0x0, 0x8}, 0xb39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) [ 732.907771][T26311] netlink: 'syz-executor.4': attribute type 5 has an invalid length. 00:12:12 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0='/dev/sg0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 00:12:12 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xfffffff6, 0x0) [ 733.032063][T26317] binder: 26309:26317 unknown command 0 [ 733.052851][T26317] binder: 26309:26317 ioctl c0306201 20000080 returned -22 00:12:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000120005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400400000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 733.170533][T26420] UBIFS error (pid: 26420): cannot open "/dev/sg0", error -22 [ 733.185317][ T27] audit: type=1800 audit(732.429:613): pid=26420 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 00:12:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsu\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000130a05000000000000000000070000080900010073797a31000000000900010073797a96000000000c00064000000000000000080c00064000000000000000030900020073797a32000000000800034000000003"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = dup(0xffffffffffffffff) sendmsg$NFT_MSG_GETCHAIN(r2, 0x0, 0x8010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80400, 0x0) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, 0x0, 0x0) 00:12:12 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x1, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="533186dad07e619e307a693e91925d78ec961c6be93a7a294365e34dda9a5ee40922d4525c9d0457cda3ec1196"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:12 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xedc000000000, 0x0) [ 733.460992][T26588] binder: 26561:26588 unknown command 0 [ 733.478213][T26603] binder: 26575:26603 unknown command 0 [ 733.490472][T26588] binder: 26561:26588 ioctl c0306201 20000080 returned -22 [ 733.502822][T26603] binder: 26575:26603 ioctl c0306201 20000080 returned -22 00:12:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000003f0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400500000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:12 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x9}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e23, @multicast2}}, [0x32, 0xc6, 0x5, 0x1, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0x6, 0x67, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={r1, @in6={{0xa, 0x4e23, 0x80000001, @loopback, 0x2}}, 0xfffffffd, 0x7, 0x20, 0x5, 0x4, 0x4, 0x7}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0)={r1, 0x3014}, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000240)={[0x1000, 0x2000, 0x5, 0x1], 0x8, 0x95, 0xbb2}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TIOCGPTPEER(r5, 0x5441, 0xfa4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@deltaction={0x28, 0x31, 0x189, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1}]}]}, 0x28}}, 0x0) [ 734.000090][T26646] binder: 26641:26646 unknown command 0 [ 734.045887][T26646] binder: 26641:26646 ioctl c0306201 20000080 returned -22 00:12:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000480005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:13 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="0c6403bf2f6f62643082"], &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x20488, 0x0) 00:12:13 executing program 4: socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) socketpair(0x1f, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x6}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x105100, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, r6, 0x0, 0x3, &(0x7f0000000000)='ah\x00', 0xffffffffffffffff}, 0x30) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r7, 0x200004) sendfile(r0, r7, 0x0, 0x80001d00c0d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="010f000000000000002004000000c90dda63e191f93fe10a07935f98433cea0dded471d4cbd9623a1d690404d998743f329e77e1823327020a927317ec3399898163e39bd6a24fa1fafd9cc8e15cee922464500f2e953f12a3b97cc3404c23e43f48747e25ba8c72222fce740fdde87a9a5598c6bb11bac3525d8963d48f337c6d3691f30f83e58bcf86834cffe30330bb563425dab84c3b3bb6eb9d35926af051ca3c36950d3f5bdae9159a02a14901413fbb0a29994f"], 0x14}}, 0x0) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="02002abd7000ffdbdf25100000000c000180060004004e21000014000380060007004e22000005000800060000003c00038014002600fe8000000000000000000000000000bb14000600fe8000000000000000000000000000bb0500080002000000060007004e220000"], 0x70}}, 0x40000) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000040)={'ah\x00'}, 0x0) 00:12:13 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf0ffffffffffff, 0x0) [ 734.163054][T26714] binder: 26649:26714 unknown command 0 [ 734.233246][T26714] binder: 26649:26714 ioctl c0306201 20000080 returned -22 00:12:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000004c0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 734.354499][T26764] binder: 26760:26764 unknown command 0 [ 734.354651][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 734.360797][T26764] binder: 26760:26764 ioctl c0306201 20000080 returned -22 00:12:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400600000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:13 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x100000000000000, 0x0) 00:12:13 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 734.652746][T26827] binder: 26777:26827 unknown command 0 [ 734.710083][T26827] binder: 26777:26827 ioctl c0306201 20000080 returned -22 [ 734.731701][T26852] binder: 26817:26852 unknown command 0 [ 734.768180][T26852] binder: 26817:26852 ioctl c0306201 20000080 returned -22 00:12:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000b630005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400700000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:14 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x3a) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0xa, 0x1, '\':}$.\x00'}, @NFTA_COMPAT_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0xc088) syz_read_part_table(0x0, 0x3, &(0x7f0000000340)=[{&(0x7f0000000040)="0201a5ffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080f3e16150", 0x40, 0x1c0}, {&(0x7f0000000180)="fe3e9c469b5ff292894fa4858846c505cf436d6f3d9bcd3ccce4cf72f89be97d19a0fc2763b02174a028ce31cb4d6cad506467d323944aecb6ce1f09992336f374e249f19aede53d3a4bf444c42cc15e42448c1aa8dd3b5dcd305a0020e1ddf4510ab8eb583a706bc1b8bf34d06319350b646d69878e3cfb9435f2dbae36c457ddc4c5b64768bd51cadd7ad8f74da3901de80efe2c50fd08b4f20c0b8e4249b87ec0b73794db94a77127876383300eaa969802254bdd75c967743a6fa0563228", 0xc0, 0xd4}, {&(0x7f0000000300)="70934ed8d71baa7d27", 0x9, 0x1}]) 00:12:14 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x200000000000000, 0x0) 00:12:14 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="78252952fe062c3e76db53db4de2dc00acc738d6469f45b4c58046aa77cc3e7f86a055eb6b1f66c32edc3310d2d9c3f8b8bbf903ffa9c14137e1d5940c376562d2b1cfdd2d6b1ad324bc2e9e675d912d272792a36b83dd0c24f4b442cc68df9a52c48ef691cd27b8c6c3bbd823a84fb3bf1f05afb038608f414e855d58c09e22b7690765dc56184cc8"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 734.916051][T26881] UBIFS error (pid: 26881): cannot open "", error -22 [ 735.102336][T26886] binder: 26883:26886 unknown command 0 [ 735.148707][T26888] binder: 26884:26888 unknown command 0 [ 735.168617][T26888] binder: 26884:26888 ioctl c0306201 20000080 returned -22 00:12:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000c630005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 735.225088][T26886] binder: 26883:26886 ioctl c0306201 20000080 returned -22 [ 735.314639][T26894] UBIFS error (pid: 26894): cannot open "x%)R,>vSM", error -22 [ 735.507077][T26903] binder: 26897:26903 unknown command 0 [ 735.546493][T26899] loop0: [ICS] p1 [ 735.582364][T26899] loop0: partition table partially beyond EOD, truncated [ 735.609760][T26903] binder: 26897:26903 ioctl c0306201 20000080 returned -22 [ 735.701623][T26899] loop0: p1 start 1318285312 is beyond EOD, truncated 00:12:15 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)={0x3, 0xc, 0x4, 0xabd51d6a9694d850, 0x1, {r0, r1/1000+10000}, {0x5, 0x2, 0x9, 0x40, 0x34, 0x5, "184e467b"}, 0x10000, 0x2, @fd, 0x7, 0x0, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_QUOTA={0xc}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x4265}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008080) setsockopt$inet6_dccp_int(r2, 0x21, 0xa, &(0x7f0000000040)=0xda2d, 0x4) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400800000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:15 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x300000000000000, 0x0) 00:12:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000d630005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f00000000c0)={0x1, 0x8, [0x7, 0x0]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r12, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r14 = getuid() mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x4800, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/dev/snd/controlC#\x00'}}, {@dfltuid={'dfltuid', 0x3d, r9}}, {@dfltgid={'dfltgid', 0x3d, r13}}, {@loose='loose'}, {@uname={'uname', 0x3d, '/dev/snd/controlC#\x00'}}, {@posixacl='posixacl'}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x38, 0x31, 0x35, 0x0, 0x64, 0x65, 0x34], 0x2d, [0x32, 0x66, 0x31, 0x64], 0x2d, [0x38, 0x62, 0x37, 0x35], 0x2d, [0x39, 0x62, 0x64, 0x63], 0x2d, [0x0, 0x62, 0x61, 0x63, 0x66, 0x31, 0x61, 0x30]}}}, {@hash='hash'}, {@uid_gt={'uid>', r14}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@hash='hash'}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure='dont_measure'}]}}) sync() [ 736.053629][T26923] binder: 26912:26923 unknown command 0 [ 736.055452][T26924] binder: 26910:26924 unknown command 0 [ 736.076199][T26928] UBIFS error (pid: 26928): cannot open "ubifs", error -22 [ 736.083791][T26923] binder: 26912:26923 ioctl c0306201 20000080 returned -22 00:12:15 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x400000000000000, 0x0) [ 736.090479][T26924] binder: 26910:26924 ioctl c0306201 20000080 returned -22 00:12:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400a00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000680005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 736.418419][T27133] binder: 27127:27133 unknown command 0 [ 736.438357][T27130] binder: 27129:27130 unknown command 0 00:12:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 00:12:15 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0300000000000000f3ffffff14d68d118b277bc19c82fed5"], 0x30}}, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) 00:12:15 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x500000000000000, 0x0) 00:12:15 executing program 4: getpid() sched_setscheduler(0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75d908c9205ed3b71ea13952fe4cbe6fe94815d4296f6e66de05002cfa66862535188bc73114cc5b7e45adbc96ada2c96fcdf56ac7d8c5df0d6217f049413454c471de840cdf462e7b21af76c2dd85cfd2af275132f78a7a2a40784f2c848cfe3e120ea0124ee07fabe1ab30355d1da3792ed03734c9d2311b8c492141e49bbd12988425f3e6416d98397d0c772f66625b0984a41111e8655de4c87c3ffc5a612004b19158174c2f52680b3bf2e418bc4e9b4a0b873e7f6926102d5cc7e6eebb2a8407b684607e441ca52eabfeca040254d87b627de25f8e6899de161d199468"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x30) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580)='/dev/full\x00', 0x630200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x109, @loopback, 0x81}}, [0x2, 0xfffffffffffffffd, 0x6, 0x7a9f, 0x14d, 0x1f, 0x6, 0x3, 0x1, 0x9, 0x68f3, 0xff, 0x87, 0x8dec, 0x9]}, &(0x7f00000005c0)=0x100) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000880)={r2, 0xa0, "5034f5c48539ac6c46dc22ca91a479380cfd67af28825aaed1f047e76c85aaffe1f46a83c2f861ea2c83c72ca221ad1c64979edcf648bf283084c4ca7e6a9da237b7be6d288cd70f4297e87232644eb9d06852f5eb6a6bc63029cf8cdcac33dd3d535a9f8080c2933517073b933770daf5f568f803a106ff4c8e7f2476eefbb192ddba757b4d1f4b6a83a9078f45293b788cbcb9f7d800575cb8e53d4908f294"}, &(0x7f0000000600)=0xa8) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, r6, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000b80)={0x78, r6, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x10000181}, 0x4080) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000200)='./file0\x00', 0x3, 0x5, &(0x7f0000000a00)=[{&(0x7f0000000240)="09c168ef517bda4e3955ac42d676de7b3404bf7463a6dfa4d8e40cdd085fa3b01988b6e2471d", 0x26, 0x81}, {&(0x7f0000000300)="76495ec2ca7aee1bd0e035fef326c80327217f963d759f2abea06a4c3bf79a538e1ca0fe50efd119e9b75355b875a913ca362fc43a5316b7e68ac86afad51f84db6dd338e2c7e3e5e77b0edff5d819042d", 0x51, 0xffff}, {&(0x7f0000000940)="c953ca5838e5b09fa581b6f4d831163390f3ae2cea5eb297fde2b52fa558eb8fc52099a4d5cbc4ed3c784ecdf85ab1708f7742e6991434b0fc783951b3ff4a6172545d76c428458df691a6d756f17b7c95a01179713fed154af352bc4759d993eac7fa187887da65e2601b4b255607750fbc28b5ce6cca2cde24f5c191a3c23ea53cd2a78e95250bb56df2e1b11981397c990402eab82c4d41404d5800a581f656552ca43b4425ac559a197820c6a2d5ea27cc64c0d2b88511140f3dd4", 0xbd, 0xda}, {&(0x7f0000000280)="2a1683", 0x3, 0x40}, {&(0x7f0000000500)="95be0b7df93f0e4641ab54f5dd3691f49fa74ff3f87de95f1220c843ff58983a568753b871e38ceb195cbb2c190eb7c48edd295a05bba846a1c15288ac3a18c0d96472aaf29aa5cd281848737ce7a2d875740517e5fe06f14edd610e3656844ca66492705d522fb2e52e959f", 0x6c, 0x7}], 0x100000, &(0x7f0000000a80)={[{@noinline_dentry='noinline_dentry'}, {@whint_mode_user='whint_mode=user-based'}, {@user_xattr='user_xattr'}, {@disable_ext_identify='disable_ext_identify'}], [{@dont_measure='dont_measure'}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@appraise_type='appraise_type=imasig'}, {@dont_appraise='dont_appraise'}, {@appraise='appraise'}, {@dont_appraise='dont_appraise'}, {@dont_measure='dont_measure'}, {@obj_role={'obj_role', 0x3d, '/dev/vcs#\x00'}}, {@uid_gt={'uid>', r8}}]}) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="6b18df1e88e5a4ac43e09642387e9c076695fe90ff12e0103b83f6bfa856e9276bafe5b44c7f751da7aaf3bfee87b4fa6acfc8617de73faafc93cfa93f09ca875c957538b29b0ce451ec628aeaecc32706a407856726c223a3f41670f8412bd8cbb78509006ac321f40d629033e6b3c75c4bb8ae27d9d2b682efcd8fc0f604706e38331a2506646c5886b08bcda132cd1c5a3658749e14cdbe2918d9d299e65d8fe90187130c6f155e1c26f215305479cd127fd49df4ce4db5b2108479b4845c7c1c704309f508a96c7e48933300"/216, @ANYRESHEX=r3, @ANYBLOB=',\x00']) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bind$tipc(r9, &(0x7f0000000c40)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) [ 736.461551][T27130] binder: 27129:27130 ioctl c0306201 20000080 returned -22 [ 736.464730][T27133] binder: 27127:27133 ioctl c0306201 20000080 returned -22 [ 736.529238][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. 00:12:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000006c0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304401200000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:15 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x600000000000000, 0x0) [ 736.740326][T27211] binder: 27190:27211 unknown command 0 [ 736.777606][T27246] 9pnet: Insufficient options for proto=fd [ 736.815690][T27211] binder: 27190:27211 ioctl c0306201 20000080 returned -22 00:12:16 executing program 4: ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {0x0, @random="ddce22bdc8e0"}, 0x0, {0x2, 0x0, @dev}, 'nr0\x00'}) 00:12:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="11c2b55968a6d8b41563376fe13e07919e8ba777416e8f11a4adab696bfe928263921183e030e8bc21584685fcc9066c35d0fa056f43b32421e81efb7785a60748c830e0eb33cf6d27575b95fe481e06443bc303296c0824ae03cf3ccfcc8c777cc6c6bf9649b418246dfa70588fe8ced4dab75c0996378977fc0b00004234193a0e3f9f3b2fe2a684c1306df5f630035b"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 736.942588][T27230] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 00:12:16 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x700000000000000, 0x0) 00:12:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000740005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 737.125497][T27230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 00:12:16 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000280)='/dev/full\x00', 0x8000, 0x0) ioctl$EVIOCGREP(r5, 0x80084503, &(0x7f0000000300)) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="541c0000", @ANYRES16=r1, @ANYBLOB="3f0228bd70000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0xfffffff0}, 0x20000800) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x800448d2, &(0x7f0000000200)={'ipvlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$IPSET_CMD_GET_BYNAME(r9, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0xe, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 737.166430][T27440] UBIFS error (pid: 27440): cannot open "µYhشc7o>wAnikc0!XFl5oC$!wH03m'W[HD;)l$<̌w|ƿI$mpXڷ\ 7w ", error -22 [ 737.199790][T27230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 737.233922][T27474] binder: 27441:27474 unknown command 0 [ 737.255009][T27474] binder: 27441:27474 ioctl c0306201 20000080 returned -22 00:12:16 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001700)='/dev/fuse\x00', 0x2, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v2={0x2000000, [{0x307b16ed, 0x5d}, {0x1f, 0x4}]}, 0x14, 0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x9, 0xa0000) mkdirat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x812400, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}]}}) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0) 00:12:16 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$inet(r0, 0x0, &(0x7f0000000140), 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) r7 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x636b7361, 0x400) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x1f) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) dup2(r3, r0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r9, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x4}, 0x0, 0x0, &(0x7f00000003c0)={0x2, 0x3, 0x87, 0x66dc1be6}, &(0x7f0000000240)=0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x10000}}, 0x10) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="5014f30dc651452bcb6062287496c5f48fd8c37663937e793fa27d5e56e5b38c6419c7b773a9532025cb47e6e0a4193f7aae9cc5acf8dd7b1d39c817f20bc3ca4f65b83e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:16 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x800000000000000, 0x0) 00:12:16 executing program 4: mknod(&(0x7f0000000300)='./bus\x00', 0x1001040, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0xb00, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = open(&(0x7f0000000040)='./bus\x00', 0x10b87d, 0x0) write$FUSE_IOCTL(r1, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000180)={0x7f, 0x29, 0x1}) 00:12:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000007a0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404800000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 737.600757][T27488] binder: 27484:27488 unknown command 0 [ 737.604129][T27491] 9pnet: Insufficient options for proto=fd 00:12:16 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x1000000000000000, 0x0) [ 737.637170][T27492] UBIFS error (pid: 27492): cannot open "P QE+`b(tvc~y?}^V峌dǷsS %G?zŬ{9 Oe>", error -22 [ 737.685103][T27488] binder: 27484:27488 ioctl c0306201 20000080 returned -22 00:12:17 executing program 4: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x3, 0x1, 0x6c}]}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 737.754361][T27562] binder: 27495:27562 unknown command 0 [ 737.774995][T27562] binder: 27495:27562 ioctl c0306201 20000080 returned -22 00:12:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000b890005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:17 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x10040, 0x10) 00:12:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304404c00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:17 executing program 4: syz_mount_image$exfat(&(0x7f0000000040)='exfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@discard='discard'}]}) 00:12:17 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) open_by_handle_at(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="6d00000006000000fbcc35d04ada29a07b0bcc5992470226e536fc7a1b9a465a5d07c1979abadddbf5f1029b2a3fe8daacb435aee01325a6bdadeae757f8a75c4c3a076a320c4609bf7d550ae2d6fd74d5c18215eb7db42b5f88baa8dc6b37af170d4b7a000000000000000000"], 0x480080) syz_kvm_setup_cpu$x86(r0, r5, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:17 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x2000000000000000, 0x0) [ 738.047410][T27613] UBIFS error (pid: 27613): cannot open "ubifs", error -22 [ 738.080594][T27613] UBIFS error (pid: 27613): cannot open "ubifs", error -22 [ 738.091198][T27616] binder: 27608:27616 unknown command 0 [ 738.117670][T27616] binder: 27608:27616 ioctl c0306201 20000080 returned -22 [ 738.138224][T27619] binder: 27615:27619 unknown command 0 [ 738.192782][T27619] binder: 27615:27619 ioctl c0306201 20000080 returned -22 [ 738.227684][T27641] [EXFAT] trying to mount... 00:12:17 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x2010000000000000, 0x0) 00:12:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000ff0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 738.258608][T27641] [EXFAT] ffsMountVol failed 00:12:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304406000000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:17 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) fanotify_mark(r0, 0xc4, 0x8, r2, &(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000002, 0x30, r0, 0xde5a8000) [ 738.384698][T27641] [EXFAT] trying to mount... 00:12:17 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x8cffffff00000000, 0x0) [ 738.421357][T27730] binder: 27728:27730 unknown command 0 [ 738.445799][T27730] binder: 27728:27730 ioctl c0306201 20000080 returned -22 [ 738.525542][T27641] [EXFAT] ffsMountVol failed [ 738.541742][T27739] binder: 27738:27739 unknown command 0 [ 738.559225][T27739] binder: 27738:27739 ioctl c0306201 20000080 returned -22 00:12:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000006630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 738.587538][T27740] UBIFS error (pid: 27740): cannot open "ubifs", error -22 00:12:17 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8a98f714fcd1a42, @perf_bp={0x0}, 0x440}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) socket$l2tp(0x2, 0x2, 0x73) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="b15a008200000000b923d32edef11fbdf5001ed911094fd643911c653f233a129b6a4b4339c6f42df0d9"], 0x14) openat$cgroup_subtree(r2, &(0x7f0000001480)='cgroup.subtree_control\x00', 0x2, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r7}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001240)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f0000001340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x54, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x40080c0) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000001380)='./file0\x00', 0x101240, 0x16) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000013c0)={0x4, 0x227, 0x4, 0x8, 0x4, 0x81}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000007, 0x6031, 0xffffffffffffffff, 0x0) r10 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r10, &(0x7f0000000000)={0x11, 0x0, r13}, 0x14) getsockname$packet(r10, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000001400)={r10, 0x4, 0x7, "323d466f5396342393e1b0dc1a73933c4c88b280bd860beb1006ca51269b88bd8057f508b9e61daec1e6f836eec26821b7d7c8a732fcabb44ee61b27ce0a1f"}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x569000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r14 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f}}, 0x20) 00:12:18 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf6ffffff00000000, 0x0) 00:12:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304406800000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:18 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000000)=0xfff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000180)=0x1e) [ 738.591816][T27740] UBIFS error (pid: 27740): cannot open "ubifs", error -22 [ 738.878594][T27868] binder: 27809:27868 unknown command 0 [ 738.943580][T27868] binder: 27809:27868 ioctl c0306201 20000080 returned -22 [ 739.140996][T27963] binder: 27962:27963 unknown command 0 00:12:18 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xf9fdffff00000000, 0x0) 00:12:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000008630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:18 executing program 0: r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x46, 0x100, 0x6, 0x21fe, 0xc5, "b5a300", 0x8, [0x1, 0x80, 0x8, 0x5, 0x33e8]}}) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, 0x1407, 0x10, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}}, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x800, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000001600)='/dev/vcsa#\x00', 0xcf7, 0x400000) fgetxattr(r2, &(0x7f0000001640)=@random={'osx.', ')\x00'}, &(0x7f0000001680)=""/220, 0xdc) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x6, 0x9, 0x7ff}}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KDGETLED(r8, 0x4b31, &(0x7f0000001ac0)) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000001880)={0x48, "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"}) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) recvmsg$can_j1939(r4, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/146, 0x92}, {&(0x7f00000011c0)=""/102, 0x66}, {&(0x7f0000001240)=""/254, 0xfe}, {&(0x7f0000001340)=""/93, 0x5d}, {&(0x7f00000013c0)=""/13, 0xd}, {&(0x7f0000001400)=""/233, 0xe9}], 0x7, &(0x7f0000001580)=""/22, 0x16}, 0x0) [ 739.215036][T27963] binder: 27962:27963 ioctl c0306201 20000080 returned -22 [ 739.314496][T27971] binder: 27970:27971 unknown command 1074029320 [ 739.337856][T27975] UBIFS error (pid: 27975): cannot open "ubifs", error -22 [ 739.348843][T27971] binder: 27970:27971 ioctl c0306201 20000080 returned -22 00:12:18 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xff00000000000000, 0x0) 00:12:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304406c00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000000000c630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:18 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 00:12:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ttyprintk\x00', 0xc0002, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000080)={0x0, 0xffffffff, 0x0, 0x0, 0x0, "f67e91f3f794b1460000000000000000000100"}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000380)='\n', 0x300}], 0x1) pidfd_send_signal(0xffffffffffffffff, 0x29, &(0x7f0000000000)={0x28, 0x4, 0xf9bd}, 0x0) [ 739.399398][T27975] UBIFS error (pid: 27975): cannot open "ubifs", error -22 [ 739.612940][T28082] binder: 28075:28082 unknown command 0 [ 739.688397][T28087] binder: 28086:28087 unknown command 1074029324 [ 739.715254][T28082] binder: 28075:28082 ioctl c0306201 20000080 returned -22 [ 739.718096][T28087] binder: 28086:28087 ioctl c0306201 20000080 returned -22 [ 739.931562][T28097] [U] [ 739.969860][T28092] [U] 00:12:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304407400000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:19 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0xfffffffffffff000, 0x0) 00:12:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000010630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:19 executing program 1: socketpair(0x1f, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0000000000000000000000000000c4fbe8387ec3a2ec78c05cfbea9f401fba1c1d3715606b5d8fbff1df49acee4e09fcbce10d6ed9db34a70a70fe0d18563daa2cbb35c5d377bc65b7cd0fa7c99f03a36039e509fa047130273bdb2672abf15ff9542885c89018e0a87678e7a4d379148061a1aaa8651c274fa4ef8bc2709751d87344dea35149e607893902fe40e56f04ca88ac4d6ae3b30bd88eb34c1f60ade820d359df12c3b61057582bf5f1bf8c5b441f56b198f2f67507e00ebbd2e7e9"], 0x14}, 0x1, 0x0, 0x0, 0x44090}, 0x10) creat(&(0x7f0000000200)='./file0/file0\x00', 0x121) 00:12:19 executing program 0: getpid() r0 = syz_open_pts(0xffffffffffffffff, 0x480402) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = gettid() perf_event_open(&(0x7f0000000900)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000002ec0)={0x10}, 0x10}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000000)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$RTC_IRQP_READ(r8, 0x8008700b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x4}, {0xa, 0x0, 0x0, @mcast1}, r6}}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8000000000000, 0x40, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @loopback}, {0x2, 0x0, 0xffffffc1, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, r6}}, 0x48) semget$private(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4}, 0xc) gettid() 00:12:19 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xfe80) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setreuid(0x0, r2) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = creat(0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4004005) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x100, 0x1, &(0x7f0000000300)=[{&(0x7f00000003c0)="6d5d7d375922db47bca53cffd44819d04126ed2e48afddd0fe8da67d5162f4c80aa90724d2cefeeb5e04e32cad82635f0a4e4b8560747655aec7c275e10b736c35c54f1bbe27ff3f1c9fb48cab5361cd1503fbf9be309c61ded6381f", 0x5c, 0x35}], 0x1, &(0x7f00000005c0)={[{@spectator='spectator'}, {@meta='meta'}, {@upgrade='upgrade'}, {@meta='meta'}, {@commit={'commit'}}, {@noloccookie='noloccookie'}, {@rgrplvb='rgrplvb'}, {@data_writeback='data=writeback'}], [{@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}]}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f00000004c0)=""/229) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) [ 740.443455][T28214] binder: 28203:28214 unknown command 0 [ 740.446744][T28210] binder: 28205:28210 unknown command 1074029328 [ 740.479239][T28210] binder: 28205:28210 ioctl c0306201 20000080 returned -22 00:12:19 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x808490, 0x0) [ 740.494438][T28214] binder: 28203:28214 ioctl c0306201 20000080 returned -22 00:12:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000012630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:19 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x50c20, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = openat$cgroup_ro(r3, &(0x7f0000000300)='rdma.current\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000380)={0x7fffffff, 0xa, 0x4, 0x80000000, 0x20, {r5, r6/1000+30000}, {0x3, 0xc, 0x9, 0x1, 0x3, 0x7, "867f5b4a"}, 0x1, 0x4, @offset=0x2, 0x973b, 0x0, r0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) syz_mount_image$exfat(&(0x7f0000000000)='exfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="6e4981eafecec7b48f5f5bd9a9a8aeec96e27e36fa2716458b5759e3bd123523aa67052d348c25bd2e7ee27276d420eaf87b9ae939", 0x35, 0x6}, {&(0x7f0000000180)="191bbadab087eb7eeb6725d83850d029362e0b4b9916f46361e99f135aeb16fbf3c5ed7dfe4905775bbc9be4f8d9178199cb7a344768044d1b7fc9979b2acb506f94de22192161b77fa0af35d0be1da9146ab1ebcb097acfe749ba52", 0x5c, 0x6}], 0x100000, &(0x7f0000000240)={[{@dmask={'dmask', 0x3d, 0x8000}}], [{@smackfsroot={'smackfsroot', 0x3d, 'ubifs\x00'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'ubifs\x00'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'self.vboxnet0bdev{.'}}, {@euid_lt={'euid<', r7}}, {@obj_type={'obj_type', 0x3d, 'ubifs\x00'}}]}) 00:12:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304407a00000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 740.790523][T28331] binder: 28325:28331 unknown command 1074029330 [ 740.797034][T28331] binder: 28325:28331 ioctl c0306201 20000080 returned -22 00:12:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000000000ff630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:20 executing program 3: syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 740.897260][T28332] binder: 28330:28332 unknown command 0 [ 740.931412][T28332] binder: 28330:28332 ioctl c0306201 20000080 returned -22 [ 740.969396][T28336] binder: 28335:28336 unknown command 1074029567 00:12:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400003000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 741.026748][T28336] binder: 28335:28336 ioctl c0306201 20000080 returned -22 00:12:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000020005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:20 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x505680, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0xbb7a, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x309580, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}) [ 741.121466][T28427] UBIFS error (pid: 28427): cannot open "/dev/vcsa", error -22 [ 741.237737][T28446] binder: 28444:28446 unknown command 0 00:12:20 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xcde2d4c05379a640}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r6, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r7, &(0x7f0000000000)={0x11, 0x0, r10}, 0x14) getsockname$packet(r7, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r11 = dup3(r3, r7, 0x80000) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r16, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r16, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) r17 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup(r18) getsockname$packet(r19, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r17, &(0x7f0000000000)={0x11, 0x0, r20}, 0x14) sendmsg$NL80211_CMD_LEAVE_MESH(r11, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r12, 0x231, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r16}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r20}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000000)={0x10000, 0xfff, 0x3f}) [ 741.325238][T28446] binder: 28444:28446 ioctl c0306201 20000080 returned -22 [ 741.359272][T28451] binder: 28450:28451 unknown command 0 [ 741.401649][T28451] binder: 28450:28451 ioctl c0306201 20000080 returned -22 [ 741.473227][T28457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.511684][T28457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.580655][T28462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.608995][T28462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:12:21 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f0000000180)='./file0\x00', 0x8, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) recvmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000000080)=""/48, 0x30}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f0000000580)=""/129, 0x81}, {&(0x7f0000000640)=""/162, 0xa2}, {&(0x7f00000000c0)=""/31, 0x1f}], 0x6}, 0x40000042) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x4, 0x0, 0x0, 0x7, 0x0, 0x49c1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x80, 0x2, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x1070c5, 0x0) r4 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x480) sendfile(r3, r4, 0x0, 0x10000) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x4b61, &(0x7f0000000000)) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 00:12:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000030005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400005000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:21 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, r5, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x3, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r6 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r9}, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@mcast1, 0x0}, &(0x7f0000000240)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r15, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r16, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r16, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', r16}) r18 = socket$nl_route(0x10, 0x3, 0x0) r19 = socket$nl_route(0x10, 0x3, 0x0) r20 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r20, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r19, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r21, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r21, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f00000003c0)=0xe8) r23 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = dup(r24) getsockname$packet(r25, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r23, &(0x7f0000000000)={0x11, 0x0, r26}, 0x14) r27 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r29 = dup(r28) getsockname$packet(r29, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r27, &(0x7f0000000000)={0x11, 0x0, r30}, 0x14) r31 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r32) bind$packet(r31, &(0x7f0000000000), 0x14) r33 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r35 = dup(r34) getsockname$packet(r35, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r33, &(0x7f0000000000)={0x11, 0x0, r36}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000004c0)={@initdev, 0x0}, &(0x7f0000000500)=0x14) r38 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r40 = dup(r39) getsockname$packet(r40, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r38, &(0x7f0000000000)={0x11, 0x0, r41}, 0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000540)={'wg0\x00', r41}) r43 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r45 = dup(r44) getsockname$packet(r45, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r43, &(0x7f0000000000)={0x11, 0x0, r46}, 0x14) r47 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r49 = dup(r48) getsockname$packet(r49, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r47, &(0x7f0000000000)={0x11, 0x0, r50}, 0x14) getsockname$packet(r47, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$inet6_IPV6_IPSEC_POLICY(r47, 0x29, 0x22, &(0x7f0000000c80)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000d80)=0xe8) r52 = socket$nl_route(0x10, 0x3, 0x0) r53 = socket$nl_route(0x10, 0x3, 0x0) r54 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r54, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r54, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r53, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r55, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r52, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r55, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) r56 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r56, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r56, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_mreqn(r56, 0x0, 0x23, &(0x7f0000000dc0)={@initdev, @dev, 0x0}, &(0x7f0000000e00)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000020c0)={@local, 0x0}, &(0x7f0000002100)=0x14) r59 = socket$nl_route(0x10, 0x3, 0x0) r60 = socket$nl_route(0x10, 0x3, 0x0) r61 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r61, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r61, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r60, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r62, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r59, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r62, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) r63 = socket$nl_route(0x10, 0x3, 0x0) r64 = socket$nl_route(0x10, 0x3, 0x0) r65 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r65, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r65, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r64, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r66, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r63, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r66, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) r67 = socket$nl_route(0x10, 0x3, 0x0) r68 = socket$nl_route(0x10, 0x3, 0x0) r69 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r69, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r69, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r68, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r70, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r67, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r70, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) r71 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r73 = dup(r72) getsockname$packet(r73, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r71, &(0x7f0000000000)={0x11, 0x0, r74}, 0x14) getsockname$packet(r71, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getpeername$packet(r71, &(0x7f0000003400)={0x11, 0x0, 0x0}, &(0x7f0000003440)=0x14) r76 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r76, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r76, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r76, 0x0, 0x10, &(0x7f0000003480)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000003580)=0xe8) r78 = socket$nl_route(0x10, 0x3, 0x0) r79 = socket$nl_route(0x10, 0x3, 0x0) r80 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r80, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r80, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r79, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r81, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r78, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r81, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004ac0)={'vxcan1\x00', r81}) r83 = socket$nl_route(0x10, 0x3, 0x0) r84 = socket$nl_route(0x10, 0x3, 0x0) r85 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r85, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r85, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r84, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r86, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r83, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r86, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000005340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000005300)={&(0x7f0000004b00)=ANY=[@ANYBLOB="cc070000", @ANYRES16=r5, @ANYBLOB="100026bd7000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="480102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r9, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=r10, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400500c000008000600", @ANYRES32=r11, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="0400028008000100", @ANYRES32=0x0, @ANYBLOB="fc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004007f00000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r21, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r22, @ANYBLOB="080007000000000008000100", @ANYRES32=r26, @ANYBLOB="bc0102803c00010224000100757365725f6c696e6b7e705f826e61626c65640000400000000000000010000005000300060000008c61fc5808001200", @ANYRES32=r30, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r36, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400fffbffff08000600", @ANYRES32=r37, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r42, @ANYBLOB="080007000000000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000700300905000000ff03fc01000000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=r46, @ANYBLOB="ac00028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000800003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r51, @ANYBLOB="08000100", @ANYRES32=r55, @ANYBLOB="4801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=r57, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000000008008000600", @ANYRES32=r58, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000108000600", @ANYRES32=r62, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004008000000008000100", @ANYRES32=0x0, @ANYBLOB="f80002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r66, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bb00000008000600", @ANYRES32=r70, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r75, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r77, @ANYBLOB="08000100", @ANYRES32=r82, @ANYBLOB="3c0002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r86, @ANYBLOB], 0x7cc}, 0x1, 0x0, 0x0, 0x24004813}, 0x0) 00:12:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 00:12:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000000000, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x47}, 0x3c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000280)=@name={0x1e, 0x2, 0x2, {{0x41}, 0x3}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000001580)="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", 0xe7f}], 0x1}, 0x0) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ptrace$getregs(0xe, 0x0, 0xff, &(0x7f0000000380)=""/144) [ 741.967266][T28572] binder: 28568:28572 unknown command 0 [ 741.972855][T28572] binder: 28568:28572 ioctl c0306201 20000080 returned -22 [ 741.983896][T28571] UBIFS error (pid: 28571): cannot open "/dev/vcsa", error -22 00:12:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400006000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:21 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'user.', 'proceth0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xbb, 0xc, 0x4, 0x800, 0x618, {r2, r3/1000+30000}, {0x2, 0x1, 0x81, 0x7, 0x81, 0x40, "17939a3f"}, 0x8001, 0x4, @userptr=0x1, 0x80, 0x0, 0xffffffffffffffff}) ioctl$CAPI_SET_FLAGS(r4, 0x80044324, &(0x7f0000000240)) [ 741.991492][T28574] UBIFS error (pid: 28574): cannot open "/dev/vcsa", error -22 [ 742.027644][T28575] UBIFS error (pid: 28575): cannot open "ubifs", error -22 [ 742.050441][T28576] binder: 28570:28576 unknown command 0 00:12:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9, 0x1, 'vcan\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}]}}}]}, 0x44}}, 0x0) [ 742.080067][T28575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 742.115592][T28576] binder: 28570:28576 ioctl c0306201 20000080 returned -22 [ 742.161990][ T27] audit: type=1804 audit(741.399:614): pid=28579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir881526310/syzkaller.RtqJ8T/405/file0/file0" dev="loop0" ino=1059 res=1 00:12:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x0, 0x1, 0x7, 0x0, "000000000000000000ac00000000000000000800"}, 0xbb1a38266687927c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x200) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = socket$inet6(0xa, 0x80003, 0x20) r2 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r5}, 0x14) getsockname$packet(r2, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xdc, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr="c5f9838a45887dd1551c8f5fddacec23"}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x48810}, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="080db5055e0bcfe8479071") setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "b299b3e4468a9208", "b8d5e8382b7cb1d02b30a05c6ef0b81f0920126148d3f0d32c95b2b7a139c441", 'dCe#', "b1034b903a64f865"}, 0x38) sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) close(r0) 00:12:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000040005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 742.256337][T28590] UBIFS error (pid: 28590): cannot open "/dev/vcsa", error -22 [ 742.271277][T28592] binder: 28588:28592 unknown command 0 [ 742.306517][T28592] binder: 28588:28592 ioctl c0306201 20000080 returned -22 00:12:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400007000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 742.351061][T28590] UBIFS error (pid: 28590): cannot open "/dev/vcsa", error -22 [ 742.406588][ T27] audit: type=1800 audit(741.399:615): pid=28579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="loop0" ino=1059 res=0 [ 742.542790][ T27] audit: type=1804 audit(741.519:616): pid=28579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir881526310/syzkaller.RtqJ8T/405/file0/file0" dev="loop0" ino=1059 res=1 [ 742.599706][T28758] binder: 28698:28758 unknown command 0 [ 742.617008][T28758] binder: 28698:28758 ioctl c0306201 20000080 returned -22 00:12:21 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000980)='/dev/sequencer\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/asound/seq/timer\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@remote, @bcast, @bcast, @netrom, @rose, @default, @bcast, @default]}, &(0x7f0000000080)=0x48) read(r2, 0x0, 0xfffffffffffffd87) 00:12:21 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x2, 0x4, [0x3f, 0x5, 0x64f2, 0x2]}, 0x10) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on='nfs_export=on'}]}) chdir(&(0x7f0000000840)='./bus\x00') utimes(&(0x7f0000000280)='./bus\x00', 0x0) 00:12:21 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) creat(&(0x7f0000000100)='./file0\x00', 0x0) pkey_alloc(0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) getdents(r3, &(0x7f0000000040)=""/53, 0x35) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f647e227000000000265309d407ef37c5116e990f76b82f5cebbe2b900b09b33658187358637c53f838f860dc365126dfd9d7f48758849754aed0e1b42b696b91301c284e0e1fe26172d0239e3db1ed3d5a6f1509a89cf7e62af9033e6cc1ef7a627f2aa99501e1ec1d68b795ce4a7be15580d870402a812016f0c89c1b6a0db2fdbd071628edd8a96646e433efdb11f5bae4ba6a26cd5eaad3e60ea8ec5e"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='aio\x00', 0x42, 0x0) 00:12:21 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) fdatasync(r0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x1, 0x6, 0x4, 0x9, 0x8, 0x800}) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000050005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000a000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:22 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 742.896115][T28918] binder: 28891:28918 unknown command 0 [ 742.916139][T28918] binder: 28891:28918 ioctl c0306201 20000080 returned -22 [ 742.934607][T28919] overlayfs: overlapping upperdir path 00:12:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000060005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:22 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="992d6b6bf91d6ecabb987b71b67fbdd321db39a36a0e00000000000000008a5cb54f950cae6236c4cfa0f0613699af491de3d7bb7910e0c4caa48c9ea075645ceedea33dc1be97f1c3f216fc089499bca48186fd148297feca63d5a8f005756567c26f27c38c4e9d0cb4ab014fed4af9f3591699cb2786d85327dd8d063a22c99678ad81bca954326e440a0d4d1aa52293e1d49a002aa0af5e2f5fe2579a1b3f"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$apparmor_current(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x33c) [ 742.956725][T28920] UBIFS error (pid: 28920): cannot open "ubifs", error -22 [ 743.074455][T28990] binder: 28948:28990 unknown command 0 00:12:22 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r3}, 0x14) getsockname$packet(r0, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0xa4, r5, 0x23f, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x88, 0x14, 'broadcast-link\x00'}}}, 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r5, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 00:12:22 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) [ 743.143428][T28990] binder: 28948:28990 ioctl c0306201 20000080 returned -22 [ 743.263979][T29094] binder: 29057:29094 unknown command 0 00:12:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440630b000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 743.322876][T29128] UBIFS error (pid: 29128): cannot open "ubifs", error -22 [ 743.327050][T29094] binder: 29057:29094 ioctl c0306201 20000080 returned -22 [ 743.345958][T29132] UBIFS error (pid: 29132): cannot open "/dev/vcsa", error -22 [ 743.350630][T29128] UBIFS error (pid: 29128): cannot open "ubifs", error -22 [ 743.362323][T29155] UBIFS error (pid: 29155): cannot open "/dev/vcsa", error -22 [ 743.417823][ T27] audit: type=1400 audit(742.659:617): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=29126 comm="syz-executor.4" [ 743.460410][T29160] binder: 29157:29160 unknown command 0 [ 743.476357][T29160] binder: 29157:29160 ioctl c0306201 20000080 returned -22 00:12:22 executing program 0: r0 = getpid() ptrace$cont(0xffffffffffffffff, 0x0, 0x7, 0x800) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) socket(0x3, 0x6, 0xce) keyctl$update(0x2, r1, &(0x7f0000000240)="db40951195b65329509626699071a860088261af3fd5f91a", 0x18) r2 = add_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000400)="d9a04ebf9ed83d73916e84462b0b070dea6b36ad8265c52b002676dfef42e0c27d8efdb6452aa99e7010c0a5f156", 0x2e, 0xfffffffffffffffa) r3 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000480)="6e2dc1c57e3acb7939bb9469c277385c4be5d14a07e9b188fd2e7e914c0b6fceff70c732ed20212085e29a51196386f328ad22c3ab421cc923fc0a28441fb2f5d1ba1d3b3fd545d7e9a32b834ba02f9203ae2ca9ca11032620a8750192bbd9", 0x5f, r2) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r3, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$setperm(0x5, r1, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000600)="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", 0xe00) fallocate(r4, 0x11, 0x0, 0x10000) sendfile(r4, r5, 0x0, 0x12000) ioctl$void(r4, 0x5451) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000009a00)) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f00000000c0)) 00:12:22 executing program 4: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x6000) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="992d6b6bf91d6ecabb987b71b67fbdd321db39a36a0e00000000000000008a5cb54f950cae6236c4cfa0f0613699af491de3d7bb7910e0c4caa48c9ea075645ceedea33dc1be97f1c3f216fc089499bca48186fd148297feca63d5a8f005756567c26f27c38c4e9d0cb4ab014fed4af9f3591699cb2786d85327dd8d063a22c99678ad81bca954326e440a0d4d1aa52293e1d49a002aa0af5e2f5fe2579a1b3f"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$apparmor_current(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x33c) 00:12:22 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:12:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000070005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:22 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x138e9a54) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000000)=0x2000000000000000) 00:12:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440630c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 743.604086][T29252] binder: 29250:29252 unknown command 0 [ 743.612914][T29252] binder: 29250:29252 ioctl c0306201 20000080 returned -22 00:12:23 executing program 4: ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x8, 'batadv_slave_1\x00', {'bond_slave_0\x00'}, 0xff47}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000040)={0x18, 0x140e, 0x200, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x20000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x640, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f00000001c0)={0x3, 0x3, 0x3, 0x6, &(0x7f0000000100)=[{0x2, 0x401, 0x8000, 0x14c}, {0x0, 0x8, 0x0, 0xff7f}, {0x0, 0x7fff, 0x0, 0x6}, {0x7fff, 0x3, 0x7, 0x7f}, {0x2, 0x162c, 0x1ff, 0x6}, {0x0, 0x400, 0x2, 0xfff}]}) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f00000002c0)) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200)={0x27, 0x0, 0x2, 0x6, 0x1, 0x81, "64a55cdf65cc19a1cdf9914581d4fa14ec2a9ad054b85fb74cb202f865317288292cd986057854e427e5bde93f780ba947caaf9c2c1befabc067e183779725", 0x39}, 0x60) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, {0x2}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0xff}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 743.747583][T29258] UBIFS error (pid: 29258): cannot open "/dev/vcsa", error -22 [ 743.788918][ T27] audit: type=1400 audit(743.029:618): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=29253 comm="syz-executor.4" [ 743.794590][T29265] UBIFS error (pid: 29265): cannot open "/dev/vcsa", error -22 [ 743.812187][T29266] binder: 29261:29266 unknown command 0 00:12:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000080005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:23 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x1831c0, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000800)={0x8, [0x1000, 0xfc03, 0x5, 0x8, 0x400, 0x20, 0x4, 0x8, 0x1000, 0x442d, 0x4, 0xf492, 0x7, 0x3ff, 0x9, 0xff, 0x6, 0x7, 0xfda, 0x9a2b, 0x0, 0xbd30, 0x2, 0xf1b, 0xfff, 0x9, 0x6, 0x8, 0x9, 0x1, 0x100, 0x31a, 0x4, 0x6, 0x6, 0x20, 0x9, 0x3f, 0x81, 0x4, 0x1000, 0x7f, 0x6, 0x1, 0x5, 0x3, 0x8, 0x7], 0xa}) r1 = msgget(0x1, 0x4) msgctl$MSG_STAT(r1, 0xb, &(0x7f00000007c0)=""/1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000002c0)={0xf000000, 0xd99, 0xfffffffd, r5, 0x0, &(0x7f0000000880)={0x990a64, 0x4, [], @p_u32=&(0x7f0000000240)=0xafd}}) ioctl$SOUND_MIXER_WRITE_RECSRC(r6, 0xc0044dff, &(0x7f00000004c0)=0xfffffffe) dup(r4) bind$packet(r3, &(0x7f0000000000), 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340)='nl80211\x00') sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4f00e1abd969ed785b2a32135547f1915d86e18a5fcf19e0dd23cfafd14caffe7599a97a1beb80d47b40f944d66ccb164923a98b6ffc33164d9db5d6bce58e37188b5b9fc1405cccec67f075361100000000", @ANYRES16=r9, @ANYBLOB="200028bd7000ffdbdf2709000000090007280008003700"/42], 0x38}}, 0x20040010) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/93) r10 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getsockname$packet(r12, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$kcm(r12, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)}, 0x8040000) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000040)) r13 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r13, 0x8916, &(0x7f0000000480)={@remote, 0x1c, r14}) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 743.834543][T29264] UBIFS error (pid: 29264): cannot open "ubifs", error -22 [ 743.912265][T29266] binder: 29261:29266 ioctl c0306201 20000080 returned -22 [ 744.003726][T29325] binder: 29318:29325 unknown command 0 00:12:23 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="62651252042cda40da044d722ad361f7b1ad398926771b4d2fd240a882f7d3a77683bbfbfcbdc42a140d926a05d1df9b18ce76cb6b35468121211ebc30e3022e6e58e5b51183975e4919871bab3f460d9110fbadc71c9c27017296b5ab7eb6ca6a7cc60f6760fc37b0b32fc94359e97ec974f185192d20704deeb1a0c99afb351f742f7818c090796f1f9c9964d928eb1a1710b0e8a5a84aca59916e267660d8c14088538a02f3098655a5ddc81fa54c530b9074f990a0a6"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) 00:12:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440630d000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 744.065462][T29325] binder: 29318:29325 ioctl c0306201 20000080 returned -22 [ 744.087781][ T27] audit: type=1800 audit(743.319:619): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16643 res=0 [ 744.153401][T29377] UBIFS error (pid: 29377): cannot open "1YaQԖ I ", error -22 00:12:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000000a0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 744.200498][T29379] UBIFS error (pid: 29379): cannot open "1YaQԖ I ", error -22 [ 744.251228][T29383] UBIFS error (pid: 29383): cannot open "beR,@Mr*a9&wM/@ӧv* jߛvk5F!!0.nX^I?F 'r~j|g`7/CY~t- pMɚ5t/xyod(襨JYn&v`@S ULS t", error -22 [ 744.288960][T29384] binder: 29382:29384 unknown command 0 [ 744.391766][ T27] audit: type=1804 audit(743.629:620): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir881526310/syzkaller.RtqJ8T/407/file0" dev="sda1" ino=16643 res=1 [ 744.423438][T29387] binder: 29386:29387 unknown command 0 [ 744.445283][T29387] binder: 29386:29387 ioctl c0306201 20000080 returned -22 [ 744.479464][T29384] binder: 29382:29384 ioctl c0306201 20000080 returned -22 00:12:24 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000780)=ANY=[@ANYBLOB="080928839ff232020651fa449be195f2369ff136e400000000c1dc728c56ea8f52402cea6c8a7a2797735824c404fb151b9cdef6d0df3d16c462865f341474d70a33b1acc6cbe421218506992389bb10819fe866d8fcac38e5854b9b68c3d937c7d8dd2194c3ae4ceacd12b8718f84a8c274b9e73501ccea8e5428e0c99720e82baf9248945a79f473392483ee9120777ee7ea3dc810ea0300000071208c2ff90adef77bc2dfc2539c78b797887fe568dc84360309c68c759113bd44c8aa03449d92000000000000"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x1000, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r4}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) open_by_handle_at(r5, &(0x7f0000000380)={0x71, 0xffffffff, "d721c357bcedccb5eacfebcc4697a78973c8e7b745e1b95f244113278433f545517f2bbde4e2aebfa1c42666add3cf41df9b35625da32a29f60da092d57841bc72e54dd55fc0fba75b21fac763a87787bc098585bd41cb1ebe203959e00bb72229bb5aac0e26a1a6d7"}, 0x0) getsockname$packet(r1, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=ANY=[@ANYBLOB='0\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r9, @ANYBLOB="0300000000000000f3ff0000080001000bdb81951a1eed2a"], 0x30}}, 0x0) dup(r6) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r10, @in={{0x2, 0x4e23, @multicast2}}, [0x32, 0xc6, 0x5, 0x1, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x8000, 0x0, 0x0, 0x6, 0x67, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000008c0)={r11, 0xf3, "01bce273ea8f9ed80a4cc39504f6511ef7fd98d7dfb47ca0246878ce4cb3f4c94dda0ecaf567cab125894d0b7ce1c16bb671d87c3d63d8767beb09957e1d48f0bcd7a8d0f3f2b408d621eadb3ab3d68817c0cc589582e62ee0c4141665f3b738123bacbaa92810538ffb3af76ad69b3d86bbb9ff34628f565cb542d9b976f4c403fef8dfc95274e815c287968c531fcbeeeecd30866bb2653d7998375ec5a0c5afef3242fd90d99d58494561755934aed7ac4443e597b0870ba7bc3074969d87843302419c8497a3f6e9e6d110d194cb1090c54c241f7899e7c53e0b3b2f6b38a4c6c91bd33f4692eec9b4e82f32885d61cc16"}, &(0x7f0000000440)=0xfb) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000009c0)={r12, @in6={{0xa, 0x4e23, 0x80000001, @empty, 0x2}}, 0xfffffffd, 0x7, 0x20, 0x5, 0x10, 0x2f, 0x7}, &(0x7f0000000540)=0x9c) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000280)={r10, 0xfffffffa}, &(0x7f0000000400)=0x8) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="d1fcffff", @ANYRES16=r13, @ANYBLOB="00020000000000000000010034bac69578ebb4fd00000014001462726f616463617374696e6b00000000"], 0x30}, 0x1, 0xfffffff0, 0x0, 0x800}, 0x20020000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000327bd7000fcdbdf25016ef000000000000b000000000c001473797a3000000000"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x801) 00:12:24 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x100, 0x4, 0x4000}, 0x4) 00:12:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000120005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400012000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:24 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x7fffffff, 0x2}, {0x7d57feb, 0x7}]}, 0x14, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040400010000001704000001000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000d83990832ffdd40a409f01f6147c8f6fd267bf41106f89ec68823ce3c4bcc4ce81e97719ea969f2a019a6137ad1efc966f1cfdc4ea29f673efc20c8dec082bc6de68ab0a5ebf4ee60253518172b4226cc871311ab25868e1d9a0142636973f338d2d41c41e415a2bcc922a3aa71489fad041e59cc9f6e79e0993c96e4c43000000004bcff56cf5a863efb43ea723476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a57b39031cc158a0a4c6dd4880c76e5837f39a161b050abc5a34588ea19114caebb79951084e7113c77ae25a0121de52e5e8cceddf2cb4b9895a592558509d6bc95bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 00:12:24 executing program 4: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x11000, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x1, @remote}}, 0x1e) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') unshare(0x40000000) [ 745.310783][T29496] binder: 29493:29496 unknown command 0 [ 745.314784][T29501] binder: 29494:29501 unknown command 0 [ 745.323652][T29502] UBIFS error (pid: 29502): cannot open "ubifs", error -22 [ 745.360587][T29496] binder: 29493:29496 ioctl c0306201 20000080 returned -22 [ 745.366149][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 745.371810][T29502] UBIFS error (pid: 29502): cannot open "ubifs", error -22 [ 745.386215][T29501] binder: 29494:29501 ioctl c0306201 20000080 returned -22 [ 745.433865][T29500] IPVS: ftp: loaded support on port[0] = 21 00:12:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000480005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400020000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:24 executing program 1: creat(&(0x7f0000000040)='./file0\x00', 0x20) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) keyctl$session_to_parent(0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) fgetxattr(r0, &(0x7f0000000000)=@random={'user.', 'ubifs\x00'}, &(0x7f0000000140)=""/167, 0xa7) [ 745.494721][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:12:24 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="0c954fb63775968683bb0774099fbe4a297e08"], &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) [ 745.700755][T29653] binder: 29641:29653 unknown command 0 [ 745.708568][T29663] UBIFS error (pid: 29663): cannot open "ubifs", error -22 [ 745.717980][T29653] binder: 29641:29653 ioctl c0306201 20000080 returned -22 [ 745.722663][T29683] binder: 29659:29683 unknown command 0 [ 745.748684][T29663] UBIFS error (pid: 29663): cannot open "ubifs", error -22 [ 745.775627][T29683] binder: 29659:29683 ioctl c0306201 20000080 returned -22 00:12:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000004c0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:25 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) pipe(&(0x7f00000000c0)) pipe2(&(0x7f00000001c0), 0x100000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff0000000009000100686673630000000008000200000000006440dd9b68a5ab8837efb62f67014de4de4cbdbfc314395939127ed9d68d80e2157904216340"], 0x38}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000100)={0x8, 'veth1_vlan\x00', {'vlan1\x00'}, 0xea3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f0000000280)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02000037000535d25a80648c63940d0224fc60100002400a000200053582c137153e370a02018003001700d1bd", 0x33fe0}], 0x1}, 0x0) 00:12:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400048000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:25 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 745.943312][T29821] ceph: No path or : separator in source [ 745.993909][T29825] ceph: No path or : separator in source [ 746.053004][T29824] IPVS: ftp: loaded support on port[0] = 21 [ 746.121429][T10188] tipc: TX() has been purged, node left! [ 746.132733][T29829] binder: 29826:29829 unknown command 0 [ 746.152467][T29829] binder: 29826:29829 ioctl c0306201 20000080 returned -22 [ 746.163469][T29834] binder: 29831:29834 unknown command 0 00:12:25 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000180)={{}, {r2, r3/1000+10000}}, 0x0) [ 746.179182][T29834] binder: 29831:29834 ioctl c0306201 20000080 returned -22 00:12:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000680005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:25 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000000)={0x7, 0x0, [{0x9b1, 0x0, 0x8001}, {0xbe5, 0x0, 0xff}, {0x222}, {0xb6b, 0x0, 0xfffffffffffffffa}, {0xae3, 0x0, 0x1}, {0xa9d, 0x0, 0x1}, {0x203, 0x0, 0x2}]}) [ 746.195504][T29836] UBIFS error (pid: 29836): cannot open "/dev/loop1", error -22 [ 746.409395][T29926] binder: 29911:29926 unknown command 0 [ 746.447503][T29926] binder: 29911:29926 ioctl c0306201 20000080 returned -22 [ 746.464773][T29944] UBIFS error (pid: 29944): cannot open "ubifs", error -22 [ 746.486783][T29944] UBIFS error (pid: 29944): cannot open "ubifs", error -22 [ 746.511918][T29945] UBIFS error (pid: 29945): cannot open "/dev/vcsa", error -22 00:12:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KDMKTONE(r1, 0x4b30, 0x4) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x10000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) sendfile(r3, r4, &(0x7f0000000100)=0x7, 0xe9) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000180)=@generic={0x11, "0004010000000000080044944eeba7000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_PRIMARY={0x8, 0xb, r7}]}}}]}, 0x44}}, 0x0) 00:12:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000006c0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440004c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x12) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000dd5f02ec8af4c76f4503775e3a23deb9fa5939"], 0x48}}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x20000, 0x1000}, 0x18) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000140)=0x2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(r3, &(0x7f0000000040)={0x2c, 0x0, r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) rmdir(&(0x7f0000000240)='./file0\x00') getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r7}}, 0x20}}, 0x0) 00:12:28 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000000)={{0x3c, @multicast2, 0x4e20, 0x1, 'lc\x00', 0x13, 0x0, 0x3}, {@multicast1, 0x4e20, 0x4, 0x7, 0x0, 0x40}}, 0x44) 00:12:28 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x301000, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0x1000) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 746.551799][T29978] UBIFS error (pid: 29978): cannot open "/dev/vcsa", error -22 [ 749.503717][T30053] binder: 30051:30053 unknown command 0 [ 749.575793][T30057] binder: 30055:30057 unknown command 0 [ 749.577647][T30060] UBIFS error (pid: 30060): cannot open "/dev/vcsa", error -22 [ 749.581979][T30058] UBIFS error (pid: 30058): cannot open "ubifs", error -22 [ 749.598397][T30057] binder: 30055:30057 ioctl c0306201 20000080 returned -22 [ 749.603760][T30053] binder: 30051:30053 ioctl c0306201 20000080 returned -22 [ 749.620728][T30058] UBIFS error (pid: 30058): cannot open "ubifs", error -22 00:12:28 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400060000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:28 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0xfc, 0x4) 00:12:28 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa198) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1f, 0x1, 0x20) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket$tipc(0x1e, 0x5, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000400)={0x0, @reserved}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5bb8ed62a16970b306898494306c16ece47e2e70a93bb2826a1af23a24df70ab5f394b6249a7d03ad6daa093ba8bca6dec8b29b2dc1a016238be93", @ANYRES16=r3, @ANYRESOCT], 0x3}, 0x1, 0x0, 0x0, 0x48001}, 0x20000010) readv(r2, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000140)={0x3ff, 0x101, "eec0a23f24b5c7b4985695ba52b855fabe57207a27ccdbe7aa0acd4fceb355d7", 0xa095, 0x80, 0x6, 0x1, 0x41}) setsockopt$inet6_buf(r2, 0x29, 0x2b, &(0x7f0000000000)="79e2f2998c44c32cd21a48234e7a54ab5e9cf726796ff0f814613b28ddfec96371fd4ab55e0eaef6fd7d66def3c80f13872ee7", 0x33) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x7, 0x3) syz_open_dev$ndb(0x0, 0x0, 0x0) 00:12:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000740005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x12, 0xed, &(0x7f0000000240)="2765badc4c13c641a57f0399c87c1c5573fa0182fe3d9af6861f7fa155c59e9790611ac3c1614e0de749f1f4141710e10da97fd9672b76610900000000000000bda2fd2f4141160297f73b0db966ad1243fadfa02cc6dcb2886359ccc1015b45242a3fda7ed642c98237b401da5cd3125fbdd03be91cee8660990d33ab939bf7b9f94210bc8f5ea896d77fdded932c1d08d77b548ca5a05035c9df8ecd1bbf0aa499ff704fd62b2e59cab12419f0c2ac24f39f06b215c2a12405975e6e04dcdca1d0c7b14a57184e4161eab9b1eb8d7e5f0d97e5537f63c447773c00"/237}) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 749.629874][T30079] UBIFS error (pid: 30079): cannot open "/dev/vcsa", error -22 [ 749.907882][T30176] UBIFS error (pid: 30176): cannot open "/dev/vcsa", error -22 [ 749.926137][T30180] binder: 30172:30180 unknown command 0 00:12:29 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000140)={0x2, 0x200}) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="b2ddcc1f4768b7c34ee0d4392ab180c48193fb4baccf5943a4b644"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 749.944331][T30181] UBIFS error (pid: 30181): cannot open "/dev/vcsa", error -22 [ 749.964879][T30180] binder: 30172:30180 ioctl c0306201 20000080 returned -22 [ 750.109798][T30186] binder: 30179:30186 unknown command 0 00:12:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000001c0)={0x8, 0xc74, 0x8001}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:12:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000007a0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 750.173300][T30186] binder: 30179:30186 ioctl c0306201 20000080 returned -22 00:12:29 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400b63000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 750.174096][T30187] UBIFS error (pid: 30187): cannot open "ubifs", error -22 [ 750.346823][T30247] UBIFS error (pid: 30247): cannot open "GhN9*āKYCD", error -22 00:12:29 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) accept4$inet(r0, 0x0, &(0x7f0000000040), 0x40800) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000140)={0x1000, {{0x2, 0x4e20, @loopback}}}, 0x88) [ 750.447596][T30384] UBIFS error (pid: 30384): cannot open "GhN9*āKYCD", error -22 [ 750.565690][T30401] binder: 30355:30401 unknown command 0 [ 750.601182][T30402] binder: 30364:30402 unknown command 0 00:12:29 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) recvfrom$inet6(r1, &(0x7f0000000500)=""/4096, 0x1000, 0x10000, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) personality(0x20008) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x20, 0x1, 0x10000, 0x10, 0x5, "d4abe3aa62e203cd00"}) uname(&(0x7f0000000440)=""/176) [ 750.624391][T30401] binder: 30355:30401 ioctl c0306201 20000080 returned -22 [ 750.654730][T30402] binder: 30364:30402 ioctl c0306201 20000080 returned -22 00:12:29 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x20) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="43d5598db2e206ca48f3316b69b71dd7124ca4810de12483f8fb79e7f17f1f7e2b0402ab549115a518fba0881b1dc741e3d14e5dfb55b45f42f50104b5cdca7718312a50c2a8e5a027256c69d7baddf0"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:12:30 executing program 4: r0 = perf_event_open(&(0x7f0000001780)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x2324}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x10001, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000100)={0x0, 0x0, {0x7, 0x8, 0x1007, 0x8, 0x4, 0x0, 0x1, 0x7}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000630277fbac14140ce0", 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffe2a}, 0x28) 00:12:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400c63000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000305630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 750.698734][T30405] UBIFS error (pid: 30405): cannot open "ubifs", error -22 00:12:30 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x2a}, 0x1ff}, 0x1c) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x40100, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000380)) ioprio_get$pid(0x0, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="6ffe000011882f14a2a5197f1059f70000000012000000"], 0x14}}, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000480)=0x2) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x228, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf45a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff195}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xa5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x48}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x947}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc807}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2ddd}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xc222}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) [ 750.911760][T30487] UBIFS error (pid: 30487): cannot open "CYH1kiL $y~+TAN]U_Bw1*P¨'%li׺", error -22 [ 751.016897][T30520] UBIFS error (pid: 30520): cannot open "CYH1kiL $y~+TAN]U_Bw1*P¨'%li׺", error -22 [ 751.062291][T30522] binder: 30517:30522 unknown command 0 [ 751.097629][T30526] binder: 30521:30526 unknown command 0 00:12:30 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="bad67d2573bf6aaa6d9a54ffc6b22ac48eaf19464ef3179a9a16abda9917a9a6027ef30d7b1183d5c3ff7344590020e8bdac43416585a2180e6d98d7690038b50d9e5f716812d4f33b5e9fd75063fa942fe1338e0296b523e5fa31fcb2572d316b4d3d152211a901173df5dc5d825d3abf118726b929b2f1241fc4dfbd48ef0f213c0cb823f09bb4e121f8122cdbdc5a24f64127a9000000004d8f076b405a0adefd964e473c035ce38d3bc22f4700"/184], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 751.133413][T30526] binder: 30521:30526 ioctl c0306201 20000080 returned -22 [ 751.143896][T30522] binder: 30517:30522 ioctl c0306201 20000080 returned -22 00:12:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000505630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 751.229619][T30542] UBIFS error (pid: 30542): cannot open "ubifs", error -22 00:12:30 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400d63000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:30 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000000)) [ 751.265669][T30542] UBIFS error (pid: 30542): cannot open "ubifs", error -22 00:12:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000007a0005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 751.375410][T30624] UBIFS error (pid: 30624): cannot open "}%sjmTƲ*ĎFNڙ~ {sDY", error -22 [ 751.449103][T30635] UBIFS error (pid: 30635): cannot open "}%sjmTƲ*ĎFNڙ~ {sDY", error -22 [ 751.474520][T30634] binder: 30633:30634 unknown command 0 00:12:30 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) r0 = creat(0x0, 0x0) mq_notify(r0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x85, 0x38, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x402, 0x6, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x3, @perf_bp={&(0x7f0000000840), 0xa}, 0x4000, 0x400, 0xfe, 0x7, 0x2, 0x101, 0xe4f0}, r1, 0x1, r0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000100)) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x340, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x9, 0xa2, 0xfffffff8, 0x83, 0x1}, &(0x7f0000000340)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000380)={0xfffb, 0x7f, 0x20c, 0x1, 0x869, 0x6, 0x6, 0x5, r5}, 0x20) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttyprintk\x00', 0x40002, 0x0) writev(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x3, 0x4000}) r9 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, r9) dup2(r7, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KDFONTOP_SET_DEF(r11, 0x4b72, &(0x7f0000000800)={0x2, 0x1, 0xc, 0x15, 0x1e0, &(0x7f0000000400)="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"}) bind$inet6(r7, 0x0, 0x161) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40, 0x0) [ 751.573254][T30634] binder: 30633:30634 ioctl c0306201 20000080 returned -22 [ 751.590150][T30641] UBIFS error (pid: 30641): cannot open "ubifs", error -22 [ 751.629615][T30643] binder: 30638:30643 unknown command 0 [ 751.644397][T30641] UBIFS error (pid: 30641): cannot open "ubifs", error -22 00:12:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000605630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 751.668424][T30643] binder: 30638:30643 ioctl c0306201 20000080 returned -22 00:12:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400068000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 751.744412][T30663] binder: 30642:30663 unknown command 0 [ 751.754164][T30663] binder: 30642:30663 ioctl c0306201 20000080 returned -22 00:12:31 executing program 1: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x800) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x220000, 0x0) r4 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x90, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER={0x34, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd12}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x74}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffd}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x4004004}, 0x18010) r7 = dup(r5) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r8}, 0x14) getsockname$packet(r4, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) ppoll(&(0x7f0000000240)=[{r1, 0x8000}, {r2, 0x92a8}, {r3, 0x5750}, {r0, 0x1400}, {r4}], 0x5, &(0x7f0000000280), &(0x7f00000002c0)={[0x1cf4]}, 0x8) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) r9 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000300)={0x590, 0x1, 0x1ff, 0x0, 0x80000000, 0x2, 0x8}) r11 = dup(r10) getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, r12}, 0x14) getsockname$packet(r9, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockname(r9, &(0x7f0000000000)=@l2, &(0x7f0000000140)=0x80) 00:12:31 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000140002006272696467655f736c0000655f3100000900010073797a3200000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x20045814) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:12:31 executing program 4: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe(0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x12000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000300)=0x100000001) keyctl$invalidate(0x15, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000500)=@urb_type_bulk={0x3, {0x9, 0x1}, 0x6, 0x82, 0x0, 0x0, 0x4, 0x4a5, 0x0, 0x3, 0x0, &(0x7f0000000440)="d38311d2ebd370eb52a0e0fef2d366969bc16aecae47327646a4250cfff186ffed50e80d0deffc3ca590b4e204e5fa07e593df03c0ac48ebaa7af914c831aec1d4348ba6e14117e42a75285eda6aee90f184cf3ee3a8dc5b6e22de2e202f4c6bacbe1a621032b5a8d114417441314735e6f8a7df5e27442af7166fc7a18e2b1d73a19893dab6c55d65b5d00786847ebd01a69f2b9d329bfd"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x12, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYPTR], 0x1}}, 0x0) socket$inet6(0xa, 0x3, 0x100000400000003a) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0xa0800, 0x0) ioctl$TCSETSW(r3, 0x5453, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x0, 0x30}, 0xc) sendto$inet6(r4, &(0x7f00000000c0)='X', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000900)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, r5) r6 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="6f3c5b398b43c6b907e45700d341a1264adc501f1337", 0x16, r5) keyctl$KEYCTL_PKEY_QUERY(0x18, r6, 0x0, &(0x7f0000000240)='\x00', &(0x7f0000000280)) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000000)="84", 0x31200}], 0x1) recvfrom(r4, &(0x7f0000001340)=""/186, 0xba, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000500)="c8", 0x2f4f, 0x0, 0x0, 0x0) close(r4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100003}, 0x1c) ioctl$TCSETSW(0xffffffffffffffff, 0x5453, 0x0) [ 751.964107][T30754] binder: 30750:30754 unknown command 0 [ 751.992150][T30754] binder: 30750:30754 ioctl c0306201 20000080 returned -22 00:12:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000705630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 752.074015][T30759] UBIFS error (pid: 30759): cannot open "JT^,ЇBP!B7שO?F!Tm~", error -22 [ 752.100078][T30762] binder: 30758:30762 unknown command 0 00:12:31 executing program 3: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000200)={{0x9}, {0x7, 0x9}, 0x6, 0x1, 0xfb}) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) write$P9_RLERROR(r1, &(0x7f0000000180)={0x13, 0x7, 0x2, {0xa, '/dev/vcsa\x00'}}, 0x13) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000140)) [ 752.172677][T30765] UBIFS error (pid: 30765): cannot open "ubifs", error -22 [ 752.190402][T30762] binder: 30758:30762 ioctl c0306201 20000080 returned -22 00:12:31 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440006c000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 752.352117][T30820] binder: 30770:30820 unknown command 0 [ 752.365896][T30820] binder: 30770:30820 ioctl c0306201 20000080 returned -22 [ 752.401895][T30886] QAT: Invalid ioctl 00:12:31 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="ac258248a21858c1a06ab8ae83fc23566cd18af4e227b3bafb57d0f6ac5b6721b0959bf77957000000000000000000000000000022"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ubifs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x81, 0x326, &(0x7f0000000140)="256ab50372e7cdb442c2623a9039ee427945d4a3e73596031a35a38a13cdd44ff77e98330d544bcf81cfaef404b7d5951e472cf7661e661e7bd884ebb77258440c346bd96aa2ea0ee6646a31bfe3bfe3c4364b549deffec2eb18b07d19e374f2f2e09e41a5", &(0x7f0000000040)="9d5f1fd03a164264a6b48abb3a21065d", 0x65, 0x10}) 00:12:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000000a05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 752.524248][T30886] UBIFS error (pid: 30886): cannot open "/dev/vcsa", error -22 [ 752.554231][T30886] QAT: Invalid ioctl [ 752.604164][T30892] binder: 30888:30892 unknown command 0 [ 752.625097][T30892] binder: 30888:30892 ioctl c0306201 20000080 returned -22 00:12:31 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 752.642164][T30898] UBIFS error (pid: 30898): cannot open "/dev/vcsa", error -22 [ 752.688952][T30904] UBIFS error (pid: 30904): cannot open "%HXj#Vlъ'W[g!yW", error -22 [ 752.689688][T30915] binder: 30897:30915 unknown command 0 [ 752.743929][T30915] binder: 30897:30915 ioctl c0306201 20000080 returned -22 [ 752.901185][T31091] UBIFS error (pid: 31091): cannot open "/dev/vcsa", error -22 00:12:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x10040100) r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r3}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) 00:12:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400074000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:32 executing program 1: creat(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, 0x1c, 0x20, 0x70bd25, 0x25dfdbfc, {0x1}, [@generic="bdd042b2f617d474a8e0b5e79cbfc9bc937c1423f725e76daf6b7f313d1e00bd4e75370ceeaad315921f88387a5cdfff9d06c068c162bf81fc959d791445cfabceaedc357cfc59d9b14da2604f879f439d46d35871020db25d4173a7bd8a7fc9ecc145274cf6dd0464559ef247fb56c17fb56f9dd74b22b83fead25d3307f481"]}, 0x94}, 0x1, 0x0, 0x0, 0x4080}, 0x42001) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='exfat\x00', 0x0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 00:12:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000630b05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:32 executing program 3: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000340)={0x1, 0xcc49, 0xffffffff, 0x0, 0x16, "4a4b97e95adefeede4db2526211309cfdec2a2"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x200000000000011, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r6}, 0x14) getsockname$packet(r3, &(0x7f0000000500), &(0x7f0000000040)=0x10eef0f1) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000440), &(0x7f0000000480)=0x4) r7 = dup(r2) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$VIDIOC_DBG_G_REGISTER(r7, 0xc0385650, &(0x7f0000000400)={{0x1, @name="97aa547d11dafd3f1a032a8b4eec6c50c98072e94051c060a69a332b89d57d10"}, 0x8, 0x7ff, 0xff}) r8 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, &(0x7f0000000280)={0x5, 0x7f, 0xc5c, 0x5}, 0x10) r9 = dup(r1) getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) ioctl$DRM_IOCTL_AGP_ENABLE(r9, 0x40086432, &(0x7f0000000040)=0x400) r10 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f00000002c0)) setsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000000300)=0x9, 0x2) sendto$unix(r0, &(0x7f00000001c0)="d43712bc68320154a93ac697db2162383ea9738a36e030e97f68590029cb2c448ed69d5ed49d36ae95683a17274f443a9dc8d574fd1c520d546d513a29231d8db331d2776081a9c49aea7a30131cbebf173dbca73879bd1c1787a1c7ea7ce632aac7a72e45b82b79860b16a04aaa04736a7539dce6bd270d9cc1532bc9dc3c1b0e9808df982b568a0900f8c62ad276a36f524cd25599f98e88b9848bd36bb4fe0555c1bf143c72e9608a7b9a20d952923ed9544ec05c0e", 0xb7, 0x40000, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) creat(&(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000380)=ANY=[@ANYBLOB="2ee31046a72021c0aa4c30b0e4d87c5f6c21e850accd22bae5d6e35c995dbbbd06e0502f6a5fa5a358211d9cec8feddea39e5f78da7385b011e1e332d70392568ba01491f436710aafe6bbe01801d5dca2aff9ef6377f3159443bdc635e5986e6226e36616054a6efc10e556938dbcab0297e7bfa38fa50e5bf7dfec"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) 00:12:32 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0xc, 0x28001) timer_create(0x3, &(0x7f0000000200)={0x0, 0x27, 0x1, @thr={&(0x7f0000000080), &(0x7f00000003c0)="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"}}, &(0x7f0000000240)) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0xeece, {0x0, 0x100000000000001}, {0x49, 0x2}, @period={0x0, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3}, 0x0, 0x0}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0xa, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) write$FUSE_LK(r5, &(0x7f0000000040)={0x28, 0x0, 0x8, {{0x0, 0x0, 0x2, r6}}}, 0x28) write$evdev(r0, &(0x7f0000000040), 0x1b3) [ 752.905930][T31092] UBIFS error (pid: 31092): cannot open "/dev/vcsa", error -22 [ 753.437861][T31105] binder: 31102:31105 unknown command 0 [ 753.445563][T31107] [EXFAT] trying to mount... [ 753.457248][T31106] binder: 31101:31106 unknown command 0 [ 753.477832][T31106] binder: 31101:31106 ioctl c0306201 20000080 returned -22 [ 753.486336][T31105] binder: 31102:31105 ioctl c0306201 20000080 returned -22 [ 753.496376][T31103] UBIFS error (pid: 31103): cannot open ".F !L0|_l!P"\]P/j_X!ޣ_xs2V6q [ 753.496376][T31103] ܢcwC5nb&fJnV翣[", error -22 [ 753.502794][ T2625] block nbd1: Attempted send on invalid socket [ 753.532395][ T2625] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 753.561250][T31107] ------------[ cut here ]------------ 00:12:32 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440007a000005630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) 00:12:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x49, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304400000890b05630440000000000e630c400000000000000000000000fd03630840000000000b6300001063084000000000000000000f630c4000"/73], 0x0, 0x717000, 0x0}) [ 753.596440][T31153] UBIFS error (pid: 31153): cannot open ".F !L0|_l!P"\]P/j_X!ޣ_xs2V6q [ 753.596440][T31153] ܢcwC5nb&fJnV翣[", error -22 [ 753.623941][T31107] [EXFAT] No bh, device seems wrong or to be ejected. 00:12:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0x8, 0xc9, 0x9, 0x0, 0x7f, 0x4, 0x4, 0x3f, 0x7, 0x8, 0x7, 0x8, 0x28, 0x5}, 0xe) r1 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) accept$netrom(r1, &(0x7f0000000300)={{0x3, @default}, [@bcast, @remote, @netrom, @netrom, @bcast, @remote, @netrom, @bcast]}, &(0x7f0000000380)=0x48) fchdir(r1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10) write$UHID_INPUT(r3, &(0x7f0000000980), 0x10a9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x920, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendfile(r3, r3, &(0x7f00000000c0)=0x54f, 0x8080fffffffe) [ 753.687472][T31107] WARNING: CPU: 0 PID: 31107 at drivers/staging/exfat/exfat_blkdev.c:62 exfat_bdev_read+0x24f/0x2b0 [ 753.698819][T31107] Kernel panic - not syncing: panic_on_warn set ... [ 753.705423][T31107] CPU: 0 PID: 31107 Comm: syz-executor.1 Not tainted 5.6.0-rc2-next-20200224-syzkaller #0 [ 753.715317][T31107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 753.725482][T31107] Call Trace: [ 753.728911][T31107] dump_stack+0x197/0x210 [ 753.733453][T31107] ? exfat_bdev_read+0x1a0/0x2b0 [ 753.739736][T31107] panic+0x2e3/0x75c [ 753.744138][T31107] ? add_taint.cold+0x16/0x16 [ 753.748877][T31107] ? __kasan_check_write+0x14/0x20 [ 753.754099][T31107] ? __warn.cold+0x14/0x3e [ 753.758635][T31107] ? exfat_bdev_read+0x24f/0x2b0 [ 753.763868][T31107] __warn.cold+0x2f/0x3e [ 753.768222][T31107] ? exfat_bdev_read+0x24f/0x2b0 [ 753.773269][T31107] report_bug+0x289/0x300 [ 753.777634][T31107] do_error_trap+0x11b/0x200 [ 753.782251][T31107] do_invalid_op+0x37/0x50 00:12:33 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = socket$isdn(0x22, 0x3, 0x1) fstatfs(r2, &(0x7f0000001d40)=""/113) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r4}) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="8d9c87781379c40205bfb07715ad32e867d5b44a73f34ee351cc769f585007c1046f947a631ad490557a09070e7a5b66c9815c0d64d21b0d97d7b6ccf94985831c991e068012860070fa681fc678b255ae820c31b6804605c89b34ebcb33c123d9b1e470469ea17618c07946cbe631550c6899272f60a4359d9618a3401a112568eddcbc250bf80747"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ubifs\x00', 0x0, 0x0) [ 753.786689][T31107] ? exfat_bdev_read+0x24f/0x2b0 [ 753.791654][T31107] invalid_op+0x23/0x30 [ 753.795830][T31107] RIP: 0010:exfat_bdev_read+0x24f/0x2b0 [ 753.801460][T31107] Code: 00 00 31 ff 41 bc fb ff ff ff 89 de e8 8a cc 74 fb 85 db 0f 85 5d ff ff ff e8 fd ca 74 fb 48 c7 c7 60 d7 ed 88 e8 20 eb 44 fb <0f> 0b e9 45 ff ff ff e8 05 f8 b3 fb e9 ad fe ff ff e8 bb f7 b3 fb [ 753.821107][T31107] RSP: 0018:ffffc90001cafae0 EFLAGS: 00010286 [ 753.827215][T31107] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 753.835203][T31107] RDX: 0000000000040000 RSI: ffffffff815ee766 RDI: fffff52000395f4e [ 753.843200][T31107] RBP: ffffc90001cafb18 R08: ffff888049a96400 R09: ffffed1015d06661 [ 753.851270][T31107] R10: ffffed1015d06660 R11: ffff8880ae833307 R12: 00000000fffffffb [ 753.859258][T31107] R13: ffff88803cee0000 R14: 0000000000000001 R15: 0000000000000000 [ 753.867412][T31107] ? vprintk_func+0x86/0x189 [ 753.872238][T31107] sector_read+0x140/0x1f0 [ 753.876692][T31107] exfat_fill_super.cold+0x2e4/0x895 [ 753.882022][T31107] ? exfat_read_root+0x8f0/0x8f0 [ 753.887156][T31107] ? vsprintf+0x40/0x40 [ 753.892157][T31107] ? wait_for_completion+0x440/0x440 [ 753.897606][T31107] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 753.902083][T31162] binder: 31160:31162 unknown command 0 [ 753.903342][T31107] ? set_blocksize+0x25a/0x2d0 [ 753.903399][T31107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 753.919985][T31107] mount_bdev+0x304/0x3c0 [ 753.921270][T31172] binder: 31159:31172 unknown command 0 [ 753.924327][T31107] ? exfat_read_root+0x8f0/0x8f0 [ 753.924355][T31107] exfat_fs_mount+0x35/0x40 [ 753.924372][T31107] ? exfat_remount+0x50/0x50 [ 753.924391][T31107] legacy_get_tree+0x108/0x220 [ 753.924412][T31107] vfs_get_tree+0x8e/0x300 [ 753.924434][T31107] do_mount+0x135a/0x1b50 [ 753.936522][T31162] binder: 31160:31162 ioctl c0306201 20000080 returned -22 [ 753.939507][T31107] ? copy_mount_string+0x40/0x40 [ 753.939533][T31107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 753.939550][T31107] ? _copy_from_user+0x12c/0x1a0 [ 753.939579][T31107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 753.952912][T31172] binder: 31159:31172 ioctl c0306201 20000080 returned -22 [ 753.953465][T31107] ? memdup_user+0x80/0xd0 [ 753.953498][T31107] __x64_sys_mount+0x192/0x230 [ 753.953523][T31107] do_syscall_64+0xfa/0x790 [ 753.953550][T31107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 754.016005][T31107] RIP: 0033:0x45c449 [ 754.016023][T31107] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 754.016032][T31107] RSP: 002b:00007f11a3922c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 754.016046][T31107] RAX: ffffffffffffffda RBX: 00007f11a39236d4 RCX: 000000000045c449 [ 754.016056][T31107] RDX: 00000000200002c0 RSI: 0000000020000080 RDI: 0000000020000280 [ 754.016065][T31107] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 754.016073][T31107] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 754.016082][T31107] R13: 000000000000074a R14: 00000000004c9d14 R15: 000000000076bf2c [ 754.017995][T31107] Kernel Offset: disabled [ 754.096001][T31107] Rebooting in 86400 seconds..