9b3921944639a8db0cf94cf3fe52594387ee6b6f055232c89286eadca0608c9bb5e05cb81c6a0fb9f1d486f17a4afc774a93befab855c1bad0ce0f47b19f3e0fc00f5b4c7951d1c27deea376e71c51e8a24c520aa69e1d5500bf0117ddedf458bb7b1b827499bd6df12c640dc8a9000f296ad1fc69ac507314d31fedd7a7979214937c4966110cf3075c4f3", 0xb8}, {&(0x7f00000003c0)="b7b74b5840014a1c8add95880bcdf431ad067dfbbf830541b51e1bad287e6c35d204d24ebe15eb1665cb97226998972094bdab0ef51739624a7d26101e1a23601f4481d51bccce29acbf8e19cab6509c57f670de494cc637b8d271d0cb2cd42adafb6c7fe48f49289859d547783511b0445fb7ca0bfbd245e1ca4116b3f8fc2b4cc43017d14ff1fe9d0d844dcb4c15460aacdb016f0e659db373729ede51167ef4ede915950221", 0xa7, 0x7}, {&(0x7f0000000500)="afc624494e54177861fa1fc00619072159b73a52451c6a9e403661cef213e7be6dc18966effa03120d8f511ed5e9f6dd246b94155d63ff9289c084015ed86e4b07600f130a16f97fae939b67ceb4694e6290535401eafe18a50ae94f8551b92c4739d3f004f80061880cadc2e2eb5524ab4399d9d5448015ebec8b2e2b07e77ae40995c905f40098a85e0ae847fae3ce2cd082e7fb0aad1715c2f7c80261772254511ff8236cc293f53f888db9077dc938de6e62990d4ee61802de930b08798949fa988e75af550b8adeda673e104acf28ffa88dfebe022a3d98bf8b35f05c38beda9988005b3b2267ca55409b657a26", 0xf0}], 0x4, &(0x7f0000000600)={[{'\x00'}, {'\x00'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\x11/'}}, {@smackfshat={'smackfshat', 0x3d, ']/-^{(\'\\^@:^%\'/-%'}}, {@dont_hash}, {@seclabel}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@permit_directio}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r0}}, {@dont_appraise}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x24c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}]}, @TIPC_NLA_MEDIA={0xac, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x38}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffe0}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x20048040}, 0x20044841) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800940bab260000", @ANYRES16=r2, @ANYBLOB="010027bd7000000000001700000004000680"], 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xcc, r1, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x480000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x39eb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x312f}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffffd}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24000810}, 0x8004) 20:43:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000f0000000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000030000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=0x0, @ANYBLOB="03000000c8f2ee9679e607c55a10576d000000000080000000000000810000000000000006000000000000009400000000000000000001000000000005000000020000001f0000000000000000000000000000000600000000000000090000000000000000000000000000003800"/160]) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="01000000000000290000000000ff00000080"], 0x18}}, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$NL80211_CMD_GET_REG(r5, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf251f000000080001006700000008000100750000000500920005000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) openat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x13) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040054}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="88000000", @ANYRES16=r9, @ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r9, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3a2, 0x3f}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5db444717904a942}, 0x20400c0) [ 1667.180423][ T6915] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 20:43:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000050000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x5, 0x7, 0x0, 0x1, 0x0, 0xdc6, 0x40, 0xa, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f0000000080)}, 0x11141, 0x0, 0x7, 0x0, 0x6, 0x4, 0xfffc, 0x0, 0x8, 0x0, 0x3b6bdfb1}, 0xffffffffffffffff, 0x2, r1, 0x9) 20:43:51 executing program 0: ustat(0x800, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ustat(0x1, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 1667.389824][ T6925] overlayfs: filesystem on './bus' not supported as upperdir [ 1667.406620][ T6915] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop1. 20:43:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup3(r0, r1, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)="71afc2c91d74688d7d6d4f4d3b010b42e992617b666dbb919fe57bc7b5bde87478ea8f4266794363dca4ea98bee4e6cb43b89f0ff05f0bb44fad6c3628033dae217c739ccc55fef7d32c87971d3a0f15579161b7180a", 0x56}, {&(0x7f00000000c0)="618a5b7217ce37557b054510", 0xc}, {&(0x7f0000000100)="cde4e3436b75d7a44fecffec31676242fa32fbcc8566b5cdd6554052f23611d0124fec41dc347b31235b1afd3747a862b14bfacd0b4dd19f110cb5c6875ef8917c5af79e02939f70951f551d0ddbcb7dfee4da59664a087094ef4d9ec94e04d5fa3e787d1c5d60da5326f3af937109fa052fd6d080e6601205506dbc26ef8977a9fb26d0f3fbecff448c7c7ac3434a01b341c06dc50de69cf86bfa9c22b393abd080c402fab1b0625abc58f3be0f364839", 0xb1}, {&(0x7f00000001c0)="c946b557adfeea51d76a03a0f5a4aea5b6e0a8599c2ece286f1e651208c40b5da05d09e97454676fc1b5170eedb9c46ef415706c12c38f459aa2496fc654e1fc691ddc248ab0052a991e628233586331e7667c43e998504c7dc7063424291df903c946800b55c993e6a04eede82eb0c402210326acad6cac6aa8a7f62b225a74c5f8abbbefaf6eecf1c9aae18fc9207e5cfbc322d7cf24c3b483e6cc7bfc8e4c42aa04c645ff3a65b2a7ab2e67a501f07888bc2e9299a12a63b36aa5d42fbb2a16d876ccfab391aa5e", 0xc9}, {&(0x7f00000002c0)="4609f86e813bf8bb121e41ff53510b7cdbe56d905fc6528c867d6e28d810e811a2b54418721253ce57dd1107678b39c0f09776ccc345a75f9e7ff12cff4561a81c25d14db1abad78937728e50c2acf08871554f5db362f51ac65e01e303e912dc6f21a397bd21ff320ef58a96f4ed6135959360884e36ce21bd48dacba022fc7dc15a11cfd745fc5b6ec2c6b9755af0268ae1f18eed0dbf42e78dab6c6c02be3d80ec2dcdee9958939aa64baf3f2559d9b5565d9c840d025a31f4a390268a07b23b2ba77afd40e034d516687f609a2b643192593962b33189ddc1435e12334b4b15f40f9c1194f", 0xe7}, {&(0x7f00000003c0)="ec6bcd14eaa560627287562d569383d3ec936175847cf4c171975f91099a2815b0c8f107eb1c3341d603bc52db09c8c8e5c95d4ce288d7d2837023ff36e7abdc9a7b03a38e", 0x45}], 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r3, 0x1, 0x70bd27, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000060000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:51 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x802, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$vsock(0xffffff9c, &(0x7f0000000080), 0x48a200, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e636896b55a7a534820d89b5b48a9eaa4fae53bc11b877badb0b66b7acffd359f594e8f3b250ac4876bc3dd59d1e8dfbec59cf1786e77f3a9ae741289538846a28fc340ae5880000000000000005bc80e90d474669e5295112fc9f3912b18c7a431553f2dcc3c5458821e29bc7e0f4372206d99ebbabffa75d69bb27adadf3f7f03cb2f60f8591b04ca00000000000000000000000000000000000000000039ccba9744ef93b53f5f9a31cceebcac82eb8dff6d35f78609fd6cfc9682d71e793d41beb2e9c077a6b5a2b31df556ba47d6b57995730b42365b1500b502d26b"], 0x0, 0x0, 0x0}) 20:43:51 executing program 1: syz_io_uring_setup(0x7eaa, &(0x7f0000000340)={0x0, 0x1fee, 0x20}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext, 0x44800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, r0, 0x1, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c6569723d2e254dc9a73b8561c01b2d06f066e3f8cb3a23db09dac735"]) socket$inet(0x2, 0x0, 0xc0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) r3 = getpgid(0xffffffffffffffff) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0x9f, 0x1, 0x4, 0x1f, 0x0, 0x1, 0x20, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xa5b, 0x1, @perf_config_ext={0x12000000, 0x8}, 0x88, 0x121c0000000000, 0xffffffff, 0x5, 0x1, 0x75, 0x0, 0x0, 0x10000, 0x0, 0x8001}, r1, 0x7, r1, 0x8) r5 = getpgid(r3) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f0000000440)='fusectl\x00', 0x80000a, &(0x7f0000000480)='\']/]/}\x00') perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x8, 0x4, 0x6, 0x34, 0x0, 0x0, 0x4381, 0xa, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x6}, 0x40a3, 0x3, 0x4, 0x4, 0x80000000, 0xccf, 0xe92, 0x0, 0x4, 0x0, 0x8}, r5, 0xb, r4, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000d5060000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdf, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2bb72b68604bb0dc, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e6388b6508eb55167720c40000000005d632ba145165960d8e30fd4c2ac376fd03b8ee5016dc1bee96357615a245839da16d1bc6a194de99f0eb965c23ba6156f99f160353903f7d91b65574afbc0456f62bdd70bf5e683c8171e974e0ece43ad20f6191184fcd4a5aba45c8d28f7185ebf239bccfa32ffa9e011a03e68100456b89d861c5df7bcdcbbd79c0766db0ab203110e138b9c22cf2a945fd68ecf831877770f5f0aa4c9"], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=[@enter_looper, @free_buffer], 0x2f, 0x0, &(0x7f0000000080)="d424cff7bfd6a752fde1e0476c93fab1600167561fe5e214eb23f0504353fbf3627d27344c0c0c1ba2c2398ba3ed90"}) 20:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000070000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) [ 1667.829187][ T6963] binder: 6962:6963 unknown command -1232575730 [ 1667.839109][ T6963] binder: 6962:6963 ioctl c0306201 20000040 returned -22 [ 1667.863217][ T6961] overlayfs: missing 'lowerdir' [ 1667.888692][ T6964] binder: 6962:6964 unknown command -1232575730 [ 1667.898398][ T6964] binder: 6962:6964 ioctl c0306201 20000040 returned -22 [ 1667.938904][ T6969] fusectl: Unknown parameter '']/]/}' 20:43:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/16], 0x0, 0x0, 0x0}) 20:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xb4, r1, 0x1, 0x0, 0x200000, {}, [@TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "9e958ba4f05228cc3167a0aa382c5891d3050e37cb"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "81bfdc848f6259c5e50b9e0d9a4bb01ef8aa35512c950be7555f3298128e"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x880}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0614ab7f253c1ef58700000000557d253e3f30f0e259faf4553d1600547e82dae81c0551278d3fff09d99605dfad3901e058663717daa599395c88b156564bb61a4d12e536fd6693a2a4b98b85161609a0371c7a4fd802808640895313af386a944cecfb0499071aa920c4f5a6", @ANYRES16=r2, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x10}, 0x8004) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd8, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xcf80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7efb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xef85}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xac}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4584}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffa}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044004}, 0x40) 20:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000090000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1668.051072][ T6977] binder: 6974:6977 unknown command 0 [ 1668.058874][ T6977] binder: 6974:6977 ioctl c0306201 20000040 returned -22 [ 1668.071843][ T6969] overlayfs: missing 'lowerdir' 20:43:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x48040) 20:43:51 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) syz_io_uring_setup(0x13c6, &(0x7f0000000100)={0x0, 0xb3ab, 0x10, 0x0, 0x36a, 0x0, r0}, &(0x7f0000ee2000/0xa000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x10000, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) chdir(&(0x7f0000000000)='./file1\x00') ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) [ 1668.122789][ T6987] binder: 6974:6987 unknown command 0 [ 1668.129851][ T6987] binder: 6974:6987 ioctl c0306201 20000040 returned -22 20:43:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000e0000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:51 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r6, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:43:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x2c, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x1}, @acquire_done={0x40106309, 0x2}], 0x6, 0x0, &(0x7f00000000c0)="b28042f6f65a"}) openat$binderfs(0xffffff9c, &(0x7f00000002c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000140)={0x3}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xbc, 0x3, 0x3f, 0x4, 0x0, 0x24}, {0xfffffffe, 0x3, 0x6, 0x6, 0x8, 0xffffffffffffff69}], ['\x00']}) [ 1668.252108][ T7005] binder: 7002:7005 ioctl c018620c 20000140 returned -1 [ 1668.316056][ T7007] binder: 7002:7007 ioctl c018620c 20000140 returned -1 20:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000f0000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="000410068000"/18], 0x18}}, 0x800) 20:43:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000000000000a35034455936d7a74a83df"], 0x0, 0x0, 0x0}) 20:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000003f0000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1668.452354][ T7020] binder: 7019:7020 unknown command 14 [ 1668.459496][ T7020] binder: 7019:7020 ioctl c0306201 20000040 returned -22 [ 1668.512609][ T7024] binder: 7019:7024 unknown command 14 [ 1668.514358][ T6995] overlayfs: failed to resolve './bus': -2 [ 1668.519186][ T7024] binder: 7019:7024 ioctl c0306201 20000040 returned -22 [ 1668.678557][ T7009] overlayfs: failed to resolve './bus': -2 20:43:52 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340)={0x0, 0xed35, 0x0, 0x0, 0x3c3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000000)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="757070d9726469723d2e2f6275732c776f6b6469723d2e2f66696c65312c6c6f7765726469723d2e3d383d7b97e9ef6a60c44a18cd48fe207e8a302bf00840bb708b086b4f598df400eb81d50d1be96eae3e197bdf06f50ff2374679"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x200, 0x7, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="18a3008100", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000600000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffff9c, &(0x7f0000000100), 0xc200, 0x0) ftruncate(r1, 0x400) 20:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000006d50000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800002d37b0c38994791a975b1e5bb2626600", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x20028090}, 0x0) 20:43:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2cb1, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8, 0x0, 0x2, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x7, 0x6, 0x5, 0x0, 0x800, 0x20000, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x3e, 0x5}, 0x8400, 0x7ff, 0x3, 0x9, 0x80, 0x0, 0xf4a, 0x0, 0x1, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e6300009bf69e2a1e63afeaecbe9944084f619b21f169d2165c7b4b352edf33056360087357fb12b6e7e78c2162e69cb3c66d188515d27b065b2a8400000000000000080c746b393be8638e608421c74c3a3ed21855400004ef8cb53f84a39f49087a21c7ce0e0d"], 0x0, 0x0, 0x0}) [ 1668.893354][ T7042] binder: 7041:7042 unknown command 25358 [ 1668.899496][ T7042] binder: 7041:7042 ioctl c0306201 20000040 returned -22 [ 1668.943549][ T7039] overlayfs: unrecognized mount option "upprdir=./bus" or missing value 20:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbf40}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 1669.171217][ T7049] overlayfs: unrecognized mount option "upprdir=./bus" or missing value 20:43:52 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75d56b65726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2ea27c45532b1e153096f585f95bc52d5f0ad582d52e505e39acf24b25af3c42f86b4acbdea66e3495a8e79ccfd80d1f189ff9ebcdf6578d748054178a6f18"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000f00000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x0, 0x0, 0x0}) 20:43:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ipvs(0xffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x30c, r1, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6fa4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffff00}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x853}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4b45}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @private2, 0xfffffffd}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x51d4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x60}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x401, @mcast1, 0x400}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @mcast2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffff801}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @loopback, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @local, 0x3}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x20040010}, 0x20008000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup3(r2, r3, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000007c0)=ANY=[@ANYRES16=r2, @ANYRESHEX=r3, @ANYRESDEC, @ANYRES32=r0], 0x18}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x108, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xdada, 0x22}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x9c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x26}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}]]}, 0x108}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r11, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r10, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r11, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x17, 0xf2, "40d26729613a12a809d7a705bc8025c3e45e0d"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xf801, 0x7b, 0x80, 0x0, 0x7, 0x5, 0x20, 0x5, 0x1, 0x7, 0x0, 0x7fff, 0x9, 0x101, 0x625, 0x7]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc8000310, {0x1, 0x9, 0x81, 0x4}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x2, 0x1, 0x0, {0x98, 0x49, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x0, 0x81}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000012c0)={0x1124, r11, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0xbf, 0x45, "54674d07d649e72a6fd01453884970f18a2448fe09d0d97d5d59778d60509c92d487c60c08280f6d98dc6ad6762a61ae841d1c289923e09432e554beee33d78ce784eca15db4092e33f2d86e125dd0fa31ba1d25b3bf914e3b2c483e11a5ae4a9f304460daa8e3a0f2e07c4a7e7e8418d93facc43e42784c331806b0f60a505df4b6ecfa299654ca7dbe42654a6cfa673d1031457d87fa9f33c6b23d2b412be3de031e7826e19355c9870a8582b325ab1739ac3622267c61175ffe"}, @NL80211_ATTR_TESTDATA={0x32, 0x45, "50f12fba766459454baf3a7a4e721ef3e6f31b19f831c99c2670bfbce5ec97ed62eb378e3ec2f30b5e76d69926a4"}, @NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}, @NL80211_ATTR_TESTDATA={0x16, 0x45, "025a0effb028aa16316f826685cc62430555"}]}, 0x1124}, 0x1, 0x0, 0x0, 0x4000890}, 0x0) [ 1669.254290][ T7063] binder: 7061:7063 unknown command 0 [ 1669.262047][ T7063] binder: 7061:7063 ioctl c0306201 20000040 returned -22 20:43:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000300000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1669.314416][ T7071] binder: 7061:7071 unknown command 0 [ 1669.323063][ T7071] binder: 7061:7071 ioctl c0306201 20000040 returned -22 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000400300000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="e3e7764fa9ab1ceabfdddd6ede3fff0366a96d44a3b7cba2c3592e573eb70156ef4893ca6d5f652b80d565e2a6b3cdb19a0b51232140b83e5a310bd536f2e5b30facede878141e89144691bb70b8b2707e36ecc51304ccd2969fa438292f97797c504345c7b72afc79fe3d4f", 0x6c, 0x963}, {&(0x7f00000001c0)="49057feaa6d1778f9dc202495bd1aea469c9c09d3cdef91abb0b5e73e83d0f924e2f183ea665cf6db043e3d2c17f061d0cc7e59d27b62659d9ff55a7cd28580d1f8d4f826f239e75a4f2049d936aef5a81341ee1c5e77c37c7db918fd1f3e90f5d7bde448ca96f40ac54", 0x6a, 0x8}], 0x2000, &(0x7f0000000280)={[{@loccookie}], [{@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder1\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@seclabel}, {@dont_measure}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs/binder1\x00'}}, {@fowner_lt}, {@permit_directio}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) dup3(r1, r2, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000034000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1669.474728][ T7067] overlayfs: unrecognized mount option "ukerdir=./bus" or missing value [ 1669.495463][ T7082] loop2: detected capacity change from 0 to 9 [ 1669.521977][ T7073] overlayfs: unrecognized mount option "ukerdir=./bus" or missing value 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000fffff000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:53 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) io_uring_enter(r0, 0x3d9a, 0x9, 0x0, &(0x7f0000000000)={[0xfffffffc]}, 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x7f, 0x0, 0x20, 0xff, 0x0, 0x100, 0x1000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x321}, 0x280, 0x8, 0x101, 0x6, 0x3, 0x65287e11, 0x7ff, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0x6, r1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726456723d2e2f6275732c776f726b6469723d2e65726469723d2e000000006bd8e15336eb"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) r3 = gettid() process_vm_writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x9, 0xf4, 0x0, 0x0, 0x7, 0x50080, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0xffffffffffff0001, 0x1000a4f}, 0x18104, 0x8, 0xc, 0x5, 0x2400000, 0x2, 0x2, 0x0, 0xc4, 0x0, 0x8}, r3, 0x1, r2, 0x2) 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000001000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1669.687649][ T7096] overlayfs: unrecognized mount option "upperdVr=./bus" or missing value [ 1669.735962][ T7094] loop2: detected capacity change from 0 to 9 [ 1669.771185][ T7103] overlayfs: unrecognized mount option "upperdVr=./bus" or missing value 20:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$hpet(0xffffff9c, &(0x7f0000000140), 0x88000, 0x0) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fcdbdf25070000001400038008000200200000000800010043a00000400005803c000280080002005a000000080002000000000008000400707500000800030000000000080004000180000008000200f8ffffff13000100190000004800048044000780280001001300000008000400950600000800010013000000080003007766000008000300b3000000080001001900000008000200020000000800040009000000"], 0xb0}, 0x1, 0x0, 0x0, 0x44000004}, 0x2000c0c4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="180500008d637e56ee88944301b4de199286125b8f51621f0e1e64f0d117", @ANYRES16=r2, @ANYBLOB="0600000002e75621a3dec8bc0000040d0680"], 0x18}}, 0x0) 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000002000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:53 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "e74e5c7835f967965b38f676f0f76718ba62c249"}, 0x15, 0x3) 20:43:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000140)=0x1000) r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x301440) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x4, 0x4, 0x7f, 0xff, 0x0, 0x7fffffff, 0x2000, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x2, 0x1000}, 0x40c, 0x10000, 0x3, 0x9, 0x0, 0xba, 0x4805, 0x0, 0x100, 0x0, 0x262}, 0xffffffffffffffff, 0x1, r3, 0x0) 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000003000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0000000000000017000000feff0680"], 0x18}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1cc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4f4}, {0x6, 0x11, 0x9}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7ff}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x1}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x73}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc904}, {0x6, 0x11, 0x800}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4010}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="240800000000fedbdf25140000005000078008040200020000000800012700070000000800010006ffffff08000200f7ffffff0c000300540000000000000008000100050000000c00030003000000000000000c00030005000000000000007069dab4f500e751c82464984ebd5f8955450979c2e788f961115f1cefbc39ac115fd2c0099b5a57e56be605a8cfd309da896d6c66c595806ede9b13c360379d89b99209c1c48572dc150540c544ea5110b26827452b5d621358e0be46d4bc7ef4c4e383632c63db3a6726712daa35819106"], 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x48000) 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000004000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)={0x11c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb81}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}]}, 0x11c}}, 0x0) 20:43:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000005000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="0100000000000022000a4200000000000000"], 0x18}}, 0x0) [ 1670.742598][ T7129] overlayfs: filesystem on './bus' not supported as upperdir 20:43:54 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x7c70, &(0x7f0000000140)={0x0, 0xf5a8, 0x4, 0x2, 0x70, 0x0, r0}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r3, 0x80, &(0x7f00000003c0)=@sco, 0x0, 0x0, 0x1, {0x0, r4}}, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file1/file0\x00') r5 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000006000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x34}}, 0x0) 20:43:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1}) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x802, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c400000000000000000000000006d8501f19e007580566b960e2602e08d8ea9ec1e42e18b77cd1c58d54432277d33cc2019fcbe3abf0b"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xb, 0x3}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7da2, 0x1402, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x1, @perf_config_ext={0x37d, 0x1}, 0x4000, 0x2, 0x200, 0x4, 0x8, 0xa6, 0x6, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x7, r2, 0x0) 20:43:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x13) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000680)=ANY=[@ANYBLOB="48040000", @ANYRES16=r7, @ANYBLOB="010000001000000004003b1c210008000300", @ANYRES32=r6, @ANYBLOB="2c0433005000de295b3acba512e4080211000001505050505050"], 0x448}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r7, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_FILS_KEK={0x17, 0xf2, "40d26729613a12a809d7a705bc8025c3e45e0d"}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0xf801, 0x7b, 0x80, 0x0, 0x7, 0x5, 0x20, 0x5, 0x1, 0x7, 0x0, 0x7fff, 0x9, 0x101, 0x625, 0x7]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc8000310, {0x1, 0x9, 0x81, 0x4}}}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc, 0x2, 0x1, 0x0, {0x98, 0x49, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x0, 0x81}}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r7, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x6e}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x58b29fd6}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}]}, 0x44}, 0x1, 0x0, 0x0, 0x40002000}, 0x4044004) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000007000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000048dd353a2a175a312efcafaa43acef185f8ce993aabe9de49bc922e7c7225cf6d0e0eb2491f854bba9b7078a3e83db9cd16e2025a63b4e949256ff1f5ce4143a7cdf31834f1cae6c9c1e8cf7ecd570d7912f4e0ed357da82fe2da3763cd7851f00c067da3ee716ae1e007dd620830553cc9a0e6d552fc690d7d9f5ff3f8dc2f7261f853a3ba", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:43:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000008000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1671.777623][ T7167] overlayfs: filesystem on './bus' not supported as upperdir 20:43:55 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c40ff00"/16], 0x0, 0x0, 0x0}) 20:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x144, 0x0, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x130, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x0, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x58a2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xddd}, @TIPC_NLA_PROP_MTU={0xfffffffffffffeaa, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd46}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NET={0x0, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x0, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0x0, 0x3, 0x8001}]}]}, 0x144}}, 0x41) 20:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000009000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008010) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbf40}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1bc, r4, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x72, 0x3, "2d55bea73ddcf62de730294eeda704b8aca749d7162e22836219f8064d32d16148f5294d0171d1d56c75df2a0c87cbf2989fc28548576ac114ae432dfa3b42200d66a7b235dd624fd1fb6ee34f535c7c13ecd53faa57f1cd3e9e50923688a198b49da859f45caaea8b9fc19bfd1a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7c2a0d167acccd2c9c01ea13c04621fd7e1a704f92b76cc0"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x20}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x2, @local, 0x3d57}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9e1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x4041}, 0x4004810) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x80, 0x17, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'erspan0\x00'}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) 20:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000e000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff}, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x3f, 0x80, 0x1, 0x2, 0x0, 0x880, 0x41084, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x44}, 0x80019, 0x81, 0x8d, 0x3, 0xfffffffffffffc00, 0x714c6e9d, 0x40, 0x0, 0x7, 0x0, 0x4}, 0xffffffffffffffff, 0xe, r1, 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000f000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1672.031857][ T7197] overlayfs: filesystem on './bus' not supported as upperdir 20:43:55 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e911b4c070d498e192cceead63c76928596793def1ecd0251226f1a5b1f67a6486716ff674d462fde86ec0272a813f199ba29316f0582f5a23917bbe2d2772276d26541593436f7ff9c273ac8f0be1d1d79e2b58fffb1ebc7ad0ac04da4182a8cd3c3b5b2b44a15ef08228e835f50093ebef241fecf665bf36cf99159b003db31c06d7188442f079100e64a4ab74318351f850e178e55503b07d719efe92529d2bbb16b90a58ee2698e34681fe6f92ba9ee4cc1d572779f6bda53d69ba8f11873ee476ecbe78ac0"]) socket$inet(0x2, 0x0, 0xbe) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r4, @ANYBLOB="01840000000000001400350073797a5f74756e000000000000000000"], 0x34}}, 0x0) connect$can_j1939(r2, &(0x7f0000000580)={0x1d, r4, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, @qipcrtr={0x2a, 0xffffffff, 0x3fff}, @nfc={0x27, 0x1, 0x2, 0x4}, @xdp={0x2c, 0x13, 0x0, 0x25}, 0x6, 0x0, 0x0, 0x0, 0x9129, &(0x7f0000000080)='netpci0\x00', 0x1ff, 0x800, 0x8000}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x64, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x7f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4082) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000003f000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c40000000000000000000180000"], 0x0, 0x0, 0x0}) 20:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000060000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x80) read$dsp(r1, &(0x7f0000000100)=""/82, 0x52) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={0x0, 0x3}, 0x202a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:43:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000ffffff9e000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1672.346855][ T7225] overlayfs: unrecognized mount option "Af[lY1mqD/" or missing value [ 1672.424733][ T7233] overlayfs: unrecognized mount option "Af[lY1mqD/" or missing value 20:43:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:43:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000006d5000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:56 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup3(r3, r4, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xb, &(0x7f0000000540)=[r2, r1, r3], 0x3}, 0x8000) r5 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x410402, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './bus', [{0x20, '@-'}, {0x20, '/dev/vmci\x00'}, {0x20, '@\"&'}, {}, {0x20, '+.\\@\\$\x1f$:'}], 0xa, "72d6818a1cc96fb696c2390fe0b1b17bdff22a82306fa68cdd2ac820f7c4b749ec1fc1ded09e5b1832ceb2a92aaad8163f8f920cea1b1cb04f5c5c493240d47a7189c352bfc166f5773a541d454c547dd4960c62af651f3ccc1e9029995f2442a911f963e772fb69013b50c4cef33801f53e2b2360430d937cb0c5c646e3d54031c38ebe201a606d1242223220b20bf914591b80253406606a5c45e7a948d9f4dd9af12735ad8fe0bff9d8e20aed3e29af4b893ea38571768609d12b67e582e11b2ce3254767aad697d0a24a2d927d"}, 0xf5) socket$inet(0x2, 0x0, 0xc0) mmap(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x8, 0x80010, r1, 0xaee25000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r7 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = openat$incfs(r6, &(0x7f00000003c0)='.log\x00', 0x6000, 0x18) ioctl$IOCTL_VMCI_SET_NOTIFY(r8, 0x7cb, &(0x7f0000000200)={0x9, 0xe63, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000fffffff0000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c400000000000000000000000008800dcb16beaf765e22d65ea5fa4926ffe00f9dea16e2a5c5a"], 0x0, 0x0, 0x0}) 20:43:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80141, 0x1, 0xc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000280)={0xac, r4, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @NL80211_ATTR_FRAME={0x7d, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @from_mac=@broadcast, {0x8, 0x63}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x46, @not_ext={{0x0, 0x1}, 0x1f, 0x3, 0x80, @device_b, 0xffffff80, "", 0x0, 0x7f, 0x4, [{{}, @device_a, 0x5}, {{0x0, 0x0, 0x1}, @device_b, 0x2ce3}, {{}, @device_b, 0x80000100}, {{0x1, 0x0, 0x1}, @device_b, 0x7f}]}}, @void, @void, @val={0x7e, 0x15, {{0x1, 0x6f}, 0x4, 0x99, @device_a, 0x2, 0x3, 0x6}}}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xac}}, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r6 = openat(r5, &(0x7f0000000040)='./file0\x00', 0x0, 0x13) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, r4, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x7d}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x8060}, 0x4000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r4, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x94, r4, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1a}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x440c0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000f0ffff000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=[@request_death], 0x26, 0x0, 0x0}) [ 1673.174915][ T7263] binder: 7260:7263 ioctl c0306201 20000040 returned -14 20:43:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900007fffffff000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="018000000000100000001700000004000680"], 0x18}}, 0x0) [ 1673.234273][ T7268] binder: 7260:7268 ioctl c0306201 20000040 returned -14 [ 1673.325465][ T7247] overlayfs: filesystem on './bus' not supported as upperdir 20:43:57 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b64697260f56ab70d7923d46e3d2e2f66696c65312c6c6f7765726469723d2ec22fb2cb"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0xc, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, @alu={0x4, 0x0, 0x7, 0xb, 0x3, 0x6, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @map={0x18, 0x7}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ldst={0x0, 0x1, 0x0, 0xb, 0x7, 0xffffffffffffffe0}, @alu={0x3, 0x0, 0x1, 0x2, 0xb, 0x0, 0x1}, @jmp={0x5, 0x0, 0x1, 0x5, 0x9, 0x10, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x9, 0xb, 0xa, 0x20, 0x10}], &(0x7f0000000180)='GPL\x00', 0x1, 0x45, &(0x7f00000001c0)=""/69, 0x41000, 0x8, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x1, 0x10001, 0xf8}, 0x10, 0x0, r3}, 0x74) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900009effffff000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x2c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0x4c, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_ACT={0x34, 0x7, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0xffffffffffffff08}, {0xc}, {0xc}}}]}]}}]}, 0x78}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) [ 1673.393452][ T7283] __nla_validate_parse: 6 callbacks suppressed [ 1673.393474][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000f0ffffff000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1673.452292][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1673.473523][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 20:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 1673.519829][ T7290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1673.532256][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1673.543374][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. 20:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000180)=ANY=[@ANYBLOB="bbd59d7247a360614ede50bc41409f66c994e6171fc3c24701076554830be854d9d6b5887c353bb9a5e7852ee40722732ac2e028399cfa07c48aa5662ed2224ab687d44e32b009e0779f79dd7bcfcb1fcd9fac73a4ea04a9a633d72b07cfa91d272a017a1ca1", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680", @ANYBLOB="17ccea1b95b5eb215c91ea7bbe8c9e829fd0524e6ef2beb0f5e5abb2f1bfbfc2df8a58dd32d8e53b50f2cbd4a3145dde164647af8c7dd53d379dba6170bef31bff9a2b7c55313337f7c13cee4b6174c70ee009678c4db0f6c6a13bcd2ff87f5fef2f5c012c0bd9c8dadce0fb14109191cee010f39814c9a16fa41a735a68457ab0a71286a66cc95cc48017f46c6bcdc15f24750f772aec27444c5a22d77acf9f74c57133a590db"], 0x18}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000003000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1673.661532][ T7291] overlayfs: unrecognized mount option "workdir`jy#n=./file1" or missing value [ 1673.763631][ T7301] overlayfs: unrecognized mount option "workdir`jy#n=./file1" or missing value 20:43:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000080), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f00000001c0)=""/143, 0x8f}, {&(0x7f0000000280)=""/88, 0x58}], 0x4, &(0x7f0000000340)=[@cred={{0x18}}], 0x18}, 0x40000100) 20:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r5, @ANYBLOB="01840000000000001400350073797a5f74756e000000000000000000"], 0x34}}, 0x0) connect$can_j1939(r3, &(0x7f0000000580)={0x1d, r5, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@setlink={0x64, 0x13, 0x200, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x40, 0x48}, [@IFLA_IFALIAS={0x14, 0x14, 'ip6erspan0\x00'}, @IFLA_MAP={0x20, 0xe, {0x5, 0xffff, 0x9, 0x7, 0x1, 0x6}}, @IFLA_LINK={0x8}, @IFLA_TARGET_NETNSID={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x20040) 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000340000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:57 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = getpgid(0xffffffffffffffff) r1 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r1, 0x0, 0x21}, 0x10000, 0x7d, 0x0, 0x10000, r0, 0x0, 0xffff}) syz_mount_image$omfs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x4, 0x5, &(0x7f0000000480)=[{&(0x7f0000000140)="2b6d73ecfa864455d1d7d19f6768e60b10a5aa50c08a6ab50cc1e8e96d1a544e62b3a957d2e06dcf96259a05c24ec723d66625c7f6ef903448f5e94f3fc668b7b473", 0x42, 0x1ff}, {&(0x7f00000003c0)="1c84be4786be287b0def3eb4d415dfd91160f6c39526dd5469068bf922b90842ad438be8d90858d0e04827ec3ce2d6aa167fd890da1aba234194390c22a2ee6beafd83b39fa51e2ec8bc794879dc3911722b698c52ef128c3ca2431340bd20bc3bbb73e4dd2e07fa6e6e1f041c907578ad7ad32a1ba86b251ac93987b71e8f7c9414457e16fcc741d8c22b6fc3b07258ca4fa492fb98f8007934f892db0c3756", 0xa0, 0x7ff}, {&(0x7f00000001c0)="1390a565b4be523558de0259428a21d1547ca7208436d38dfcfa50a79d3a21f1322142f863f7e8bae67e68bdd0407b99c23944324930838a566ce07456836af63062d47ee165408c952a0c80da975d29a59385aad1c27daa14f4f6e63905b7fb347689", 0x63, 0x9}, {&(0x7f0000000500)="86e8322a1b29b904bbeb9958ba6ac4f627ff7de1559fef99baa3581882f8fb206b7e2f5405920d7d443d2e8fb0e02fe21690be63c0818c0b516afc06e55357086efce1cd253f59a4c282d8ff3818a608a513597b045d06b59d286377582139ad7199a2f0840354cf31d224cf2ac78d58b4c0405df292413d2375321a8eaa00d4b216fa9316e91db9b71b1abc001067f600f04d9ddad08bfcd5da81f81aed010b5e30", 0xa2, 0x2}, {&(0x7f00000005c0)="c87b15d0ad5a8e81bdaee151d283e17abe42c5c136b4d14f0794024df3c229faaa96915dd18e54f1ecd06b368ba52dfb73e515caac430fccd5de0e90e41904d0e8c27bd169e44be1892dd6fb5988c21714b4fd23f8de0d362254acf1b18179cc5baf056a0ac2aeae968ddc7adbb324bac7ad82422784184589b22639277f5c6950c8f21e4446c34342e5551cfc829eb28c3218deefa6989acb041f4158856fd857559c2269119f8e", 0xa8, 0xa538}], 0x2a31008, &(0x7f0000000680)=ANY=[@ANYBLOB='[@&*]{,\x00,}#,,\x00,.,overlay\x00,uid>', @ANYRESDEC=0xee01, @ANYBLOB=',uid<', @ANYRESDEC=r1, @ANYBLOB=',fsname=/dev/vmci\x00,fTH_CHECK,\x00']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0x9}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r2 = getpgid(0xffffffffffffffff) r3 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r3, 0x0, 0x21}, 0x10000, 0x7d, 0x0, 0x10000, r2, 0x0, 0xffff}) r4 = getpgid(0xffffffffffffffff) r5 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r5, 0x0, 0x21}, 0x10000, 0x7d, 0x0, 0x10000, r4, 0x0, 0xffff}) syz_mount_image$ocfs2(&(0x7f0000000700), &(0x7f0000000740)='./bus\x00', 0x5, 0x1, &(0x7f0000000880)=[{&(0x7f0000000780)="1074763cc3b54c05319b5f2b538d9994704d07ff6810851db2346df99badb89142ebae2b7e8387675f1f92bd6c30b5890304c4be2c9ec5c66a22e707d82a3a8cc244da1971436c1d3befbf16e73737f6e0ae9bcf57a575d077a0132744d3c46ddbe9b12df5252272636b6cef3d8fc8fb3b38f1fb9d0663ec9afb748ff51db456fac3f18f177491a96ef1184e90d47e2da1a86e7c77425c0b94bea2ba5cb65adf678d728919395d63d9cd4beaaafb65140463a7f64c760934f13806e78133c25da378e20765645f623e4a5faafdf1a35cb9b9316a816daceeb5dd88f4f3e57b3d81", 0xe1, 0x1}], 0x4, &(0x7f00000008c0)={[{'omfs\x00'}], [{@uid_eq={'uid', 0x3d, r3}}, {@uid_lt={'uid<', r1}}, {@smackfstransmute={'smackfstransmute', 0x3d, '(\xc5)#'}}, {@uid_lt={'uid<', r5}}, {@context={'context', 0x3d, 'root'}}, {@smackfsroot}, {@fsmagic}, {@audit}]}) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r6 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000004c0)={@host}) [ 1673.860708][ T7315] loop1: detected capacity change from 0 to 165 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000fffffffffffff0000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000010000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x400080) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r6, @ANYBLOB="01840000000000001400350073797a5f74756e000000000000000000"], 0x34}}, 0x0) connect$can_j1939(r4, &(0x7f0000000580)={0x1d, r6, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001540)={&(0x7f0000000100)={0x142c, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1154, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&$\'+X\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xfc, 0x5, "9e5b751f84f79e1e02ae022ce95e91f4e1cbee828915b407bcd11ac99c09829b84ab087188a02254993fb23d018447b9770e71cbc783c2880de1d46ee1c51f51a3cddb8a4fb31d399edab967902e291279fd25b6ef659a2a61a16398870032c2d139043d52aadf1969dd655f2b526e527fb057a93c7146a8421887ca4714fe79ee3f6a881b3e74f25e516493e46c9ae019030db8d0d51618644750948b76174456a5b94274ad90d6a6a10fd973b8ca395d2ccade5041103f5656ec17f49c74df492dd3eba356996f71639382b7d8dcafbc748fa8f74d0743d726bcf41e4001ff590c3c4ce717281a83535abce318dbddd9ba11afdf49faec"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x244, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*}-*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xea}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+%(]-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '-$!![+#,\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f16c321}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff8a}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}!-/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c1a}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'TIPCv2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x6a, 0x4, "34e98f87be1f5bfbe49504a7650fdf27988cbd2fc067fd95621a4ecdfdacf29e501ebde5e2a0b41bf9d9bd0776cae9026baae67a024b40fdc898bf3570e8ade4fa0ead645a7952e5aee02d84df9d2e8b2d9fecf143d783b6844fa5edac9233e9f49296fb606f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x142c}, 0x1, 0x0, 0x0, 0x800}, 0x4008044) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 1674.041273][ T7331] (syz-executor.1,7331,2):ocfs2_parse_options:1463 ERROR: Unrecognized mount option "omfs" or missing value [ 1674.053234][ T7331] (syz-executor.1,7331,2):ocfs2_fill_super:1186 ERROR: status = -22 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000020000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:43:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000030000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x428c4}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 1674.638256][ T7326] loop1: detected capacity change from 0 to 165 [ 1674.639694][ T7331] overlayfs: filesystem on './bus' not supported as upperdir [ 1674.695424][ T7331] (syz-executor.1,7331,1):ocfs2_parse_options:1463 ERROR: Unrecognized mount option "omfs" or missing value [ 1674.712224][ T7331] (syz-executor.1,7331,1):ocfs2_fill_super:1186 ERROR: status = -22 20:43:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000040000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x60, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a62730a00000002000000000000000000000000000000852a6873000000000300"/60], &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1000}], 0x30, 0x0, &(0x7f0000000140)="57e9579f43eceb2fad07f0ff82a53c6d736d08eba98a1fefe835c05417667dcf261b7eef505d332247a338b9caa7045d"}) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000000c0)={0x1}, 0x8) close(r1) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f00000002c0)=0x6, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000300)={0x5, 0x2fd0, 0x5, 0x14, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e632b1c4000"/16], 0x0, 0x0, 0x0}) 20:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000012", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:43:58 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) io_uring_enter(r0, 0x343, 0xf31d, 0x1, &(0x7f0000000000)={[0x2, 0x200]}, 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) [ 1674.837663][ T7354] binder: 7351:7354 ioctl 801c581f 20000300 returned -22 20:43:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000050000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680897afa11247c0fa6d4b9f025e477b1983b6cd4f1e5e657b842491a724cbbc2009eef6412f0c07d78378b2bdea18f3446cea0073d692489afadaadfa7227ac8d00eb0717d0387005fa89e5ed2b4e6c6d48b5eeceed3eed814ad60c815ee4fe0907f3a661c5a1becfdee14b22b5e55e4974ccbf1a68fcbee0b10f08e40459ffbde6aed9682dd6fa3540a8301125137c508c361adeaa61dfebc909444d121b4389f57d5bb68ab7bec29d426c244eb1e17464f6e34743ea5bbe9ba7a215cce03c3949e5e4a5b6bbc9fe19fd1d85d4be2a98c7271"], 0x18}}, 0x0) [ 1674.917074][ T7354] binder: 7351:7354 ioctl 801c581f 20000300 returned -22 20:43:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000060000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80000, 0x8) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x24}, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:43:58 executing program 0: getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0x200) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000e92838543ae73f98464171e2e073a6f76f311197e33d8a0160ad8ab887511f8a7c26ab4873732f84c65ec567437613220231281964176df14c29629aa33777abe27837e0ca0f54f52002b16d7a0fb2999be4433deee6e9cb6745a551d98ee5895cee70749645c6e829a6c0fe5e689fddaa49698b983b006249c2ba506ab1102065a9ab93e207b9f6", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:43:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000070000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1675.755957][ T7361] overlayfs: filesystem on './bus' not supported as upperdir 20:43:59 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upp,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:43:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000080000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x3, 0x0, 0x20}, @flat=@weak_handle={0x77682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/192, 0xc0, 0x1, 0x5}}, &(0x7f0000000140)={0x0, 0x1c, 0x34}}, 0x40}, @free_buffer={0x40086303, r2}], 0xd, 0x0, &(0x7f00000002c0)="ceafe50ec5a1f549d651e190cc"}) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/160, 0x27}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f0000000500)=""/39, 0x30}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0}}}, @cred={{0x18}}, @cred={{0x18}}], 0x11}, 0x122) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d8, r1, 0x2, 0x70bd28, 0x4, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x74a4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8000, @empty, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x518c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x783f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 20:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002abd7000ffdbdf250800000038000580080001007564700008000100657468002400028008001e0050000000080003000800000008000300ff0700000800030005000000576e418547b5ecbef191ab1b4519cfc1dc6f93d6d9288269aedd3bcdea8f3f2a66e6fe2773fd630c611a0560888ca4665587820200ae35c5cb6582b7a577afa76aa931ee3c5d4d8bfa55b522ae6fa2e6b76eab518ffe1cb543e151fe54b48cb63aa37685adbbc9a449769d1fe1e531cb85a56113dec519"], 0x4c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000005c0)={&(0x7f0000000080), 0xc, &(0x7f0000000580)={&(0x7f0000000280)={0x2c8, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x2b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xdd, 0x3, "651aea6069cb1d1a2bbd44e06b21c57545d465bf7c561fa11435ea2f60284a59961c2f61eb7a29b77f0c09502be2825fc8dece6a01e5947e76474180dacc9678646403e9d22bfd9a2333e4dc5cc22889f4eea405fc998436df08d31e8c987f0388c2b903b5b32bcee9f9a1ccc4dc4614342e1149636facf19ac1d24927b952afb5c1893f79010ef434159175ef30a812867146199b7d017da422730994d44e62dc99325ac7e2853e0c70065d1c21691e1ac8d48a49a08dd9aa0c2a2046bf77fdfeac0ebbf61efc24a3a539a09281ba33df92b78624ab163a6a"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "263eb83f4e6d56b648671509fa2c1a40215c8833"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "2cb241ba2ad173f68b149db90712437a9cecb121ea26d5bc"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "a454edf74fd746ac1cbcb0e3f0e14fa27c95e576138af06c4308865558"}}, @TIPC_NLA_NODE_ID={0xff, 0x3, "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"}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x60000}, 0x4000040) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:43:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000090000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000180)={0xb0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb198}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbff}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff1c}]}]}, 0xb0}}, 0x0) 20:43:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e670c4000001e0000000000ba887b70349a07c2646bd64648a2289144f2fd4f99660504a9729d95e636569596e5ac04010b8764d512ddc8025d3c1688fc9e8b4eabc7ffd3def5ced644436d04f079bb410e225a03657fa435fb1d610e8d67cdda459979f879d6522d541d035cd150cfbf5de406ea373b48400af9b855604fc20e2ac89826e0232fa17c02144b11775bf641997f1fcdb7c40627d5dda0d0f26251910ae253511211c0bcb8528550cee8"], 0x0, 0x0, 0x0}) [ 1676.035747][ T7408] binder: 7406:7408 unknown command 1074554638 [ 1676.044186][ T7408] binder: 7406:7408 ioctl c0306201 20000040 returned -22 [ 1676.061657][ T7402] overlayfs: unrecognized mount option "upp" or missing value [ 1676.085062][ T7413] binder: 7406:7413 unknown command 1074554638 [ 1676.093859][ T7413] binder: 7406:7413 ioctl c0306201 20000040 returned -22 [ 1676.197737][ T7411] overlayfs: unrecognized mount option "upp" or missing value 20:43:59 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) mount$bpf(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x100000000}}, {@mode={'mode', 0x3d, 0x2}}], [{@uid_eq={'uid', 0x3d, 0xee01}}, {@appraise}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fowner_lt={'fowner<', 0xee00}}]}) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) open(&(0x7f0000000000)='./file1\x00', 0x400, 0x80) creat(&(0x7f00000001c0)='./bus\x00', 0x10) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) open$dir(&(0x7f0000000180)='./file1\x00', 0x101000, 0x0) 20:43:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000e0000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:43:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) sendmsg$FOU_CMD_GET(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private1}]}, 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x5) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000000001765000004000680000000e9ca98c58a1aee73ef376f4e1c41fbe76b2238fec1b84b690d32a33c23a9294ebebc4772409a8dd63602bb542ed7c7af1bf84461e3cf6923ab6fb6cdfce03086adef4a"], 0x18}}, 0x0) r4 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x42000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000440)={0x278, r7, 0x1, 0x0, 0x8, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @NL80211_ATTR_FRAME={0x23, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="ecd935f82c0d", {0x8, 0x63}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0xb9, 0x9}}, @void, @void}}}}, @NL80211_ATTR_FRAME={0x22a, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @initial, {0x9, 0x2}}, @ver_80211n={0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x5f, @val={0x10, 0x1, 0xc7}, [{0xdd, 0xdc, "5ab48cd92e2e777dba490c6a42715f5eee9336a22c4a2116d6be07598b48c346110126a830173a2d63c4ac2f43afb1b28ec642349754d686a543e68cddceee7416fa92abe2caae3c6a33ece7d61e94b974b55401d99b6f57372f201ad41260e89abefd4024c0cfd70c84a6da5ed2729a25885d9d3789bdb4a9b10b67a725de765be4a0106331a415c0799c5ad7b5d1d72a9b428968c42dd3ad2ef68b856888f10ff54107b14f5464938156f3d1c38ef31fa6b6b20c39f3e0834fe74ec66f1b5ed7e93e0e387852e0440bfec51b01a79fadb5cece70c8408592eb840f"}, {0xdd, 0x8d, "918932f269ed2bba61ef1c1d9164f2391e78b76ed8f926952cdaae520185ceba7dd850b0eaea3cb005bd39e42797a0c8e501f8734b0fceecca88a638383d44b10c4256bf6494f53503917f480f243873ba670fd3eed2f881a456686772f3d9d3cbba85393259a14ad3984cae97dd9a43ab6b1f85d017910100d9f8e6151f9935b6cfa0d0651b7b3d364061c2ff"}, {0xdd, 0x92, "40297ca2c931a7dab6852de4f4e7a8671b0b56ecb5558a5edff23de4216902186745b670fb19b2ad99e98314af0ff4f4ba86461cad60754f931a5b9f10c013ca62fb40bc7d5db720e73980e448b3d943145db58f3493111f805092d3420f7382fc5b01753f8740b39299618c0417254dca53b1d49ef551feb72f05b21af5f3986c1c3c281861e97c83dd29ccb192bb2fdc49"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x278}}, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa300a430}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd2b, 0x800, {{}, {@void, @void, @val={0xc, 0x99, {0x800, 0x43}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x69}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 20:43:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x6, 0x6, 0x1f, 0x0, 0x3, 0x2000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x6, 0x2}, 0x10000, 0xe78, 0x1, 0x1, 0x6, 0x3ff, 0x7fff, 0x0, 0x7fff, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0x3) 20:44:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000f0000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000001480)={0x240, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaed}]}, @TIPC_NLA_BEARER={0x8e344ce9f5326452, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}]}, @TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x36, 0x3, "67d664e0f1e118b694afd4d9848918e6c14e32aec12c643d79e133a3f814f6f3e2e0a789f05e6e450c33d6d0750b96e0fff7"}, @TIPC_NLA_NODE_ID={0x0, 0x3, "f57a9cc0cc43d4b8ea0fecf682cc966eb8be2e4b36c283855aa8219254b8ae6c3daa9eecd1029ca054dd25f742b733a073eba98e8069fba79738dafd5313f2323cc59e61b48b7eb7066acd8bef75be44d837995a28ef3b95c38632d5b7c1072b9a01eedb752d9d5325bb3fc13cfcd9e398e29e4f44c88818af0e79e50b62772dc76fbf4d2e93100e81c1c462c55e38f513ca03e73338c7bf0c79df5a9b2aa239664198541be9b6edfecfe21edf1bf823a0f4"}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9505}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8ce}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0x6, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x0, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8be0}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff0001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r5 = accept4$inet(r2, 0x0, &(0x7f0000000300), 0x80000) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, &(0x7f0000000480)={{r3}, "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"}) 20:44:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000003f0000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1676.460782][ T7436] bpf: Bad value for 'mode' 20:44:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x80000000}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x40000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x61) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000001940)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0/file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001900), r4) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000015c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001980)={0x1354, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x11c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5629}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3f, @mcast1, 0xeee}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @empty, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0xb4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "21e53504033f53d23d070c72d0799e0bf28605e5a218"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "7faaf7cdedf26289d08b88d772ebeab25a555bdb3e1cf2bb0a"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x10b8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ID={0x53, 0x3, "117ba45e302443923209892ccfc28838e72799c790efe995da217260950b82dba9694dedfcb74a7090fb143656405164936eb7c5f85f7ccde57832531d93df3bac7b0dec428db79d1724e3b7fddd43"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7a72ea3b8f67f9049fc6360fe918d9bdb9b79a386e73"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc87}]}, @TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x1354}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000001600)=ANY=[@ANYBLOB="1800000074870cb42c42b81ecf2cd55b459fc5798e666d4c0fff0f0000000000008a156d129764fdcda5850bebfadd1bf2bb87413124edc86b8a6edd9b5e1b0180000000000000dba5be88c69eca6186e04be4a23ba355fd9920c3de2bdc91885dd241a9366311cb0447c831237df10d2ddac4f03cf705e67afce463a1d1465f3ffa3228187d7bbe556080f9ff784881f4cb2bf8d4c7a42d46e326589005e40489bc18a8bab8bbdd3c97f8dd697ae04bf2038471efa85cccf3472620b841503791ebf09085932230b3b7168bba69a91e958910ecc98572a149ea7641890da8b8f85dce5307f19c33a3910056478eaf3ef161edef57d84a26dc40f05fe4b08a3aae30ef949985c5e6c2e899c3d466406360e3254b6c5de716653f717af10ed58631e6fb91046c5d3f543e7429d634bb7a9b1755eb1f38e9eb61378f319059bdbbbb78e9f450d000"/336, @ANYRES16=r2, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) [ 1677.157659][ T7426] overlayfs: filesystem on './bus' not supported as upperdir [ 1677.243497][ T7433] bpf: Bad value for 'mode' 20:44:00 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75703d2e2f6275732c776f726b6469723d2e0f66696c65312c6c6f7765726469723d2e"]) socket$inet(0x2, 0x0, 0xc0) open(&(0x7f0000000000)='./bus\x00', 0x18080, 0x28) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000600000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendto$inet(r2, &(0x7f00000001c0)="6663afb83097d7c93faf23276c80e0fc264fc9a5c2f693fd6697", 0x1a, 0x40010, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r6, @ANYBLOB="01840000000000001400350073797a5f74756e000000000000000000"], 0x34}}, 0x0) connect$can_j1939(r4, &(0x7f0000000580)={0x1d, r6, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000880) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000ffffff9e0000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0100000000001700000004000680"], 0x18}}, 0x0) [ 1677.377098][ T7458] overlayfs: unrecognized mount option "up=./bus" or missing value 20:44:01 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000006d50000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1677.487257][ T7471] overlayfs: unrecognized mount option "up=./bus" or missing value 20:44:01 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002880)={'wlan1\x00'}) syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0xd2, 0x2196a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x96}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000028c0)=ANY=[@ANYBLOB="75707065726469723d2e2f996c6531e109000000000000723d2ecb23d6224b816ea976c185e55ed32355c5f95cd257a7d937fbd2e7a52d003883f2602e86e81f534b07000000000000001fcf7796e9881b82085acf36e4d09e10ea72ecb8d846e06f4f763fe2cfb183b5abc5b651292ba68da8142ad905fd8bd73faf68651886971ea8d5c8fed4e35dff5e82c092048bfbdc94afb4dc71e946ad60a3ee94baadf13a24163cf649d47e72edee017b91f1dcd960012f14aec7f6822eb4a0d01185a671863ac1a6464bfadcea5dca23d23248320d56f7c1c6d7de9e864243adca43d8df6c6bd6d000553151d3d1d0aa246c2e741ff257c3cbc61c7fc64b4d3f3e6bcf23dd05074fc347759c0a8250e6cffb37f70f68e9fa88ccc979cd10276c44736e0de2c5c3e34f646182aac3d7befd1148265ed285b2e8999d70ba"]) r1 = inotify_init1(0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x11, r1, 0x752c7000) socket$inet(0x2, 0x0, 0xc0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) sendmsg(r2, &(0x7f0000002840)={&(0x7f0000000100)=@l2={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x400, 0x2}, 0x80, &(0x7f0000001740)=[{&(0x7f00000003c0)="a56aae6b99806767b7fbfe33501cc297ef403c639532328f37706286b0e331d0bea5893e7dc18dc62de84948a241b75278283d406f19069095ac098af4bcaa6054204ca4a9bfc42f6abd0aa1cb1c9220c6fc0f8ca3fea3ad2f6f8fbf94f99760411908cbd5b79f19a18769ea697b88ab491240066c66b54d832bb873525540c32fcd73fff15b0f9e6d49293da1c4c1382980de338263a5f209cbf07d07226f2c609c5bc86fd3cdb80ff39a90283ec1b6d4fd1e3c3c8aad5e8a42f0a8cb7153eff11f0f2cc80161c92d999665be982504c07010f51cbc1e11c35321224e30", 0xde}, {&(0x7f0000000500)="f2044ab7fa5a8d3df3d2b177f653e1f233f50866e068859f3e2dd70441fb9dcc409896d4ab4eed79c60878ad73775eb0efdcd3dba6f0b9e89a8d9bf73eb59a26c4200c090d7f4bb73b43002ebfd5ef368862dc85154ec1865cd14393189f67cf3a989653a6610aa3dcc77b78303deeff473a37c60da3c1e686c9335be75f8cbc52bc35120d588e8977d3162624a29a396a29f15aadaa3725616dd20ef36bead55ac6ceee7de54418226979e0ed59c8e66b5d49c783a980c05d6e6b1399462e1b5396509e5690827f96f8303dab864dd97818324f119eeec14ded2eee28acd6ac02b799a9c46fed7f92f8ac14718ada542f97f1c649dbeeae20", 0xf9}, {&(0x7f0000000180)="0a7c1e52f192e46144ad0361fb51a57639f271d43b86a45a321c625da4bec7ead0823230359ba822f2ff1c44559ce2de6d94567a304fb1054eca90bcd6b0f2c276dbaead9fab8a51cc4f14107d95860e3b1f42e82d9551ccc50c88fae3067dfe09be3899324f83f0a4193930d66723b60fb6375a865eb7fb4e4027dd3fe8f45f47", 0x81}, {}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="81135a310558ceae611374cdc7d04f0cf4a4d1aa1ef9fb06b9f9a0b643375bf4746c2e911b7875ead9cdc75b8df873a452b0d8d51c98bcef08801cb42d5ed26bf9d8dec0b53c8a14e30213c589a3c891b3d023addecd3cc90efd02cc8a3cff3fbea8ba751e30fbd98d3c72ed21ae40f9ce58ca3b3fc2451505ea8e6a88bc9f850a2be575277a1d6a63d5f9ef72a4853a2703b06ebfd6f1096f6121fb7948f0171194b2b0affb8bab88d9c2fa8c9b1003bc802239638fda8c60b28ed7470f9156ca8ffebc029b909a650de6a880c889b67341b3818823a78953b8adc8384335367b1f7bf963e0b4e91e", 0xe9}, {&(0x7f0000001700)="70cef94acb565c2c88245ec29bd98c8edc4b13fd50a2cbc8dcf22626cca85c7d9310898c", 0x24}], 0x7, &(0x7f0000001780)=[{0x84, 0x108, 0x10001, "56b86274eacd49ce5d0e83f7b0620f2a9c552f159617cad8b363fc7319843796755defbeeacbbc69cd8e2a2e24b655a30424fb7e76469aaf6a1c22818c379b837e815fa45ed3a9a7b402ad7fc5e9dc6b010c135ec12d12b0c3b8dbd9bcc07658970d607e0eca19a92d6474a97176c53d0fb7ac1600"}, {0x100c, 0x110, 0x7fffffff, "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"}], 0x1090}, 0x14) r3 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6c}, @val={0x8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000021}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1000, 0xc}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x51}, 0x4008041) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="2b36892d14c257a92350e85e64cea2cca2d3bfabbfb22bd642a2287223882a07adddbaf02ebe342e80f50a8fcebb81c2c1456e1bb6bd2b305abef2b891a679ed00ad0b59aa42da9eb6d1ce", @ANYRES16=r2, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000fffffff00000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x10002, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) [ 1677.583666][ T7481] overlayfs: missing 'lowerdir' 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000007fffffff0000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4845}, 0x40000) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x2, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 1677.662804][ T7490] overlayfs: missing 'lowerdir' 20:44:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c400000000000bfe9c11cf39892"], 0x0, 0x0, 0x0}) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000f0ffffffffffff0000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000008, 0x4010, 0xffffffffffffffff, 0x8000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000080)=""/13) r4 = dup3(r2, r3, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x7, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000020000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000030000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000040000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000050000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, 0x1}], 0x1000, 0x0, &(0x7f0000000440)="9d446f93869229e5f15ff5731929e29d0098584e8467f464d972d7f7fbd81b498df6b62ec4c530cd934812cae0cabc57d00f2dff12d73f3d55ae7d9911a00c9142d41dd637415c2a86cf75bbfb5db03d2ac86a157ac2e975191d739e995e7a7a23ab7ba6f7f648a4a667508e288d53e977f0e93cd5c0f50b669c18dce17e1f20c9bfa3b0452b5ef5b80a4ea61df309a83b286bcc41a33bbfd02fd022017b07938a0edcae03340a78744dbaaa0ecface9fc78480210734f30e153a9cfc58ca45e8f58b8cdfb95ea0ab14700e7466919b22a6d56b3586644ceaa985d4a72681076d9aa71981f508ea7dfe084c2ce1a903a8b0b8949f59e0a261e9e01cd1234732d596af9478c74e31f74e640f02750de96f9662c68119426af7f99aa3ce12fec909ae6867a3218a25421ae173d71cc02ddd13bd6e4111327b3d0e770ac9aea12a7d11807087b51acbb1ad5c38c59bdd27aba8dd2d5afa7873d0673246fe9f6caa66de708de0c8f02f6480d6fd91c4d063adabcd95a2ac088852f0d71076cb65b06d95f7ac4dd86c7f9c101dad9f3a4e9aff932f2f393b4702048190246d7b7e8d5f5ef949f4ee9e21399f4d0b5c629705ef12caa01a6d81c14e4fc8a10c2af0693d980f8a7a959ccc181240f46cbb6b4e7ff2b52d2b47757b3c0d84625382a9d1a48190e29fdb5e4e294ea47863ef332639a352855d4af39eac7778de9abac7d9f88b40b0daa2a2b488eaa825110e993a7e3959bda3791e33bbfab3dbfe0956e3ae6331f7f3ccb0e3a582852fb0d8e8c791f9ca4a5daf0d0cb130a7034310a5f9990711bf643950c7bd1acd3799744cf7e4f87c1afb908e3241f608972a3dccd70be2a215967d98d789cfce63e98cc94cb3fc5358d4600f3db691f056ab23896933191ea9d205b8e1bcd41d751d2280e2b16075f8d9b1dc31da83e9bec7a00362b8316092a35f0def6f0bdd5fea487f4129e5f050e62385ffc310d926a1440a494096cd2a2f7ee7cc37b348bb29d16987e84c3bdcd689f65325d9901f1c4ead67da6a2db98fd136c10be0e7f641942d3d942b3e650cd3874b411650d49014586bc7276e32b8adf28ae3781219bb958957918d0b71b81f95b0d9c377a48deb44822009c62976f219b9583bf928428f94899a73de778e5819ab8d3b572c5631e0465239035c3f66998b0ab97cd3f4ec145eaa51abb11954dbb2b1ad37ae5ad0b7129e848cf4e239c28570b6050b0c38173c7d6ea9332ee8d880c114739c86d855d2eb1c64068a5e855158a805c7736b41568cf0876fcb1470e5f033eed713ce4d0df431e0fdade48d8ddf36bcaf5a94c7af1b956ebb8d1bc2de56a152dbef46f2d62faa73e119d642ea709a0e6afb71a7b7e50e2c7fc628074abd0ed3cf769f81c72ddfe889a532f9826343773f496ae9ad0b098966e4d6d33b529c155561b0118c8c8d6533539af4c0ea9e11bd37272a477e81c788a04a6f30caac292e44ac0eb6ff9107860754dbadc32ab7e46fe929b474e536e160fc7d55c6ec9e4cbaec61491b2b566e42ec9632ea31a3cb1b895819f9a4be50a732f535f27398179ebcc60ce9fb028653cc1964ad69c248acf41b355be842307df07d7e702491f304631bb5afaf669d0fefcc8e13564434656fafe7ccb566b1a5976b46920fbb48d81964ea6daebffb991bec3e00cd7b785b60b631f6705cdc9e3c16df83d7cdd6dd277bc381bdaaf52915f35c9e25154c68a883a6c2830358412913f97c70e0a99e74eaead103a80e757f19c42eca73f0e20772333793d8b23b8174d4065cf24edf4ccda1de6b9c3cc5e2c642373febffade1014b627cde5b56d99ab7d1b3c4c30141606ade3bbbe7078806a6f4136742ffae33e6f33b6dde0ffdb801876339d4331d51042ea29eb6b2a7cd7946bed2dfd0e819f57449906331da37e7594b1643ef73e51f3167e7770e99bde8ae149d43ad18145789f56ccaa5f97ce328250e5033f1764b3f1211c93287b9c5ba695cd472a8fca6397e16e4e5198b59b97a829a7645b60210c001a6183f1266001ee3a034fc780f3c095fd94064de9ddb386bd659127354c683753f1650b1978588e2da1ef453e9323af0d9de01a6c47111b19c24be8b7eb326898db6d68a7ca172485414dfcb67db58636312e66519f80da197bf3f157675189186a6c90f541ac30c4ce3a6ebe9473d27295898c11cf39a0bdb4690b720e5e66df83199b40b51d02eb034a90955790aab721f0ed2c3a5d7e2dde2817551c6ebb5131109802b450ea2833f1cba5c1da819838d95d310155c04448ff274a682e97cf3fe369b12856af85d7b19bb63a108e087b17dda7894d732d1ffabdf03f8917b742f71a7301de0096e496db5fb2065f382b5afed70a248b617c0e3e207d18fec59c18b5c758b6d35ae23de6fbfb6cf20a8d91d7514e99826725cfaf9520a4e9fb39569d97bf7ad8118ca6447cf4d08b3e32f83df31cc277bf73d2aa9f39898d7f0b9aa8fca1ac546270bc4a6482429e82f25121d1c7c5ccb207d79ba29169b53fc7f0f1465d773760cf875710bf6d1e52fb2cd98933bd899e9745f7a7d96e232504f4be56f4208d67483da3789a3e93eaf215593307c3289bd252f93da69111910f138c2f19e19c8d4e564c4acf59fade09495ed9678474d71cffcbe88c7a9e4df6643d81a4ff14ba225913dd7235134c3cd98fe7cc64a2df99eeb84999f5cefe81fb814ce9bfc2a32702382c23f667f8b61e7832ea347b44c8b9a71d4adbf1cb62a8329242f8528970fead9664171f31e33f972a5b0a1b1251218fd9117ae463f4286f6232976dbd39a71528357671935ad024d01a105fdb50a40af76e15ed1e67ae95989ab290bfe9029d0d361af8dcd1a34f44934ad6fcc7cc1d6b71825cff06e37881d2b5ffd001cf588f6326664a4614d9cffae3349df1f7bca379f6c010b8074552e1c1ea2a8ddc848acb897cc0051e6005670f3a4fb230f48fab02d76e585abc234b2c4969e8cf0977f32cc842c076642caff3fb17813fadb39b5871654b9a3e9f85984942128bbe5f5c5eec33d683760cba45bcc8242ecb223cd8159766d81a4505ce50a62a29830fda44adf0ef6e28bba967eda0cb3e58559bde4799094f202c82d45caf35935f68f8cb732aa5c0d933e8033c9b89974815c4fce65e154cf1c0810b8ff2c3edd7c9e99f835f7ad1d0f8afa6c48db8f69754b24c2eb38a744425ae1ba743712c03bdfdce4e187965859fbd25130dcd28221a2635e095f5866ba8fb66a5b839adc719d8638dea90dd34c61a551d25a0b16578344c219fa0e4ac9949d2f5c0433573b0730435f308f5fa611559805efd377cbd145808875aae1a02b2bc72ab0cfc9476d14985c9c0792b83e817de504184729ae0a86c9032b2bdc1a3e754ca9ed8506d20baab6d912524725c0f36e087093397ce7f83f02795d96a2d47ac0405c7a76660cfc307acbf0c21082e6a23f924672aa0ebd6bc037b9e419d45f43bf6178827ae95bd51e2672888b0f6ac79ae017bebe296186a8fe3417e33fcbe5ff49d75ba4bd8492338a534bd2524eb28e07b3771beb89e055bfc1ebab87149eb8ff123bb4a1945e4d102a62e5a2a5f6ffd18494e98ef99b0c1acf8c8970faf830b7bbe87324566c3d58cb1c7b21679f6d9c887d993bcc78112003f675d881256ccb5d99aefa5e07c70c5b4c6a9a8ae46644e2ce2c660239ca29d8d9413a5196a609a45b3d80c34d92baaf3ae4c88b83977296805f92e498bac38fafe39e8e7df1f9a14d5c146f3b3a50c81b7a5d78445c25b7bc963e1ca6374d7770634473ac4bd0c93fe204a3f890f879b417a67975e34fa575268373d1b6268e2574e519853f2029b5a57692e973367a84d35985d757ba4ca248020fa08ec2106ad20fa39be056d61d84acfc9efed05f0fcc3f0c5e28dbfbfb193616faffc52ea3a8c75cb1652648a12b66ca88d7483b7c821a511142ae746be9992b24e34f22f2902b7d994025c8042190c193f709adfe0ccd4aa381b5491838319a47c10c64d33d341093ce4b0917078161c4153e3f9ee0d2215cb4c64098ce71e596bf0b4eb62e150ec2072680b2ab014799d02273d4aba27b2e79383b56be8b9a229609652ef15f240f1e63f4241698718da68e1fe1553560e879084134822e3e6939751a5ca8a9b98c87b350befce98d5d3586e388d5fb5a637fc39caa75729d29a382a894dfdec13a35bc970289cee00fe948deccb6e2ca2d9d7649c7c03c3f96149f0294b348963fb4dcc11ebdf2b8d8c2e109363bd57dac0c738043057cebff084c7701d446ff5cbaa3425208056681b6e0874f368f698c43ab98e2bfd8c29ab0912c5550e16e1082bb30ff45457e395b55c7ae020ae3088967e4863d83276a822b21813dd8a339ed5900fdc5bcd3cdc2245847258be6ae9b81c215029171c773e719db15f560ea4bc701f54a52c022b6e97e3458d40c0e939bcb6a4194ac53a49faf0d55a6aabbe62510be8b14f7d77b6125e05068ee819ba6d18d6fe31092bdaa8485c9d66addb3d6a1f03ed035f56584c184f7338e1fd16a717d250f2347771e6034c32791f07d241eda3b48b03fd442cd8d6d5b6268acdc4cf6a57e679ad368f8c25b4560bc273ec3a5dc2f6779e6dcba7cf23b8cf2556c99575cdaa8f0163a516c7abf71b98cd5a37257b9757cf781f08ea85dbce2ac501878e57be71ca835160c245004a8ac7d614e5942b245c13b15ffaee6b8c5cadf6d88f144f60d0b6bc0a9bda596c35f5f7569232a22264ae12aedc03a36dc15e9541a23dca7c392f0d7f10e723d5bd4d422ed8bdd1a490fbf53abf56716b388c022eb9e6587a361d9dc1e5fc67d5c246b9fed0b0328936d529dbbcaa04a3c612f3d58e0156cc8e3d034531460fcacdca4bde91ed1a725c0ed396557eb331f93f47f60621476e500a43aefa9f6059536522d1c8e7c990379fae31bd73e560b38a88add65c56b56394971cedc815a80dca0f0639f16fc0e28f34a4df7cc2de9c4786345d41a8890ff01396326abb814a5b62b8640ea27de8709c33767d512f17d297028e4f4d3290f9026c06d7987e2af3362a247c58bc06586f1dcfeee7da22ef635217a98e8d6e4c3dfd94845267da28bfe2b7baa2db8ee04a1fc7f3b51a346efa27ae60f292a62b1e30f24bf86e17f684b5c2f9a6e5eb42a300e80780e81077db6e2c64e67daea2c04b48d5377a96ec9cf78210caed3093987ee1942def6b418e1dd60327dbabe8ee3cb947dda3795622d0305b3e32eed4c1759df0b1f882eaec9c08a90992b0ceac84f6ac8c58ed695f9b9b322472dce7ed893c3b604a92101cc7eb12ac04da318f848b281fa3c20496705f25dace6c75f39c227bb12f627be3e6046afa9a9b8bd7914246299d1b0666892260a0ffe25b09620a6b4bb898f2733508574319efce73e865ef9c580259bf3bb71a524b76bcd1d941bcfe234befc3a0810bf606f395e595d125faa94d0e29c1150e202cfa39f40d214c5377bea3be35af6249a33e34f712cabe0e4de78ea520a345b8c10bc63309b5cd1a2233197e120d816a71693da26546e8510aafe78bc002588942915f01ba39b46294288dc42b0cd2709aa4ec9d33593a0163e56397215078258b8abe97ca405cb59f010e98c50efad87761fc53d25dc1c56e45c519c459d94d998da6086bdb6817c5e4f0981882f3ad5a907aa9d386a31122914c0eed771d9be3da030d4c2e90cbe5b6b6da2472b5f2680b6fbb24e332467ff9ae5975d41fdd57a96f222d0ff57823dd62fc6cab69"}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x4, 0x3, 0x6, 0xce0, 0x1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x0, 0x6}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x1e}, 0x1c, r1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e63e77ab89d00315c4b504fa38a060c40000000040000000000000000"], 0x0, 0x0, 0x0}) 20:44:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000060000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1678.095369][ T7529] binder: 7528:7529 unknown command 2061984526 [ 1678.101811][ T7529] binder: 7528:7529 ioctl c0306201 20000040 returned -22 [ 1678.201537][ T7529] binder: 7528:7529 unknown command 2061984526 [ 1678.209607][ T7529] binder: 7528:7529 ioctl c0306201 20000040 returned -22 [ 1678.649212][ T7515] overlayfs: filesystem on './bus' not supported as upperdir 20:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000070000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:02 executing program 0: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x5, 0x1]}, 0x8, 0x80000) r1 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x0, 0x181000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:44:02 executing program 2: ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x3) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:02 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r1 = socket$bt_rfcomm(0x1f, 0x1, 0x3) listxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000500)=""/214, 0xd6) fstat(r1, &(0x7f0000000100)) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = open(&(0x7f0000000200)='./bus\x00', 0x200, 0x40) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x81, 0x9, 0x16, 0x80, 0x0, 0x3, 0x80000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_bp, 0x0, 0x7, 0x5, 0x8, 0x3, 0x82, 0x3, 0x0, 0x9, 0x0, 0xffffffffffff0d1c}, r2, 0xffffffffffffffff, r3, 0x9) r4 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000080000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000090000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000e0000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000f0000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) [ 1679.680676][ T7550] overlayfs: filesystem on './bus' not supported as upperdir 20:44:03 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000820}, 0x10) syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) syz_mount_image$qnx4(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2d04, 0x8, &(0x7f0000000800)=[{&(0x7f0000000180)="7bcd20dc858ad7ffac9c976e", 0xc, 0x2}, {&(0x7f00000001c0)="69f37ef64ef28bcf7c49c71bf7edc9f21114c032fe53c94d99731671e4237a71dd720b5929e2bb738a02df11807e2cf0be0418fcd70fa80acf3c5c7e91d2b30a", 0x40}, {&(0x7f0000000200)="dc96875a8c3261427b51c8925df8a641384f089773dcab6f764912680c07f51cad7c9da2449dabc96b1774d6440b173bf7e6", 0x32, 0x8}, {&(0x7f00000003c0)="6009b533fb1318b25c108427b9af87304b94b7e64b94d15be3088f62695c8a4ee9212223d639042dd9993b48799c0bb1f26be7ef9c07f1d24fd1a8e96b68c64edc83b80ffbd389e5eabc57785bd9e2e05c45b21cbc9fc5eb9a1d2c7978c6d778521332c3eb348faf802735e32cf49dfb4a45a3bfd1005acf0c74809b2dba0131b9d11346848cd1c4341e895171f290b9378cc08074f02bb28d7a5058a9ec9c832f2fb3b3f60cefa05e228d824f11279f06a39f79c5532c0a91143e9de8545959a0b301e98a0cc4a311732cc7cf4c09df48517d08118b6a9fab7ee05c5c605b3002c4e6749fbcdf", 0xe7, 0xfffffffb}, {&(0x7f0000000500)="aaaafaa0672b508a49d8f45134a652a91891e3d14de632e1c2ca4eac729e01596be389f3176d28761cecb3f3b62193c7126cedf9b1e0a943363e922da74affb6ffc36255dc155c19b40fd04f41596ba808f927458c3d9eb863926b1bbbb49e5c881724adf84156f1e9f7de206b30b5d310cbea22cda82c", 0x77, 0x7}, {&(0x7f0000000580)="6e9a2b1158b6d8fd32febb46d0690cb40dc8e148f8cc076d8d4a9e2f652d43b2c46e007309abdd1479692a0919b4efc474fe84ebece720695f12110e1d51dfe5ffd4727237ad76909cbafb72e41e026e8b9c5fdf3866334fe7b6675a7eed4a19b67436de2b8a009527a433b4fd9fb361528d73d3c748ccfb9c5be7e97299d84a25", 0x81, 0x9}, {&(0x7f0000000640)="680a79132bd8c8e5def9541cb654ca4ae7c3144cb706d1b2d342671da9dfa85c8f3db1ff26cd3e45510c7c85394c1d6a9f040da447402618640f18dbfe4bf15721e1923ed5050953ba7600122c6f5dd1320a9552b114ecec23d7bf7dcf6b50a479959e412bbf7df15286bc92cc58a90b59094dfa7c05da1bb8e61fa483d06e627a881ca3aa526dfd0cbc834d337b8d11025fd8558219e2a9c0bebb4c30e8680e5f60996fd84f99ab79124b832c19a6b19d5e54e761920fc9a6545bc99e09a3bf2e4aac2e3a97ca", 0xc7}, {&(0x7f0000000740)="aa204b3b23a8c84af60c87e6a582f83734aab6c3dcdb191b051ae72d07f2720e8d67ebd8523e4e11a6f10cc4ff9447bcbc264fe8623aca43c5e6a9819cf976ecf1b709689ca1ae27d90d7efff8bc2f191e76f255298b55ef250c2ce21b1e936ab521334e252cee9c8b4e3154ce03415da9d53fb08b85a39c86749512dcc172ebae37c0f6f921986a91cb6420fab3939bae5c7ce28aa3e6bb3e", 0x99, 0x7b9}], 0x10841c, &(0x7f0000000880)={[{'$@\':'}, {'\x00'}], [{@appraise}, {@context={'context', 0x3d, 'unconfined_u'}}, {@dont_hash}, {@euid_gt}, {@dont_measure}]}) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) ioctl$int_in(r0, 0x5452, &(0x7f0000000a80)=0x4) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x80000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000900)={@my=0x0, 0x10001}) 20:44:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000600000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 20:44:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x10800) [ 1679.778938][ T7586] binder: 7583:7586 unknown command 1074553856 [ 1679.789538][ T7586] binder: 7583:7586 ioctl c0306201 20000040 returned -22 20:44:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000f00000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000b00)={0x480, r1, 0x104, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x258, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x51, 0x3, "8a4e40e9417b4c6bbaaf016790f59222963217d1b69a49ef6a11de6cda17866ea28ce9e2050ab5668f6cb3f15e40ea5232983ba143cb916f199a7b0a5730d8a8cc9f03a0f00cfd64e6580c49fa"}, @TIPC_NLA_NODE_ID={0x146, 0x3, "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"}, @TIPC_NLA_NODE_ID={0x61, 0x3, "ed50d3a724e02ea02402c964b0eb354ac4cbecb237caf7b3c7852f189298abd1f9c7c4306ba508e6ae2d05235fcb691d79a30a11011abb49379180035df2d3e2988cf011286d585faec66e72bb7a9910a677c1772d09f506a38d90ba0f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5bea421f45531f69fee50fd345b790d9d0ed0e4c2535de372af72e8f73ee"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8f}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000008}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xffffffff, @loopback, 0x8}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xe6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfd2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'xfrm0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0x6}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x271}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb}]}]}]}, 0x480}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', r4, 0x29, 0x4, 0x6, 0x9, 0x40, @remote, @remote, 0x0, 0x700, 0x80000001, 0x438716d1}}) [ 1679.826942][ T7589] binder: 7583:7589 unknown command 1074553856 [ 1679.837259][ T7589] binder: 7583:7589 ioctl c0306201 20000040 returned -22 20:44:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000300000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa8, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fffffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x11}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x10}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000200)) [ 1679.984334][ T7605] loop1: detected capacity change from 0 to 264192 [ 1680.699310][ T7593] overlayfs: filesystem on './bus' not supported as upperdir 20:44:04 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c400000000000000000000000002ea1522671909d457fe8c47fc125d4e3b14c0b53d8c854af06440b7248f2785d89f2e40f7e4f7d81ad984b3d458f10ee51a2bb44329c101d1059b27384c3d03503be8496c2e6c799a277c7b5fb343c5f709843bab472494d0c3bf9e235ec6bdf13a8a81f15bca7422655d6417f8ea31b2620a896486ee94c5564d130b0aa"], 0x0, 0x0, 0x0}) close(r1) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1000, 0x0) 20:44:04 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) openat$bsg(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000500000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000600000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:44:04 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, 0x0, &(0x7f0000000ac0)) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000d50600000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1681.856923][ T7633] overlayfs: filesystem on './bus' not supported as upperdir 20:44:05 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0xa040, &(0x7f00000003c0)={[{@xino_auto}, {@workdir={'workdir', 0x3d, './file1'}}, {@index_on}], [{@hash}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x20f938560787fdd9, 0x39, 0x39, 0x37, 0x65, 0x36, 0x37], 0x2d, [0x63, 0x61, 0x62, 0x63], 0x2d, [0x61, 0x36, 0x39, 0x36], 0x2d, [0x0, 0x33, 0x35, 0x62], 0x2d, [0x64, 0x30, 0x32, 0x66, 0x31, 0x62, 0x62, 0x31]}}}, {@uid_gt={'uid>', 0xee01}}, {@smackfshat}, {@smackfstransmute={'smackfstransmute', 0x3d, '+--(,-'}}]}) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8010}, 0x0, {0x0, r5}}, 0x2) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r6 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="87000000290200050000000103000000050000000000000005000000000000000907002e2f66696c65308003000000010000000000000007000000000000001507002e2f66696c653001745b0000030000000000000005000000000000003f07002e2f66696c65300402000000050000000000000000003000000000000207002e2f66696c6530"], 0x87) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbf40}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c3ff03000000fbdbdf250befff001000028008000200231900000400040004000780"], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x40040) 20:44:05 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x5, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000062edb23cdad50be839ba4b857205187e349bd4ae1fe00c49d59472fbb7f5242fede45734fff64a8188c7c80117106a3e81d9212ef46074602a90a646ec00d6be60dc7daddd767429f200f3bb2424ff2199985f3d785e85d90c5c9d03a0fdece5412165e9f2f5372e9fae1859b59ed89bcdc", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf250c00000064000380080003000000000005000800ed00000014000600000000000000000000000000000000000800050000000000060007004e240000060004000100000014000200626f6e645f736c6176655f30000000000800030001000000080003000400000008000600f9ffffff04000280"], 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) 20:44:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000700000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000900000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xbf40}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r2, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000e00000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x224, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x200, @dev={0xfe, 0x80, '\x00', 0x38}, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xca7}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6ab}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1b8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x168}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x44084}, 0x90) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) [ 1682.863815][ T7665] overlayfs: filesystem on './bus' not supported as upperdir 20:44:06 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) r3 = openat$audio(0xffffff9c, &(0x7f0000000000), 0x20100, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(r4, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, r6, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', &(0x7f00000001c0)=""/39, 0x27) syz_io_uring_submit(r0, r2, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0xb96d, 0xe, 0x1, {0x0, 0x0, r5}}, 0x8003ff) r7 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0xff, 0xe9, 0x20, 0x0, 0x4, 0x1108, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x14b, 0x1, @perf_config_ext={0x7, 0x8}, 0x8000, 0x80000000, 0x63, 0x5, 0x8, 0xcd, 0x4, 0x0, 0x2, 0x0, 0xffffffffffff1975}, r4, 0x8, 0xffffffffffffffff, 0x9) dup3(r3, 0xffffffffffffffff, 0x0) r5 = openat$vcs(0xffffff9c, &(0x7f0000000140), 0x2080, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f0000000380)={0x0, {0x20, 0xad, 0x8, 0x6ca6, 0x7}}) r6 = gettid() process_vm_writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x7f, 0x1, 0x91, 0xff, 0x0, 0x0, 0x2081, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb159, 0x1, @perf_config_ext={0xfffffffffffeffff, 0x80000001}, 0x8020, 0x1, 0x99b9, 0x0, 0x6, 0xffffffff, 0x8000, 0x0, 0x7, 0x0, 0x3}, r6, 0xf, 0xffffffffffffffff, 0x3) r7 = fcntl$dupfd(r2, 0x0, r3) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x3, 0x1, 0x3000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e63c8010000519ef45c004000000000"], 0x0, 0x0, 0x0}) 20:44:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000f00000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:06 executing program 0: getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4b, 0x7}, &(0x7f0000000080)=0xc) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={r2, @in, 0x0, 0x10, 0x0, 0x0, 0x102}, 0x9c) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={r0, 0x6, 0x5, 0x20, 0x7f, 0x6e8, 0x4, 0x0, {r2, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}}, 0x8, 0x9, 0x6, 0x10001, 0x2}}, &(0x7f0000000180)=0xb0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010000000000000000001700000004000680"], 0x18}}, 0x0) 20:44:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000003f00000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01000000000000dd743f60be8000"/29], 0x18}}, 0x0) [ 1683.087434][ T7677] binder: 7674:7677 unknown command 29909774 [ 1683.095936][ T7677] binder: 7674:7677 ioctl c0306201 20000040 returned -22 [ 1683.162605][ T7695] binder: 7674:7695 unknown command 29909774 [ 1683.171127][ T7695] binder: 7674:7695 ioctl c0306201 20000040 returned -22 20:44:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$zero(0xffffff9c, &(0x7f0000000080), 0x841, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000200)={0x210, r3, 0x1, 0x0, 0x8, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}], @NL80211_ATTR_FRAME={0x23, 0x33, @action={@wo_ht={{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @random="ecd935f82c0d", {0x8, 0x63}}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0xb9, 0x9}}, @void, @void}}}}, @NL80211_ATTR_FRAME={0x1c1, 0x33, @auth={@with_ht={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @initial, {0x9, 0x2}}, @ver_80211n={0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x1, 0x1, 0x5f, @val={0x10, 0x1, 0xc7}, [{0xdd, 0xdc, "5ab48cd92e2e777dba490c6a42715f5eee9336a22c4a2116d6be07598b48c346110126a830173a2d63c4ac2f43afb1b28ec642349754d686a543e68cddceee7416fa92abe2caae3c6a33ece7d61e94b974b55401d99b6f57372f201ad41260e89abefd4024c0cfd70c84a6da5ed2729a25885d9d3789bdb4a9b10b67a725de765be4a0106331a415c0799c5ad7b5d1d72a9b428968c42dd3ad2ef68b856888f10ff54107b14f5464938156f3d1c38ef31fa6b6b20c39f3e0834fe74ec66f1b5ed7e93e0e387852e0440bfec51b01a79fadb5cece70c8408592eb840f"}, {0xdd, 0x24, "918932f269ed2bba61ef1c1d9164f2391e78b76ed8f926952cd59509e3f6588589daae52"}, {0xdd, 0x92, "40297ca2c931a7dab6852de4f4e7a8671b0b56ecb5558a5edff23de4216902186745b670fb19b2ad99e98314af0ff4f4ba86461cad60754f931a5b9f10c013ca62fb40bc7d5db720e73980e448b3d943145db58f3493111f805092d3420f7382fc5b01753f8740b39299618c0417254dca53b1d49ef551feb72f05b21af5f3986c1c3c281861e97c83dd29ccb192bb2fdc49"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x210}}, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000040)='./file0\x00', 0x0, 0x13) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x28, r3, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8060}, 0x20004004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x48, 0x6}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r9 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r9, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r9) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x108, r10, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1f}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80, 0x39}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x108}, 0x1, 0x0, 0x0, 0x4080}, 0x1) 20:44:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000006000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1683.918356][ T7696] overlayfs: filesystem on './bus' not supported as upperdir 20:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000006d500000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0xa4, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/8, 0x8, 0x1, 0x13}, @fda={0x66646185, 0x6, 0x1, 0x30}, @fda={0x66646185, 0x1}}, &(0x7f0000000140)={0x0, 0x28, 0x44}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0x17}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1100, 0x2}}, &(0x7f0000000240)={0x0, 0x1c, 0x34}}}, @increfs_done], 0x7f, 0x0, &(0x7f0000000340)="dfc709218cc2c7d0905f95f72c4678f03b757f8612ac634872c2ac1d1fd1606011d3b773a0c93342db9fd473d6c7aa0204c0e635ad32eb5d83ece50a923e4a432f509b75b5ad3b598232dc7826449e17ffa4da54351847728451918f0b5f4fd88cd65cb7c8ef1f18eb5cdc022b370c3f2f44649b657dc1c37ccab0a5a0e133"}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:07 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) syz_io_uring_setup(0x46f7, &(0x7f0000000100)={0x0, 0x2411, 0x1, 0x1, 0x12d, 0x0, r0}, &(0x7f0000eeb000/0x1000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000001c0)=0x7fffffff, 0x0, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat2$dir(0xffffff9c, &(0x7f0000000200)='./bus\x00', &(0x7f00000003c0)={0x8200, 0x48, 0x2}, 0x18) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r3, @ANYBLOB="01840000000000001400350073797a5f74756e000000000000000000"], 0x34}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={0x1d, r3, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000000c40)=0xe4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000000c80)={@remote, 0x0}, &(0x7f0000000cc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000d80)={'ip6_vti0\x00', &(0x7f0000000d00)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x0, 0xc0000000, 0x1a, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x8000, 0x80000000, 0x416}}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r9, @ANYBLOB="01840000000000001400350073797a5f74756e000000000000000000"], 0x34}}, 0x0) connect$can_j1939(r7, &(0x7f0000000580)={0x1d, r9, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001200)={&(0x7f0000000dc0)={0x41c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x809}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9c6c}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}]}}]}, 0x41c}, 0x1, 0x0, 0x0, 0x801}, 0x10) 20:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000f000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000", @ANYRES16=0x0, @ANYBLOB="000226bd70000000000014000000040002801400058008000100756470000700018fb06044e4b5eaacdeb10069620000900002802c0003800800010004000000080002000300000008000200ff7f00000800020000000000080002000500000008000200ffffffff540003800800020074000000080001003ac2000008000200ffffffff0800020002000000080002000180000008000100dc0f0000080002000000004008000200f0000000080002000100010008000200050000000400040014000980080001000700000008000100ff0000002c000980080002000700000008000200070000000888197f4b129c000200500e4b3e08000100060000000800020005000000240004800900010073797a300000000013000100"], 0x120}}, 0x8004) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x6c, 0x0, &(0x7f0000000300)=[@request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/94, 0x5e, 0x1, 0x3f}, @flat=@weak_binder={0x77622a85, 0x215}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/243, 0xf3, 0x0, 0x24}}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x79, 0x0, &(0x7f0000000440)="cfffc5c61c13c155b828c882d0efccfb9f693e7bcfcfd893da419af52d11e73b5cddd68d8b5fb7cd6324ab3bb35d75e54c0fbb0040f54e2d5830b825e57dde4278bcaad385320e8db428ea249eca843247c71fbf91e646229376cded3b252b8d9c0c966bf4c0e649a5556c2ec671af4542855be7497eef53f6"}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) writev(r0, &(0x7f0000001740)=[{&(0x7f00000004c0)="9858efcdaae3aa3981ab1bd5b6757a36b4ffff212f74f8e62501ea1e8e8784c79f35cbe225a618a07a9e068a0d353d32a46c5a7dedba9f2e2c5fb3e707825c366d3b4b5af20870b927b835466e3241dfd61a22f28a526d1f3bfab34763ff4760cbba6ded2a94b740222308fa172f9de7478498b36079b1f64ceac195429fb3455542917d8e55aad96e7747a4e9ffcdbe145683cbc7c2ccc57f0d4beb1e839ed4642ac49a8f687de1dfcc0760e1b4bcf7ab4376bab15834bfc59e5be6816b51eb9964fb70", 0xc4}, {&(0x7f00000005c0)="f2bdb842dbd101baf5ba2f826a2a52dce6a83dd7464fbbf8fead2be565f1951949ac95cff73f29906366903b4150b09f267b93896465c6fb537a011654be0f84c1210066c95ea16e0a9c879b3ec78ab28ca7ded22c0553ff9aad5d0c50e996066c2dc8fec580a404838d9f761e50d48532b97cd126345a6d1976982bfbef24afeed115f67ad78ae1ca138f37622afc3f94ce9c6390c94d0c2fd5d8cf1115e3d25d4d05016b343fd5e7208154ac88d33ee3ceba4358ca74e6122349e3dffe95e754c257251d690a6d81f38e165f3ab440c8c92cef8e20a109c5bbb9c18da495e8820e61a713c53041eb550c0b759f0b90c700ec7818bc1b45b0fc5a173f4c0e1eda380b82c383765e56e15eafdd1fa9b5f5b783d4569d26bae2bd3c00723625f14524230da71fe3963998a358f64d2cf1f61f39202eaf0c8cb40ea24498b736fdaee17bd47eb2921e2c0c9fe694330187406bf48699d7ec5697f5c12666c2fad279ac6770b97327e776689a99327b7632120399bdbfabca495af0bb65e8ce95170a8da0c64f158851015c15c59a5daf794e64db311f61124f7923025ce246d536c03fea7219064483c02ed4fafe850dcaf75e37238ff2b906751dec637952a073b981d544518d08a78a7f7ec6d0999ec314b3753e2ca0c641dabd3fe90967aa6e6780ff725dc06180e0e0ddab4ce011b5237dc1a80a120c910ca5c2f93509574bb2eb08e78f475a028d35940e77b8fe056bc5f9a0c46336bbb49873dc3d32ca83236cfe28be556ae4cf384108c73503eb7152700f2b2abdb7fb635c3de85fca0ed0c3269a01e26c0438f8845cf5f1ebf5c24c3c6256ea047eb890080f167a29f344f9add0589b92e110c6782b50b89fe07ab784adc0756c2595a14d008ac795bfdfa8d291fce83b2db0ea2bfdb6986dbb929e16052c1611dccb02736a84a9e1719b4fcba490c0cf1deb01be40246df962dd9f1217776d05de311e3b24e3958c79f8c05dfda433f73d9414940ab44ed7d22c3652fb79acfb211d22aa79b6f4498d9529aaf015b781905469f5a21406a73f3c04e38f3caacc9055b8b0efc130b26f03287e2ddd49e7f4b18efa6e8208483a1a6c2e61b2042e6c26d718730d0da052c7c2ea1709cfd0b8ae43afd217f273924d4f5b8d485f5e30a088facfac5d1d86f9d2fa83d55c6ca90c086fd1ddf3ef910ebd3b3e561d281d00930fc3a9030fc62ecdcf00e5cc485a60173fe62ec0301eaac8ce036d7e55749f4dc6ea6275aae4059ec42bcda30ba5be38fa444db7b98cde19c800400975f03c522ec4b4ec961b9d0e7295b8be353de86be8079e863022dc90d6657c7d176712ac2724031e3f720e440fcb8b9e547b47cbb76da059c89e7d927d1ca96f7d512d4f797cd94965e260cdfca21101fdfd7e33e845d7666e97f2705bc9512806fbb457c5d7e8e93c677e2776fd95802d8dbf29b2ae74cefaa9ce3b4c0e1f96505d119ef273c1227c01bcefb17fefbaabb8eca49ee80dabd1b4063d0017b8cf10ab76ee2cb839c160da134cc2b94daadf3e117e3446afbe124103bb7b0496e1ed794fcf02a4db343fa27c17a4ca86b120b65295a1877ca7087a8c286e94641c87fdf2d3f37d18f843538ba9f08c58d86325ade1558d1f65601b3775adf0568a5b07091a76e2a418c6894f04b3cae3ad0eade8c0af23b5a0e25868da70c87fbc3deecdf17bfe82c77a751b89602e000f5f272d8bd878dda2feb92a92f2cf40f7c4e91d95cb42353519a7464f237a05e59d2d3b594d30154605f88076d229b822ddc9fff19d6ceeb8d709e7bd15ec8a2146f2fd7297e945e24b1906913eee6b9b5f5facfb4e96440048f3692b38f14116d3e471a6a9a6c299f4a9380eea2a2beadcc9da961d54dd563866deb02e16ce396065146b9040bee0019ddff7dbff631a3b35f7c16df577612d156a82e8584e7ed69f07493e84ad246f5a0fab7857cfb41e468e6a08ae941cfad03d763f776335d53640a1a50b708c8b90a3e73639ebb70803ada8b001ea3dec59ee31f9834cc333680f78ec53d694aad4478b430ae70cca0f41f8845827c566102637db5695c8179d050dd7a9beb2e6253de98dcdad5683fe74f4753aed87870458eebebf734c9c822217da19faeec2f8c00f5064847bd5d97f6a1d021cab62a306f30c8ae8ed5fc635e8f93cf31fdbb39abd239269a188599e25979b088554595e165cca8dc016a62a6369eef00c9fc585e748e260be680134eb2282f0287b547634b1fb2b29e75afcc2dbf4bb4bee2ad639797f3fd43515bcda43792afa4880c456f5717f91a8fb5faa70e1c4720bfb51b79008ef9edbe83dfabdffa62a262b4ac02a67117a6c0aeb2c53155965d1000e3e8ef74774e04b246c5adfcdd0669edc66a084e4cbf61a81e2ef5fc0fd7fef1469368f643a3c8237111dc888163627ebeb56c9bb07c31ca4e27f00003040f23895cb40731cc50970f98af0a2020671ce2e75e6a5107b31dfca8295a04ea3bf7a06df144ace53a69d98fa7e31c07812fc73da33119328be9a2e8dd3a2fe04ca7e77bc8c4725db2db7b0e67c046d94f73dfaec23a1c9c9b6e4779d743e073f7fec51e69cc151aa343bf6a69e2409b3e615a8614ec7fdeca35a811b38c9f620fccb495e691e08f3e74c9a2fcaad9255d5e8ec2603a085c6328754c4885b75144f110344610cdff054f6ad40b4e20c65752789a8d21ec3824c8ee7a07f989bd35e3a34eb5652ed4447a10981306c92cbafb13c545c31a8daf4b6b4ad18bfce6e4695b865039e2000eddbefd866c1ed13e972fdc2840d3bda44cb7596cbecf87046d26443257dd94e5186ad90131dfa007d69780d2f75495205ab1604fa7c2e92aa580568619dae1428d990cc6dd38ca892f173892cd77d36631f8aecd012db95bf9d407dc140dba26ab61e87b598080f2b0159ce51545ec3e13a8e5aa52eea92d2e1cac8997925c73dab5ab18afcc50b976eaa1059e85ed4cc4b1510a08de70173f5650ce6c99dd76b0d778337e32b9927efd8d446577dce28cf45d622e98945ef920b7e90a529df65571fefcc0db0cf72666dcdd12123851ab8609c31c081d2eb5c706c089187c4b637b16991a713f04a93eb3016803a4841097cfe3c7c5abda2e92abb933067bd96cef92dd713084e339c8a2ae594461b5f984cd09cd8cde964a00205b123e923183e89743cf51224ba07fdcb54a0eae33a7ed9c3ea79eefb0fbcf77054a35594767205f5d1cbe3cc6f10f98a4d2c94c9960bc8f08c6a527cbcfb2703ee6713006d753d5374e7490280abf40938c903f7474c351f87e5d9fb47c0cd99416d1a6833dac57efca8355c610156b06eaaf456a7072def52d99f85859d4dbf5a273c0472654694416006f9fee6d0991e79f25b719a9b4a2536e8f5189fab641b6b32ab86d8b6c2da907e8082ea7e2f20596edfc3dcf4932dd34c2fbbc44c0a8f23cc57c1115effc03b7468e794bebf33067d2a1e3852e93287c80fbc93f1554f1f732194db3947acced12fa68e0f2e5c19f79a45eb9382894c27585f37e0eb36c4859b120dd900b3a83d4211ee49d52474a635b2ffdf090cd8c8705eeff2541d42e4318443000a2f7d459eac4c1053a2fd7e494b2a201eb59f3929622876fc286d2d82a485e32eb1797e3beebabeac11294157cbe30b083f6d588fd5e5ee1a871218557ef4dd493d82e65764c0cdfc0e8ac0201349dfbffa2b3bdfb56669b84e1dbe1d2f37d49ac2de813277f9267a96d85e9f24fc5116a61df5c5973e6491d9f91c5c12902151e32e4513f6716dfcb97a2e13e514325cf1c52250614db218a94521ac8b1d8e7f8ff3dee39d66d4a5f3edf899a3d721ff8ca73ce75d4ca1a588d0dde93896bb8acd5e21efff946837accdee9cf0dab25c303514c1c2b10d9fd385f85df264da5f90391c9abecc04b20d5a4aa05372a90ac1347b299f815a5266ab385d6d636970b120c812034a2009d4578b263b01423c868a3ae787d707a48409bb14184558f731bded6dc5ed525c916f898c1af1567f077f63e2dcf1bf6fd0fa4d5996555747fe52911396d2b043ba71f652d358b7c8c32b7df5135b3022a0641f3693193eb18bdef8abf0aef1b6e4e2e65529f8276005155b3e2d9efc14e1aad8cb146150c6feef2076718b489d5bddf163a948afa936bc298dd4c40bae6ad4e262eeab932f0426218452b8fd20c29e9bc8b4b80de0582f796381eb252fcd2ff16afee96b635f92a13bce2de6bf1e7b2c4f83d4e1e1c1b553398eaaf983a3df787474a69c8cecafb697ab41e12df94265bc39e7f70832dc69d75e0ad793d5dab20bb1b2726a45359c62bd5e408e58e3d55795bf4c9cf8793084a6f59f702848791f017448ee0b58bae176960564be7ca30000abc8e14459154da4a6d98920160b9b9af4f1092845c174d125c6e3e37630ff59755e6420c6c3f0038826ce859fa27a96d362e74508c92a4123afd21f1eae6b61b337f451c5075ad367aa192411658ada0c27d9da83504af8ec4b0e3d2202a4af1f698f33567ff55b5fa6cfaf733270578691ec2b1d148e4da1c01a392af5f5acce6b8e5a3f06d6eabb714c3d80bbcb008852d0bfd961f05da765bc082bcf16674f0012815558387a33bfbfb93ad73edfa425c50f07c94aabfca7b3fed2f35e89a7038d520e0018e45e598a721aeef1dac86687fc11c0073e33b0ca81cd7356e2d3b1fe12821dfaaf5e03c95f36cc0eee514a1afa19692f180e2c4c3d17e469fab3d0792420197d928436d9eab7d99564db0b581b60f4d319a958e7e46ab75f0e43ffb33ea36e61f62c772c8e1cd39d62c2e50f85e8d9c73a2491fa2610c5dd7cd810e87180f0510149c834dcdb33c6b0baab69b13f32cd4826c33c89ad9e7f7b308b2e593d652d3bb75b1b098b7c98f9076767e2c46915c80ca36040a5c606c80e4f5518a91327ea7ec4607e5961880feb80f66c52eaf685dc72552f23d5e4c328e858e51b178f8f59bb4766e0f7e477b716ff01a1ccc9c4c2d01b9daa9d80868f4e5c8239959d0eb7ab1287e034e2091cd607b4739252d1e27e1c280ee3a3a9e7a9bfb7757541f263637efa733872404e371191b3beec28951e22448b854fe2cf320cd04d53f8da1292cf2bb58b59109740bc28dbb7c5be73b1301c5073137c5ce43d34843852def13c2ec19776691181ad45e9db052cbf37bad0106474695daf5fdd88b66d80bcda94ba439f30c751c4c71c412b6167e707ae86b07fdb3372789cefc2c78cd67421b0e353944938746d39b3731ab23753029a3f92398ad60e586b882ea5b46d9eeedb2800e3205cd92bf6955de2d4544b9950e47e2cc4c33c47dfd1bb74adbe5d30f5976794aeb0f1ea02c3db3665107bdb68f9696984a704e0474955819727296a91808ecf1af507187b7a7996c7e23fced1e43c7cd6e0b074ab3146ba4a7d0d422ebc9ce3dae32bfcb869991966d2e8581f6baaca899fc24160b866eaec381fe854d75c1cca65f4079442139a97fef482c590a21e141500142592cb28f49c2418fd244a0b414ddbe3e4e04ff58b76868fbcbefc35ed593cc37fc0c707d6b48bc3001907dc7262baa8c959f7f2e5868ee926d1d127092b7b223eec3c5ba8f4eb1ee1993e8a15400e7ed1b750b69ba680cd08954e0af3587c73217856e17ca863cb2f285c66d7ed99f367f170086def9130e90139c6c19c35ea1467154e33d59e14ce2cbfb2f3757de7b09110ee41f5e5206c7f4406142ae07c195b004064a1c7d7f77184e6017eae6c48290dbf975f34", 0x1000}, {&(0x7f00000015c0)="2554d5e304566d94238cbdb160042f503e9e05e5cb306b178431b1cf5980985ee072c89d0b14549d84b1a9f52ca49f864ba2ae0056d840625a32b3b0faf003f282fa9d50f44264167ba838a6b59f944d71d6001e31d71bd9065e7ac57ea23425332daeeb3585a39c56c4377edae90db63134a72da773d4117386f3ff49a9e545a58c2c5432edb49aa64aebc09821b951875d801ac2bcde66c8f42067689d4efde9b19d929df2bc063b88097a97bdfbca2cc47305d92ab80a535c0d3bdf1e9b3f8dd0d0349cf8d1f0a7dd8829c925eb2ca16a", 0xd2}, {&(0x7f00000016c0)="fc06559377b51bdd4d9a7fac9ae566ee19d673589cc5b6179604bf148e3e88981a308c76b278b7a3611689ab0fbd0fd61af477cfc22d354d0ff5ccb546b1af0efaeccb76f8e1094bb1e8ad7c0261412cab02278b31ef0eff4f1700f28e22b9880d", 0x61}], 0x4) 20:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000003000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x1b, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000011000150507d1fc74e85d1e1cb45b2bc", @ANYRES32=r5, @ANYBLOB="01840000000000001400350073797a5f74756e000000000000000000"], 0x34}}, 0x0) connect$can_j1939(r3, &(0x7f0000000580)={0x1d, r5, 0x3, {0x2, 0x0, 0x3}, 0x1}, 0x18) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x909, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40014}, 0xc005) r6 = syz_open_dev$vcsn(&(0x7f0000000340), 0x9, 0x141000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0x1a4, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ebb7c302fc712632cda6e7a1a31ffc19fae6a132880df573"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "72c755853f90f6c1b323d8ca121503694f7ee1ed5bdbf76f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "13612a775c39b47905343869eb00cef22e2982dfada777ce"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "28a97a4ca634aa38803834e3d4ebb3088000493fcedb2077"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a5c6d7f11a3bceab27aacf5168042016e45b7fef3741f168"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x1a4}}, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="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"], 0x18}}, 0x0) 20:44:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000004003000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1684.769825][ T7734] overlayfs: filesystem on './bus' not supported as upperdir 20:44:08 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,woSkdir=./fine1llowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffff9c, &(0x7f0000000080)='./binderfs2/custom0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:08 executing program 0: ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000040)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000340000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000fffff0000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc01cf509, &(0x7f0000000080)={r0, 0x9, 0xb7fa, 0x400}) r3 = gettid() process_vm_writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001740)={{0x1, 0x1, 0x18, r0, {0x28cf}}, './file0\x00'}) perf_event_open(&(0x7f00000016c0)={0x2, 0x80, 0x81, 0x81, 0x81, 0x1, 0x0, 0x9, 0x2, 0x16915e8e3a8226f7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xb2, 0x0, @perf_bp={&(0x7f0000001680), 0x2}, 0x50, 0x101, 0x8, 0x1, 0x7, 0x2, 0x3, 0x0, 0xec46, 0x0, 0x9}, r3, 0x9, r4, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001640)={0x15c, 0x0, &(0x7f00000004c0)=[@clear_death, @request_death={0x400c630e, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x3, 0x0, 0xf}, @fda={0x66646185, 0x8, 0x2, 0x1d}, @flat=@weak_handle={0x77682a85, 0x100a, 0x3}}, &(0x7f0000000140)={0x0, 0x1c, 0x38}}}, @register_looper, @free_buffer, @clear_death={0x400c630f, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/47, 0x2f, 0x0, 0x2a}, @flat=@binder={0x73622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x32}, @fda={0x66646185, 0x8, 0x2, 0x11}}, &(0x7f0000000340)={0x0, 0x18, 0x34}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x10a, 0x3}, @fda={0x66646185, 0x0, 0x0, 0x9}, @fda={0x66646185, 0x8, 0x2, 0x1}}, &(0x7f0000000380)={0x0, 0x18, 0x34}}, 0x40}, @exit_looper], 0x1000, 0x0, &(0x7f0000000640)="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"}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) 20:44:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x10000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x3, 0x0, 0x20}, @flat=@weak_handle={0x77682a85, 0x100}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/192, 0xc0, 0x1, 0x5}}, &(0x7f0000000140)={0x0, 0x1c, 0x34}}, 0x40}, @free_buffer={0x40086303, r2}], 0xd, 0x0, &(0x7f00000002c0)="ceafe50ec5a1f549d651e190cc"}) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/160, 0x27}, {&(0x7f0000000340)=""/100, 0x64}, {&(0x7f0000000500)=""/39, 0x30}], 0x3, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0x0}}}, @cred={{0x18}}, @cred={{0x18}}], 0x11}, 0x122) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) [ 1684.995265][ T7764] overlayfs: unrecognized mount option "woSkdir=./fine1llowerdir=." or missing value [ 1685.111418][ T7772] overlayfs: unrecognized mount option "woSkdir=./fine1llowerdir=." or missing value 20:44:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000010000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:08 executing program 0: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) dup3(r3, r4, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000580)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xb, &(0x7f0000000540)=[r2, r1, r3], 0x3}, 0x8000) r5 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x410402, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './bus', [{0x20, '@-'}, {0x20, '/dev/vmci\x00'}, {0x20, '@\"&'}, {}, {0x20, '+.\\@\\$\x1f$:'}], 0xa, "72d6818a1cc96fb696c2390fe0b1b17bdff22a82306fa68cdd2ac820f7c4b749ec1fc1ded09e5b1832ceb2a92aaad8163f8f920cea1b1cb04f5c5c493240d47a7189c352bfc166f5773a541d454c547dd4960c62af651f3ccc1e9029995f2442a911f963e772fb69013b50c4cef33801f53e2b2360430d937cb0c5c646e3d54031c38ebe201a606d1242223220b20bf914591b80253406606a5c45e7a948d9f4dd9af12735ad8fe0bff9d8e20aed3e29af4b893ea38571768609d12b67e582e11b2ce3254767aad697d0a24a2d927d"}, 0xf5) socket$inet(0x2, 0x0, 0xc0) mmap(&(0x7f0000ee9000/0x1000)=nil, 0x1000, 0x8, 0x80010, r1, 0xaee25000) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r7 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = openat$incfs(r6, &(0x7f00000003c0)='.log\x00', 0x6000, 0x18) ioctl$IOCTL_VMCI_SET_NOTIFY(r8, 0x7cb, &(0x7f0000000200)={0x9, 0xe63, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:08 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0xf7a1e16d8a5cd160, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport}, {@loose}, {@dfltuid={'dfltuid', 0x3d, 0xee01}}, {@debug={'debug', 0x3d, 0x55ec}}, {@debug={'debug', 0x3d, 0x10001}}, {@cache_mmap}, {@aname={'aname', 0x3d, '(!%}-'}}, {@uname={'uname', 0x3d, '\x00'}}, {@cache_loose}, {@afid={'afid', 0x3d, 0x7}}], [{@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfstransmute={'smackfstransmute', 0x3d, '}:-&-\\$'}}, {@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@hash}]}}) 20:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000020000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000030000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3a9c, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e41adb26ade64d1a8630c400000000000000000000000006856983e24bd72bb6abe77f63098e55419fc59b2c4123f03cfba58c6ecabd3932707a5f79c2ed0e1048b10854f88bab94cbf1de5e815f74929fbbce59839720668b3d865bc635fffd40b7d23c3908dd507f4223f59067d0b53721cedd52dbddf1e08562330c26b5327a34c4f99f9a14eb8ec436e03262f2e2652fbce3815b28ed1dd02fcab21e31920114e6c1fb59cfa783c1509707926f45ca86acfa9bca2cc67215dbe3636d85a88cb0d779836a48347a9905e4fdbfcfe21074046eecfc5e4dc0a748c971c276c8ca68e5f7737681d4667d7eb"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xff) 20:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000040000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1685.637344][ T7808] binder: 7807:7808 unknown command -1297268466 [ 1685.647652][ T7808] binder: 7807:7808 ioctl c0306201 20000040 returned -22 [ 1685.789988][ T7811] binder: 7807:7811 unknown command -1297268466 [ 1685.797739][ T7811] binder: 7807:7811 ioctl c0306201 20000040 returned -22 20:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000050000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1686.012060][ T7799] overlayfs: filesystem on './bus' not supported as upperdir 20:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000060000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x80) read$dsp(r1, &(0x7f0000000100)=""/82, 0x52) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)={0x18, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) 20:44:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x2}, @enter_looper, @exit_looper, @register_looper, @release, @exit_looper], 0x71, 0x0, &(0x7f00000002c0)="8781ad8deac04fb8398ba687daea734b78272e1c24d9b5a2678d33d182311e2d2cead39a2df6566785a256c1a5459beeab912ca309bf5adc7e6995c31be768b0a6e8214c5deb5b279250e02d857d6dcaf7dd0390125c932db1520640d9c42185bbe821ca24d92065338dbf6ec830b20475"}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06630440031d000009631040000000000000000000000000000000000663044001000000"], 0x34, 0x0, &(0x7f00000000c0)="43f76cbfcd1091363c40b2b04eb8ed388885c50d9030cdce52dc2118b85878c10c9a5b0ff1e38f89bb06567ddb0a57cdf858f580"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x38fbe2a8, 0x74ea, 0x101, 0x0, 0x8]}, &(0x7f0000000380)=0x50) 20:44:09 executing program 1: r0 = syz_io_uring_setup(0x42d5, &(0x7f0000000340)={0x0, 0x1908, 0x0, 0x3, 0x1000000}, &(0x7f0000eeb000/0x2000)=nil, &(0x7f0000ee9000/0x2000)=nil, &(0x7f0000000780), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000001980)='./file1\x00', 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81e8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c09425, &(0x7f0000000000)={"981922a4454513eebcf63be86dc56209", 0x0, r4, {0x1f, 0x6}, {0x1, 0x8}, 0x100, [0x7, 0x800, 0x400, 0xef3f, 0x1, 0x101, 0x1ff, 0x3ff, 0x1000, 0x51, 0x400, 0x4, 0x9a1, 0x8, 0x4000000000, 0x6]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000980)={{r0}, r4, 0x2, @inherit={0x68, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000000000004000000000000001a48000000000000010000000000000020000000000000000000000000000000f800040000ffffff0500000000000000040000000000000000000000000000009720000000000000ffff000000000000ffffffff00000000"]}, @subvolid=0x1000}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8570706573640aa143090b9c0469722d2e2f6275732c776f726b6469733d2e2f66696c65392c6c6f77"]) socket$inet(0x2, 0x0, 0xc0) r5 = dup3(r1, r0, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg(r5, &(0x7f00000006c0)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/143, 0x8f}, {&(0x7f0000000000)=""/5, 0x5}], 0x2, &(0x7f0000000400)=""/83, 0x53}, 0x1}, {{&(0x7f0000000500)=@pppol2tp, 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)=""/178, 0xb2}], 0x1, &(0x7f0000000640)=""/65, 0x41}, 0x4}], 0x2, 0x1123, &(0x7f0000000740)={r6, r7+60000000}) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r9 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$KVM_SET_DEBUGREGS(r8, 0x4080aea2, &(0x7f00000007c0)={[0x100000, 0x6000, 0xf000, 0x3000], 0x1, 0xc, 0x8001}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f00000004c0)={@host}) rename(&(0x7f0000000840)='./bus\x00', &(0x7f0000000880)='./file1\x00') clock_settime(0x7, &(0x7f00000008c0)={0x77359400}) 20:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000070000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1686.152159][ T7824] binder: 7823:7824 ioctl f501 0 returned -22 [ 1686.194876][ T7832] binder: 7823:7832 ioctl f501 0 returned -22 20:44:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000080000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x5, 0x80, 0x2, 0x1, 0x0, 0x0, 0x12000, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x9402, 0x8000, 0x77, 0x7, 0x7, 0x100, 0x7fff, 0x0, 0x4d, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xfc, 0x0, 0x2, 0x0, 0x75, 0x5c00, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x4, @perf_bp={&(0x7f0000000080), 0x3}, 0x220, 0x6, 0xffff, 0x5, 0x1f, 0x6, 0x7ff, 0x0, 0x3, 0x0, 0x3}, 0xffffffffffffffff, 0xe, r1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0x0, 0x1, 0x1000, 0x1000, 0x80000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000090000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1686.348953][ T7839] binder: 7838:7839 ioctl 801c581f 20000140 returned -22 [ 1686.392325][ T7825] overlayfs: unrecognized mount option "ppesd [ 1686.392325][ T7825] C ir-./bus" or missing value [ 1686.433581][ T7845] binder: 7838:7845 ioctl 801c581f 20000140 returned -22 20:44:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}, @clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x2}, @enter_looper, @exit_looper, @register_looper, @release, @exit_looper], 0x71, 0x0, &(0x7f00000002c0)="8781ad8deac04fb8398ba687daea734b78272e1c24d9b5a2678d33d182311e2d2cead39a2df6566785a256c1a5459beeab912ca309bf5adc7e6995c31be768b0a6e8214c5deb5b279250e02d857d6dcaf7dd0390125c932db1520640d9c42185bbe821ca24d92065338dbf6ec830b20475"}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="06630440031d000009631040000000000000000000000000000000000663044001000000"], 0x34, 0x0, &(0x7f00000000c0)="43f76cbfcd1091363c40b2b04eb8ed388885c50d9030cdce52dc2118b85878c10c9a5b0ff1e38f89bb06567ddb0a57cdf858f580"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000440)={'filter\x00', 0x0, 0x0, 0x0, [0x9, 0x38fbe2a8, 0x74ea, 0x101, 0x0, 0x8]}, &(0x7f0000000380)=0x50) 20:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000e0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in, 0x0, 0x10, 0x0, 0x0, 0x102}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r4, 0x3, 0x61b26c546bf0e11}, 0xc) 20:44:10 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x80000000, 0x4, &(0x7f0000000480)=[{&(0x7f0000000140)="24244384cfb037e70d3cbde7b9da90e64eea5ec3ab649f863aa502522fbfe4c137fef34aa1be2a47359dbc0937b994a695360eb28bb9a26f270e5d47664647ff2290adde5403bfe922d3fedd52154e062ba9a069091c70d7625b17f000641272cdce79d55334f01881ded4886780f90dbd10682fcba1690bd399eacf2e3ed6398d1a75ae4132c9ccb8494517a7af7c749765ade6cb5f079f427c03ab9c11ffbd640fc64f116542aaf523c11b1e103bdc52d3f1db1806b33be5134a8c36", 0xbd, 0x1}, {&(0x7f0000000200)="49a257", 0x3}, {&(0x7f00000003c0), 0x0, 0x3}, {&(0x7f0000000400)="1e4f9b1b73703e7a99e7f76d9d74faa17eab2b9e9ca73f21664c43fc170878f04cc1dee2c48960f20ce596bfefe70474cca9ecaeb5b9af3029175896001498789cf6896b1873f39f64fc5133af2037b6501605d478247f3912733d1bd019e900", 0x60, 0x709b}], 0x1000004, &(0x7f0000000500)={[{@shortname_win95}, {@utf8no}, {@utf8}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x139}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) io_uring_enter(r0, 0x4761, 0x749a, 0x0, &(0x7f00000003c0)={[0x321, 0x9]}, 0x8) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) [ 1687.110893][ T7857] loop1: detected capacity change from 0 to 264192 [ 1687.133345][ T7857] FAT-fs (loop1): invalid media value (0xab) [ 1687.140000][ T7860] binder: 7859:7860 ioctl f501 0 returned -22 20:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000f0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1687.141861][ T7857] FAT-fs (loop1): Can't find a valid FAT filesystem 20:44:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x50, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x0, 0x2, 0xa}, @fda={0x66646185, 0x0, 0x1, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/81, 0x51, 0x0, 0xb}}, &(0x7f00000001c0)={0x0, 0x1c, 0x38}}, 0x40}, @enter_looper], 0xb0, 0x0, &(0x7f0000000280)="b51a105872f475c1eb2314e66243ae66718ad10bd75bac7b19d33ac84d48de47e1f287aa80c06ec164a9c3b52b3e361576fb1f9295c82ced0850683891e7a2aed303ce8e3e513a67362211c5a73caea031fecccdeb72c84863d0c2288e386001e5f58218cd8fa6780037669846a73259632f253cde559de549516398f9a71fc1e94ed07b3933998f784e479da221937ff2520cae9c4f8e44527806505ed571f7eaab9baa4d5f05fef68fe6462bafe77e"}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3da9, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000003f0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @rand_addr=0x40}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={r4, @in, 0x0, 0x10, 0x0, 0x0, 0x102}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r4, 0x3, 0x61b26c546bf0e11}, 0xc) 20:44:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000600000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x240100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xb0, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire_done, @clear_death, @request_death={0x400c630e, 0x1}, @register_looper, @enter_looper, @enter_looper, @acquire_done={0x40106309, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x2, 0x1c}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x34}}, 0x1000}], 0xde, 0x0, &(0x7f0000000280)="728d9b20b802eecf7ea2eb0e9673ada602ea509ba85e2b3a2610aa06365dbb3d9a14e2ef3698006ae374ca718b7cb4d24e93d44d510e2b5652b499df36a12762746964ef37d2c5507a8351cb5f74bf9b82c63272e8c17777869231dce11094c67135aca3b3d17ef04d65adf6ba65783dc9a1dd0b1a6d41b1262527324aa1794a5bbb4ccb4d2e685678558a94c239d46457de554dee2c6d36795e41943b8f8aff12c003b51da8b51e06efbc1dfb1ffb5366db7bc02de68a37e9829591ced92b000ee76972bd26498bf12d6dd320ed81479fbd187d742e6379c9dd3d3e791c"}) 20:44:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000ffffff9e0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1687.957590][ T7866] loop1: detected capacity change from 0 to 264192 [ 1687.983906][ T7866] FAT-fs (loop1): invalid media value (0xab) [ 1687.990364][ T7866] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1688.005866][ T7857] overlayfs: filesystem on './bus' not supported as upperdir 20:44:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r6, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x3, 0x4, 0x0, 0x99e4}) 20:44:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000006d50000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:11 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = getpgid(0xffffffffffffffff) syz_open_dev$audion(&(0x7f00000001c0), 0x4, 0x80000) r1 = getuid() mount$bpf(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000003c0), 0x88000, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0xffffffff}}], [{@seclabel}]}) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r1, 0x0, 0x21}, 0x10000, 0x7d, 0x0, 0x10000, r0, 0x0, 0xffff}) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x6d) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c1aa1fbe4a1faac2d4a99eb3bcd01776f726b6469723d2e2f66690d3ceab16a7cb07f4470db3b45"]) socket$inet(0x2, 0x0, 0xc0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r3 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0xf82a0fb6fecee214, 0x80, 0x8, 0x20, 0x6, 0x0, 0x0, 0x5a5a4f30, 0x4, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x1, 0x9}, 0x0, 0xf78, 0xff, 0x9, 0x5, 0x20, 0xd5, 0x0, 0xf8, 0x0, 0x4}, 0x0, 0x4, r2, 0x3) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000fffffff00000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:11 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r6, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x9c, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x110a}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/236, 0xec, 0x1, 0x2e}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x40}, @exit_looper, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x2}], 0x4b, 0x0, &(0x7f0000000280)="e85bee34ff395afa37a27fbd2756ed74aa368135e491223dfe745a6c21f1190890bf7e1a1187711628f12178f0809622be2f878759add8b33fd277b675c6d7786e2508604b88e99aeabbdc"}) 20:44:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000f0ffff0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1688.222103][ T7905] overlayfs: unrecognized mount option "-J;workdir=./fi0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r6, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000007fffffff0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1688.360726][ T7919] overlayfs: unrecognized mount option "-J;workdir=./fi0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:12 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x1000, 0x2, &(0x7f0000000500)="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", 0x9c, 0x0, 0x1, {0x1, r6}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x9, 0x0, 0x0, 0x10, 0x3d46b5889ef295e6, {0x2, r5}}, 0x86) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r7 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) dup3(r8, r9, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r9, 0x4010942a, &(0x7f0000000000)={0x1, 0x81}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000009effffff0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000f0ffffff0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfda1, 0x80}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/block/loop12', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x2, 0x0, 0x81, 0x0, 0x80, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x3f, 0x8}, 0x800, 0x3, 0xffffffff, 0x6, 0x4, 0x25a3, 0x0, 0x0, 0x80000001}, 0x0, 0xa, r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="635d4ea9de6c9c2692ffba8a2e775aff5c0202776cb591f1f41dbcbb23a730c975472eafec119d202f368edd56b88a2f8c6b7de20f3749e09716035e6be6c22993665e1f73c807e4c252394399bd1c8e02e14bae288d365b8b9608116aafcd8841", @ANYRES32=r1, @ANYBLOB="05000000000000002e2f66696c653000"]) r5 = openat$tcp_mem(0xffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000680)={[{@mode={'mode', 0x3d, 0x1000}}, {@mode={'mode', 0x3d, 0x400}}, {@mode={'mode', 0x3d, 0x7fff}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0xfffffffffffff725}}, {@mode={'mode', 0x3d, 0x7fdd}}, {@mode={'mode', 0x3d, 0x5}}], [{@subj_user={'subj_user', 0x3d, '/proc/sys/net/ipv4/tcp_wmem\x00'}}, {@permit_directio}, {@euid_lt={'euid<', 0xee00}}, {@uid_gt={'uid>', 0xee00}}]}) r7 = mmap$binder(&(0x7f00006c2000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x9) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000005c0)={0xbc, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/41, 0x29, 0x0, 0x19}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/148, 0x94, 0x0, 0x1b}, @fd={0x66642a85, 0x0, r6}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}, 0x40}, @free_buffer={0x40086303, r7}, @request_death={0x400c630e, 0x1}], 0x30, 0x0, &(0x7f0000000580)="00e8a6e9442cb132eb7e8b44a4a3d458dccd8cdd6d1b7a5b8655584864785ddbaf701de9b3150ce72c7be078192167a9"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000080)=[@acquire, @free_buffer={0x40086303, r7}, @increfs={0x40046304, 0x1}], 0x26, 0x0, &(0x7f00000000c0)="442ccb1d01af2c9fb44ba122255943ad6da6a6dff6b7062526503d187764bdc95984d0af54d6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000030000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1688.821264][ T7930] overlayfs: filesystem on './bus' not supported as upperdir 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000003400000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:12 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='hfsplus\x00', 0x0, &(0x7f0000000180)='-**$\x00') signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r5, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000fffffffffffff00000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100, 0x1}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000100000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r5, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000200000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x7213052b799036e5, 0x0, 0x0, {0x25}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r5, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1690.008594][ T7977] overlayfs: filesystem on './bus' not supported as upperdir 20:44:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000300000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000080)=0x40) 20:44:13 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x1000000, &(0x7f0000000140)={[{@xino_off}, {@nfs_export_off}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@metacopy_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x31, 0x2c, 0x38, 0x34, 0x35, 0x37, 0x0, 0x7], 0x2d, [0x33, 0x61, 0x37, 0x38], 0x2d, [0x39, 0x0, 0x38, 0x63], 0x2d, [0x33, 0x30, 0x34, 0x66], 0x2d, [0x39, 0x0, 0x66, 0x0, 0x33, 0x66, 0x36, 0x63]}}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'overlay\x00'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e41f8a11ae20df7cf790eb5805315d4573efd1cb6e2cb7f977ea34210a4ca8f55c26fec71a7e0f1acee58289ba145fda998cf7c9aa262280a146d626235af49b9d6a4a4d1f3b0d342123335ca45f725acc5921741da48c2f7fd1c93f675cbed93343a0e5dbc1c1ece10ea8969f81cabb814a233ef1a42ea3fb31a7af04940f9b7d99669d00ed08f411de055d593f9eb200573c6c4a4caf2cf3db37b11e0d290cac59932bce11b6ae813d0bccf49"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:13 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r3, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000400000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:13 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r2, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c400000000000000000000000007b8888d44df4a5c3120d00551e980c54658460c74cc88172cb2b93fd24e42cbe40b4193f89f04bacecc35ee0e584e867c641b873646e3dac9ed82e7550c9db20ddfa98f9fa527412a7ec32dd78a67a164ef2bf995711aa92b10a8b8309eb75c8e0cce38570d8b8c2c06073256913d780ccbd7fa5be0537f73fee2f9310980fbb0000000000"], 0x0, 0x0, 0x0}) 20:44:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000500000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:14 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r2, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000600000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1690.345180][ T8004] overlayfs: failed to resolve '.AySW>~BʏUoqX(E|b( [ 1690.345180][ T8004] mbb5I֤B35E%ŒAHu4': -2 [ 1690.455377][ T7994] overlayfs: unrecognized mount option "fsuuid=1" or missing value [ 1690.577575][ T8004] overlayfs: unrecognized mount option "fsuuid=1" or missing value [ 1690.656742][ T7994] overlayfs: failed to resolve '.AySW>~BʏUoqX(E|b( [ 1690.656742][ T7994] mbb5I֤B35E%ŒAHu4': -2 20:44:14 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000700000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:14 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75707065726469723d2e2f6292732c776f726b6469723d2e2f66696c6513c487e761752834312c6c692094b9576f756c350000000000"]) r0 = socket$inet(0x2, 0x0, 0xc0) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@host, 0x6}, 0x1, 0x2, 0x1}) r5 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendfile(r5, r3, 0x0, 0xfff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000100)={{@hyper, 0x9}, 0x0, 0x6, 0xb8c}) 20:44:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c4000000000f36bb5c7000000004026f97da8b7"], 0x0, 0x0, 0x0}) 20:44:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000800000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:14 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000900000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1690.862817][ T8026] overlayfs: unrecognized mount option "li Woul5" or missing value 20:44:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000880)={0x144, 0x0, &(0x7f0000000640)=[@exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x3, 0x2, 0x39}, @fda={0x66646185, 0x3, 0x0, 0x28}, @fda={0x66646185, 0x8, 0x1, 0x2a}}, &(0x7f0000000140)={0x0, 0x1c, 0x38}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x2, 0x28}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000240)={0x0, 0x18, 0x34}}}, @decrefs={0x40046307, 0x1}, @increfs_done, @enter_looper, @decrefs, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x9, 0x0, 0x23}, @fda={0x66646185, 0x8, 0x2, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/220, 0xdc, 0x1, 0x40}}, &(0x7f0000000380)={0x0, 0x1c, 0x38}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x6, 0x0, 0x3f}, @flat=@binder={0x73622a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/169, 0xa9, 0x2, 0x37}}, &(0x7f0000000600)={0x0, 0x1c, 0x34}}}], 0x8d, 0x0, &(0x7f00000007c0)="1fff0636c672c469df7e8372e2a15fca41eef717e8c8fd6a0f4383b58dab0a966b79edf30e75d5083c23ebb552bf378f8a38dcd6c8e47d7f3c5f800fcb220802cb355ec005f47f3c201a7bb3a49c7ff155e003debdf4d37fd8dc6dc0fa9edfb09ba5bbe0aecf4afe3b2f0aeb653249de167b3b7d84046b78476a6c086589e55dcf5631bb2af229b99c44b8470e"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x400000000000000, 0x800000, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1f5f}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e630c4000000001000000007097be96871ee1becb00000000"], 0x0, 0x0, 0x0}) 20:44:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000e00000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1691.217278][ T8047] overlayfs: unrecognized mount option "li Woul5" or missing value 20:44:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:14 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570706572776f726b6469723d2e2f66696c65312c6c6f7765726469723d2edf7c96aad5f20904b51a93ac5b9dd85b50a0a81ad9ad1d3bba75208bfff830a0695f7905a3b0a9fddff46f9e12e6c4db11bc0f71ec32bbf8ddd91017829c9de36284c44e9648ff88c59202671d98538d87d97ff1787e5d9306d951a29a377b42fe3f504eaba090af2850cd51f5dde51d82eb1e41a595bce2cbce51e2253edf33b05f194a9282ad083f54e07677d55a80c9d61dadffeabad10fe8b67f982087277fb38be54e1fdb6fd24fb89baccad5f09019d6857e8c232921e418679bba8470dbb061ddc6301a65d3e8d3c24b4e46054d9e5b3a227cdb4ff09bb227b864abe02463432d0fd5f298cf9ecf7f8372ba96504bccd3307a316626258bfb715e469396c9345c"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000f00000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c40000100000000000000000000d8021e3d6f7ab76b28e9df6dc0834b153e7098161eda74efef85e54b2f096df12514a6aa024ab666a41555944897bfbcdd8c850b700ffc467a9503000000ceb78a3eecc3a0bd661a61f29f02a2c6"], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'bridge0\x00', {'vlan0\x00'}, 0x5}) 20:44:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000003f00000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1691.487287][ T8058] overlayfs: unrecognized mount option "upperworkdir=./file1" or missing value 20:44:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000006000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1691.611518][ T8062] overlayfs: unrecognized mount option "upperworkdir=./file1" or missing value 20:44:15 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 20:44:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r2 = dup2(r0, r1) r3 = gettid() process_vm_writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/260, 0x104}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3f, 0x3f, 0x20, 0xff, 0x0, 0xfffffffffffffff9, 0x40240, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x12000, 0xa35d, 0x1000, 0x4, 0x8001, 0x0, 0x9, 0x0, 0x1f, 0x0, 0x8}, r3, 0x7, r1, 0x9) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000016c0)={0x8, 0x0, &(0x7f00000015c0)=[@release], 0x93, 0x0, &(0x7f0000001600)="c4dfd05e6707d5959d38913650ea7616e0b33484ade2876bab80d62320719bf81c06c1a53f1ee80a8fb5e2cb94a57bc9ba6ea3c95aeb32d4337c0eb6059d6036b84e06861cdc4f625bb91a288b2f528df426c74d83adc2dfa204d95ddaf8a4442ea96a791fc27f2413afb3e470fc5133265f748f81d95062335fbb34c712421062a7a22cc2e221824af9fd71d24e9e4cd3fa19"}) 20:44:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000ffffff9e00000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:15 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000006d500000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 20:44:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000fffffff000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1692.442724][ T8096] overlayfs: filesystem on './bus' not supported as upperdir 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 20:44:16 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}, @register_looper, @increfs_done={0x40106308, 0x2}], 0x70, 0x0, &(0x7f0000000080)="fe25a4590340ca392dd1f427cc62ed287b86067f058ba01d6e9c23b3d2f7257ce45c126650e7b255d32eed1e8fea20f9805704aef17f06477f1a4b716927a81ccff8842e4a53dab6ec4a29aaf1682f3f48c7d2d605a949579d6425df226276f056b9fc07d96f48298892893182d55bae"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 20:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000007fffffff00000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:16 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40000000}, 0x810, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x3, 0x1, 0x14, 0x0, 0x8, 0x200, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffe01, 0x1, @perf_config_ext={0xb0ca, 0x9}, 0x4005, 0x6, 0x1, 0x0, 0x2, 0x0, 0x3, 0x0, 0x100000, 0x0, 0x9}, 0xffffffffffffffff, 0x7, r0, 0x8) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065c6c7d1671e76726469723d2e2f6275732c776f726b6469603d2e2f66696c65312c6c6f7765"]) socket$inet(0x2, 0x0, 0xc0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000000)={@broadcast, @multicast1, @rand_addr=0x64010100}, 0xc) 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) [ 1692.624204][ T8112] overlayfs: unrecognized mount option "uppegvrdir=./bus" or missing value 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, 0x0}, 0x0) [ 1692.660695][ T8117] binder: 8115:8117 unknown command 1074029326 [ 1692.670944][ T8117] binder: 8115:8117 ioctl c0306201 20000040 returned -22 20:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000f0ffffffffffff00000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:16 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x81, 0x2}, 0x18) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7, 0x0, 0x0, 0x3f, 0x0, 0x1000, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp, 0x1020, 0x4, 0x8, 0x6, 0x7f, 0x3ff, 0x3, 0x0, 0xe5, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x4, r1, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c40000000000000000000000000313f8ec8e471e269ca76b885ed4755ef0c597288731dda75cb355fbd3004a61e73e264bfd71d0582dddc2d07ff7e00000000c757861a40629cbffddb657e51171d1248230eef028e7f99127f9f3b249c98869eeb0c67d5ba36a642ea13b477351019e27f7a9910c0c0c997df37a035001414de5017200dfc5ec6bcf6eeeff5fd41eeec76c6a77cde622b629b5028499278487d4e4b1e64a1010da60e88702dd3bca6cd73c0877481774efef130dab1c33f3bb9d5f154208d35afd24db5dc780fbd931354a08cc7e78acbbd8f445452fa9f68996f3f09aef2e79cd1d0c24d22d1caeff5028335b7d62910af5beb24"], 0x0, 0x0, 0x0}) 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, 0x0}, 0x0) [ 1692.783985][ T8112] overlayfs: unrecognized mount option "uppegvrdir=./bus" or missing value 20:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000200000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, 0x0}, 0x0) 20:44:16 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0xd2) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x880, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) unlink(&(0x7f0000000000)='./file0\x00') r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000300000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:16 executing program 2: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x1b, 0x5, 0x780, 0x2c0, 0x148, 0xffffffff, 0x148, 0x0, 0x6b8, 0x6b8, 0xffffffff, 0x6b8, 0x6b8, 0x5, &(0x7f0000000480), {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@mh={{0x24}, {"dcd0", 0x1}}, @common=@unspec=@time={{0x38}, {0xfffffffa, 0x10000, 0x1ed4, 0x5ed, 0x7fff, 0x1f, 0x3}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv6=@mcast2, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, @port=0x4e20, @icmp_id=0x68}}}, {{@ipv6={@empty, @remote, [0x0, 0xff000000, 0xff, 0xffffffff], [0xff, 0x0, 0x0, 0xff000000], 'geneve1\x00', 'bridge0\x00', {}, {}, 0x2c, 0xaf, 0x2, 0x26}, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh1={{0x8c}, {0x84, 0xff, 0x5, 0x5, 0x0, @loopback, @loopback, @private0, [0x0, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff000000], 0x820, 0x2248}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x2, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0x4e23, @gre_key=0x5}}}, {{@ipv6={@local, @mcast2, [0x0, 0x0, 0xffffffff, 0xff000000], [0x0, 0xff, 0xffff00], 'veth1_to_team\x00', '\x00', {0xff}, {}, 0x11, 0x12, 0x3, 0x4}, 0x0, 0x1dc, 0x224, 0x0, {}, [@common=@rt={{0x138}, {0x8, [0x5, 0xffffc000], 0x1, 0x4, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @private1, @local, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x16}, @remote, @dev={0xfe, 0x80, '\x00', 0x18}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}], 0x6}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x1, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@loopback, @icmp_id=0x67, @port=0x4e20}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x42}, [0xffffff00, 0xff000000, 0x0, 0xff], [0xffffff00, 0xffffffff, 0xff000000, 0xff], 'team0\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x53, 0x5, 0x22}, 0x0, 0x18c, 0x1d4, 0x0, {}, [@common=@hl={{0x24}, {0x0, 0x37}}, @common=@unspec=@conntrack3={{0xc4}, {{@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [], @ipv4=@loopback, [0xff, 0xff000000, 0xff, 0xff000000], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0x0, 0xffffff00], @ipv6=@remote, [0xff, 0xffffff00, 0xffffff00, 0x22984abf4c86e390], 0xfffffc01, 0x9, 0x0, 0x4e21, 0x4e22, 0x4e22, 0x4e24, 0x1180, 0x100}, 0x100, 0x808, 0x4e24, 0x4e20, 0x4e21, 0x4e23}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @icmp_id=0x67, @icmp_id=0x66}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x7dc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x80, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x5, 0x1, 0x13}, @flat=@weak_binder={0x77622a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/124, 0x7c, 0x1, 0x1a}}, &(0x7f0000000140)={0x0, 0x1c, 0x34}}}, @request_death, @clear_death={0x400c630f, 0x2}], 0xbb, 0x0, &(0x7f00000002c0)="75cf3f1b75460d9f1b9155924a15fed68c7bb2630a98e57913ba27c96acacdd87e0c69db86f6245520c94cc4c7ba485f789d3cecc9e6265ada6ab9a2770182ed5f237de5012e37091f94e01fd5e7839fdc5b083e67654387aa6f8dd41f5f75c01fbc25e74380bd72cbd0435540e7955df94c67c71b0aac41815d1e68c4f347b05ee5ccb0382e79ea364d67951f24020f5eaa981be9b741becd79a14aec820391540555b2aa1b33d09b005133163c2b62c5d68e954e6d5879b68f0b"}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000e00)={0x24, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x1}], 0xdb, 0x0, &(0x7f0000000d00)="c795b0fd6164c46fc36309b6765b6b561ba762e6acc2ca38413fed9e761a7f44b5cc7c60d4a0f80dae65d05b2d1168754f1648b2b18d262ddebddda166a4107d2a6f1177b792c7b39cf5d95f1c673ee616a571bb24aa54ff6c55edb40a8e47149076352f59f43b4327929d10f92bf13c5e13a49d42e42ecb0ce200a07f48e7c324b3e83eb838cf30cd69e6fcaffe55bb599b4bdbe1ac152b954668095905ac1a4d7fde63dbf01725acf057bb08f3d25989399675951a8672c1e0e7cf18d7c8568ee037c868ffe8f027e7dd91d8dc996b1dbada245bb39b721a5e45"}) 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={0x0}}, 0x0) 20:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000400000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={0x0}}, 0x0) 20:44:16 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c000000020000e14ce7000000006f32eb8fb030a888ecf9a9d4ba9e26a698ed2cb560e5e3658b392c61"], 0x5a, 0x0, 0x0}) 20:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000500000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1693.120535][ T8152] overlayfs: filesystem on './bus' not supported as upperdir 20:44:16 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ee9000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)="b7b0b0b84637944cf19730a3ed474d17eedc8031cf37e7397d33ef11d8d355369c9983097ac6382710f9969414f1db9aa233ca989565185bb1a905343c075f18ee709f6148d0559a0e2d781397529c8640c0f0f73b0a55d161fc98de0228fd266e446d98a90a6cee05fef09c8653fe6262123a6e1336e6c6da6cee55d3ab9ccd94706473098c", 0x86, 0x4000004, 0x1}, 0x3) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r4 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000004c0)={@host}) [ 1693.266611][ T8165] binder: 8164:8165 unknown command 811790 [ 1693.276106][ T8165] binder: 8164:8165 ioctl c0306201 20000040 returned -22 20:44:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={0x0}}, 0x0) 20:44:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000600000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1693.324773][ T8168] binder: 8164:8168 unknown command 811790 [ 1693.332229][ T8168] binder: 8164:8168 ioctl c0306201 20000040 returned -22 20:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000700000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:17 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1694.217369][ T8173] overlayfs: filesystem on './bus' not supported as upperdir 20:44:17 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f62757365312c6c6f7765726469723d2e000000013592deb60000010000000000000000d541d039a7c1a7e739ecd5"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x80, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="a1e351765bc51f8864ebeccf56558437d992537c409785f302957022ddc57e3782d1305ebbec1193270f2ab49e8ca095877a3122ed3f4f2e05062e79529ffecb7b78a490b2bf3997e65058", 0x4b, 0xe6b}], 0x10, &(0x7f00000003c0)={[{'\x00'}, {'overlay\x00'}, {}, {}], [{@fowner_eq}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@dont_hash}, {@audit}, {@subj_role={'subj_role', 0x3d, 'overlay\x00'}}, {@appraise}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@uid_lt={'uid<', 0xee01}}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000800000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x0, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x802, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16dc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x48022}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xef, 0x0, 0x0, 0x9, 0x0, 0x200, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3, 0x4}, 0x48280, 0x0, 0x100, 0x1, 0x7, 0xfce, 0x1000, 0x0, 0x7f, 0x0, 0x202}, 0xffffffffffffffff, 0x2, r1, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x0, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000900000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000e00000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1694.601801][ T8208] overlayfs: missing 'workdir' [ 1694.604028][ T8215] loop1: detected capacity change from 0 to 14 [ 1694.646390][ T8215] Can't find a SQUASHFS superblock on loop1 [ 1694.764391][ T8217] loop1: detected capacity change from 0 to 14 [ 1694.814554][ T8213] overlayfs: missing 'workdir' [ 1694.838476][ T8217] Can't find a SQUASHFS superblock on loop1 20:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x0, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c40000000000000000000000021"], 0x0, 0x0, 0x0}) 20:44:18 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./bus\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workd=./file1,lowerdir=.\x00\x00']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000000)={0x0, 0x8000}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000f00000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000006000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000080)=0x6) 20:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0xa4}}, 0x0) [ 1695.062025][ T8234] binder: 8233:8234 ioctl 40046607 20000080 returned -22 20:44:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:44:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000f000000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1695.285123][ T8229] overlayfs: unrecognized mount option "workd=./file1" or missing value [ 1695.326051][ T1350] ieee802154 phy0 wpan0: encryption failed: -22 [ 1695.334208][ T1350] ieee802154 phy1 wpan1: encryption failed: -22 [ 1695.615431][ T8237] overlayfs: unrecognized mount option "workd=./file1" or missing value 20:44:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c40000000000000003cf83d58a9"], 0x0, 0x0, 0x0}) 20:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000003000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000005000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:19 executing program 1: syz_io_uring_setup(0x801d0, &(0x7f0000000340)={0x0, 0x3f2, 0x0, 0x80000000, 0x2}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2fe9001a0531842cf56469723d2e2f14696c65312c6c6f7765726469723d2e"]) socket$inet(0x2, 0x0, 0xc0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = inotify_init1(0x0) fcntl$getflags(r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index, 0x8, 0x0, 0x1, 0x0, 0x0, {0x0, r7}}, 0x20) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r8 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x2, 0x7fffffff]}, 0x8, 0x80800) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000004c0)={@host}) [ 1695.848428][ T8262] overlayfs: missing 'lowerdir' 20:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000006000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='(\'}^\x00', 0x0, r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x1c, 0x0, &(0x7f0000000080)=[@acquire_done, @increfs={0x40046304, 0x3}], 0xf5, 0x0, &(0x7f00000001c0)="c6f2af7537f5734115c5310148ce202c8e3a47ffab8f647f084f8384ba133f897e7a8d0c9ed65123b0620b3aacfc54ed236d3d4135d4844d05e5f2f0cd70b3f885ebc204d17698a33509b03636d9f09e0b22f6df324165573b918b5626784a20578fb4fc6c84356cad7e886311be42011a1296698d0d2248c6b8eccaa8a46baf5e870d868ba80577e0a19bbc60bbc9d8533848c52fef8d984f3028183adabfe894326ea29d3a2bd14539426937bf0a86df8d2dfb0795b9c34fc0259b4b77ffaa49601b6282dc26b9281f4cefea19db4e5d0a239d4b210d9aa52c02429adf6ea2e7a181a8f7fe7ee1c1ad0e9a6d3fb982fa33f54a02"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) 20:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}]}]}, 0x58}}, 0x0) [ 1695.983123][ T8262] overlayfs: missing 'lowerdir' 20:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000d506000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:19 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000100)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r2}, @flat=@handle={0x73682a85, 0xa, 0x1}, @fd}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) 20:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}]}]}, 0x58}}, 0x0) 20:44:19 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000007000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:19 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000009000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}]}]}, 0x58}}, 0x0) 20:44:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000e000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000f000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1697.027322][ T8290] overlayfs: filesystem on './bus' not supported as upperdir 20:44:20 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c44000000da00000000000000001a081a2d45c957f5a1760c642eb39f0201e6da0615d774f811760f2c8eae6736d1a208b09b31e8798fa13bd2c2c926efcfebde5c0ce1d006ecf749376a8a6e7602aa083a534963b0335fe8ee3633d072052bc332d9722140665fe91b70faf348f54a1a8b6ccf4d9f72ae36b8dcac621c7c64ac29eae3dd463fb0359902d911e3fbb906bb3d3d5d933ea815af2c00212e00b4c516ac769f49f77f92f50a150b35a5b9f4dc8675899176f769df44a510f2accb02d6cf21ea42c2fe38c085a0197760"], 0x0, 0x0, 0x0}) 20:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x94}}, 0x0) 20:44:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000003f000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x94}}, 0x0) 20:44:20 executing program 1: syz_io_uring_setup(0x1d4, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) removexattr(&(0x7f0000000440)='./file1\x00', &(0x7f0000000480)=@random={'security.', '^-.\\@((\x00'}) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) syz_io_uring_setup(0x3721, &(0x7f00000003c0)={0x0, 0x416f, 0x10, 0x0, 0x2cf, 0x0, r3}, &(0x7f0000eec000/0x2000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) syz_io_uring_submit(r1, r0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x2e977ba377506fda, 0x4004, @fd_index=0x1, 0x8, 0x2, 0x2, 0x5, 0x1, {0x2}}, 0x80000001) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="75631a0000002000002e2f6275732cf76f736b6469723d2e2e66696c65312c6c6f7765726469322854a800b69207697bc1723d2e"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r4 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000004c0)={@host}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24, @multicast2}, {0x1, @broadcast}, 0xc16a2f42721a9a58, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 'team0\x00'}) [ 1697.153688][ T8317] binder: 8316:8317 unknown command 1141662478 [ 1697.162859][ T8317] binder: 8316:8317 ioctl c0306201 20000040 returned -22 [ 1697.212323][ T8322] binder: 8316:8322 unknown command 1141662478 20:44:20 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000060000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1697.222099][ T8322] binder: 8316:8322 ioctl c0306201 20000040 returned -22 20:44:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x94}}, 0x0) 20:44:21 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) [ 1697.307915][ T8325] overlayfs: unrecognized mount option "uc" or missing value 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000006d5000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x9c}}, 0x0) 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000f0000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000030000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1697.639507][ T8330] overlayfs: unrecognized mount option "uc" or missing value 20:44:21 executing program 1: syz_io_uring_setup(0x800001d4, &(0x7f0000000340)={0x0, 0xfffffffd}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) faccessat(r0, &(0x7f00000001c0)='./bus\x00', 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x8) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) link(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./file1\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x700b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x0, 0x6, 0x5}, 0x0, 0xfffffffe, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x9c}}, 0x0) 20:44:21 executing program 2: syz_io_uring_setup(0x1d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="75707065726469723d2e2f6292732c776f726b6469723d2e2f66696c6513c487e761752834312c6c692094b9576f756c350000000000"]) r0 = socket$inet(0x2, 0x0, 0xc0) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000180)={{@host, 0x6}, 0x1, 0x2, 0x1}) r5 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) sendfile(r5, r3, 0x0, 0xfff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000100)={{@hyper, 0x9}, 0x0, 0x6, 0xb8c}) 20:44:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x9c}}, 0x0) 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000040030000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000003400000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1697.888483][ T8356] overlayfs: filesystem on './bus' not supported as upperdir 20:44:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0xa0}}, 0x0) 20:44:21 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="7570ff0069723d2e2f66696c65312c6c6f7765726461723d2e"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000fffff00000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0xa0}}, 0x0) [ 1698.100301][ T8350] overlayfs: unrecognized mount option "li Woul5" or missing value 20:44:21 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:21 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0xa0}}, 0x0) 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000100000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000200000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0xa4}}, 0x0) [ 1698.345183][ T8382] overlayfs: unrecognized mount option "up" or missing value [ 1698.444151][ T8385] overlayfs: unrecognized mount option "up" or missing value 20:44:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000300000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:22 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:22 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) signalfd(r0, &(0x7f0000000100)={[0x0, 0x2]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0xa4}}, 0x0) 20:44:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000400000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0xa4}}, 0x0) 20:44:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0xa4}}, 0x0) 20:44:22 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000500000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:22 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0xa4}}, 0x0) [ 1699.416162][ T8424] overlayfs: filesystem on './bus' not supported as upperdir 20:44:23 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x2}}, './bus\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000580)={@dev, @loopback}, &(0x7f00000005c0)=0xc) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:23 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000600000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0xa4}}, 0x0) 20:44:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:23 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000700000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x54}}, 0x0) [ 1700.386402][ T8442] overlayfs: filesystem on './bus' not supported as upperdir 20:44:24 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x54}}, 0x0) 20:44:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000800000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000900000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x54}}, 0x0) 20:44:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1700.633937][ T8477] overlayfs: filesystem on './bus' not supported as upperdir 20:44:24 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75700cb0089869723d2e2f6275730e92015ebd97a8fe3d2e2f66696c65712c6c6f7765726469723d2e"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000e00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x5c}}, 0x0) 20:44:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x5c}}, 0x0) 20:44:24 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000f00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x5c}}, 0x0) [ 1700.909807][ T8490] overlayfs: unrecognized mount option "up ir=./bus^=./fileq" or missing value [ 1701.620748][ T8490] overlayfs: unrecognized mount option "up ir=./bus^=./fileq" or missing value 20:44:25 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) mount$cgroup(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1004000, &(0x7f0000000140)={[{@name={'name', 0x3d, '\x00'}}, {@none}, {@name}], [{@dont_measure}]}) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000003f00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0x60}}, 0x0) 20:44:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0x60}}, 0x0) 20:44:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:25 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000006000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:25 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1701.827806][ T8523] cgroup: Bad value for 'name' [ 1702.394059][ T8523] overlayfs: filesystem on './bus' not supported as upperdir [ 1702.408546][ T8513] cgroup: Bad value for 'name' 20:44:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000ffffff9e00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0x60}}, 0x0) 20:44:26 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r0 = openat$nmem0(0xffffff9c, &(0x7f0000000000), 0x280040, 0x0) shutdown(r0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000006d500000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0x64}}, 0x0) 20:44:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0x64}}, 0x0) 20:44:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000fffffff000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:26 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1703.415153][ T8546] overlayfs: filesystem on './bus' not supported as upperdir 20:44:27 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x4, 0x8, 0x1, 0x0, 0x0, [{{r1}, 0x3}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0x64}}, 0x0) 20:44:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000f0ffff00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 20:44:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) 20:44:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000007fffffff00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0x64}}, 0x0) 20:44:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) [ 1704.418606][ T8582] overlayfs: filesystem on './bus' not supported as upperdir 20:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0x64}}, 0x0) 20:44:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000009effffff00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, 0x0}, 0x0) 20:44:28 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x1}, 0x7ff) 20:44:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0x64}}, 0x0) 20:44:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000f0ffffff00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, 0x0}, 0x0) 20:44:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, 0x0}, 0x0) 20:44:28 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000300000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:28 executing program 0: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x4, 0x8, 0x1, 0x0, 0x0, [{{r1}, 0x3}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={0x0}}, 0x0) [ 1705.401884][ T8605] overlayfs: filesystem on './bus' not supported as upperdir 20:44:29 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000100), 0x800, &(0x7f0000000140)={[{@xino_on}], [{@smackfsdef={'smackfsdef', 0x3d, '-'}}]}) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000034000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={0x0}}, 0x0) 20:44:29 executing program 0: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x1}, 0x7ff) 20:44:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={0x0}}, 0x0) 20:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000fffffffffffff000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000001000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1705.634197][ T8637] overlayfs: unrecognized mount option "smackfsdef=-" or missing value 20:44:29 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000002000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1706.386608][ T8629] overlayfs: unrecognized mount option "smackfsdef=-" or missing value [ 1706.439035][ T8637] overlayfs: filesystem on './bus' not supported as upperdir 20:44:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000003000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:30 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r1 = socket$inet(0x2, 0x0, 0xc0) dup3(r1, r0, 0x80000) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:30 executing program 0: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x1}, 0x7ff) 20:44:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000004000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000005000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, 0x0, 0x1, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x0, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000006000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1707.222071][ T8669] overlayfs: filesystem on './bus' not supported as upperdir 20:44:31 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x16d) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696cff0f00006f7765726469723d2e"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) chdir(&(0x7f0000000000)='./file1\x00') ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:31 executing program 0: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0x8000000) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0x1}, 0x7ff) 20:44:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x0, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000007000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x0, 0x0, 0xfffffffe, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) 20:44:31 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000008000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xd8, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x523a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x64a}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xd8}}, 0x0) [ 1707.713134][ T8689] overlayfs: missing 'lowerdir' 20:44:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0xa4}}, 0x0) [ 1707.885924][ T8695] overlayfs: missing 'lowerdir' 20:44:31 executing program 1: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340)={0x0, 0x0, 0x20}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_io_uring_setup(0x1fb3, &(0x7f0000000980)={0x0, 0x4e6f, 0x10, 0x1, 0x306, 0x0, r0}, &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000000a00), 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r2 = socket$inet6(0xa, 0x0, 0x5) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=.+bus,wobk./file1,lowerRir=.\x00\x00\x00\x00']) socket$inet(0x2, 0x0, 0xc0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r4 = syz_mount_image$omfs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x3, 0x7, &(0x7f00000008c0)=[{&(0x7f0000000140)="1ace51aa4541d085efbbe3dab2c35ac81c8c22", 0x13, 0x200}, {&(0x7f00000003c0)="ad97eaae608e42d6ef156c75acc0c5faa0a8e61a427e94b760ccda5bff440d20f99e778f691207f72ab2aeba446fda859ff0f4e4686c3af36b7096845849698815ce63e850bbca33aceac78e8aed70a1030f3b7f344d78df9be928e30c36539c2a86c3cf2459a7d38c19e0e21a4afc731da1c430ce7019223ce5efb3717cbc254f4191560b89e4f18b9a50ba039aac29c0f494dfe4adad3f787a211c676917d1754c8b7c66e77cbcdb03072068cd6580ec482f355a8d3d1e3e8ba5a71f9caae0f4b415b44534130c5ad66b2b0ea4087d4d283a04ce44e9ebac05fef7624bde1fd73288d4084c11c831257e4a5c4fcfd368a91fb0ff56776f324747ce90", 0xfd, 0x3}, {&(0x7f0000000180)="ccc9dd96d77c23d1d0f489cc20cb80a08fb756ead8f9cc5281875a818a0a029abb534be77d8b32db0b896e2fdc5929afba6687f5174fdbb515eb7cef5a6ad102b5481d80aa43059df51adbc821d3fd4f4e820f8cf3f762b915063a627ccd7d4d06aff6afd8d738e094816caa3cf3c0ddf52118eefb5af2fd26c21ea623560e692b3742619725752e921117c174ce5752b40e272fad2a9bad2f68b48c4714ac572f30fb6a3191c9", 0xa7, 0x3}, {&(0x7f00000034c0)="3cc49ead780e2255061e5e9642d9144765782651f4f5862fb6a2aeab2de89b4c3348f50a3ff823c14d4f7c241a91ea2c600b1550cfe40543ced7fc87021615b995010f4930f36b0e012f7f9d3417a761df0432c8671f95bf621a0ee5db8aeb3ed6925182043d35c2afece1d2e04584edc0466d136c75b22df68e14cc1adee680233152b7b96a0290b233ad56e8e8ff56591ff57776ea9b4ad3731ecf62c3d534d89f5c91ab3a05a660", 0xa9, 0x4}, {&(0x7f00000005c0)="40e3ad558878d91788600b815ede9158fea15f6d0e79da01da0a62e7bfcb9b67577bb3333825a2a26648b4832af0fc1843a1a915376c0147be97183b76d6662badd22ea9cd78fc9a2c8fd7b6a70d7f42d31a74b8269ba00ab89b8293e1a4a70f96535a75d6d14b8e5b6c3b6e601d46800527023721695b09607bd97833e9407430db76e3271f6ad17c292da23ed2d9facb93747c50e9284edb867e0c44b8c390485f2660364114587862a036fbe98b060bf6732e69fcfa1d2060d6973a9170e6a5ab3af9a1a0e815b7630195171559914796b29921", 0xd5, 0x6064}, {&(0x7f00000006c0)="2c282f491905492268e5bc825f35fac7877e9e3fd3c5b96eb27c92cfceb93a44671fe62b21b8335dc6a210b4fbf5a867adbc077e257d01a53753e0ac1116357b31f86db2ee96d45b8be50dfca3121782e5e2ae8e3ec294d27ebf72643e9077f22f937c5f2a22e9f1a229691bf1bff3e7d6f1d7cb9fe853c4bbff8d27042a1c0b35cb7c2ecd2cd502868518d09a909b57e86e8c3b0a583df5cb4e2c18648236347c5f1a005ee388012db78943a46b2ba10c5650a47639362c454b817f564dfa09a7f52f22acb99eb596ef32d53b74b42dc2", 0xd1, 0xa}, {&(0x7f00000007c0)="d0179e64d5a9629a2860fd918d003ed33168c54ebd8c86666dd562dda74dced0b103974a8a205552b409e40115462a0f1aa780d42eec2fadd670f70646a0075f37217abe91a965ed33967fcdd370f9d115135c960297205ad9b9a2eb68567be34aa775f1fa7fe369ae1bd073f3d7aaf8344c20fb8af79658ac84af271df126878f393cf6e5a26970a2da592478da0c67459d8ed52713c550918c24289930c949bbaf5794e6c29434ca8346604378ffdb25c781eb0595831aad95388ba8a82eb00ce96dd89b35f8f2d39ba1c460acfaa33e7fd15609619a79d62674526c602b469946f300190a96d9733aff1d1c72d363bb1c01298cd58fcd23", 0xf9, 0xfff}], 0x1800, &(0x7f0000000940)=ANY=[@ANYBLOB="2c906d4b636b7973666c6f6f723d2c00"]) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f00000004c0)={@host}) recvmsg$unix(r3, &(0x7f0000003200)={&(0x7f0000001d80)=@abs, 0x6e, &(0x7f0000003180)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/200, 0xc8}, {&(0x7f0000002f00)=""/146, 0x92}, {&(0x7f0000002fc0)=""/152, 0x98}, {&(0x7f0000003080)=""/246, 0xf6}], 0x5, &(0x7f00000031c0)=[@cred={{0x18, 0x1, 0x2, {0x0, 0x0}}}], 0x18}, 0x10001) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ee6000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r3, 0x8000000) syz_io_uring_submit(r6, r1, &(0x7f0000003380)=@IORING_OP_STATX={0x15, 0x4, 0x0, r4, &(0x7f0000003240), &(0x7f0000003340)='./bus\x00', 0x10, 0x800, 0x1}, 0xfed2) r7 = getpgid(0xffffffffffffffff) r8 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r8, 0x0, 0x21}, 0x10000, 0x7d, 0x0, 0x10000, r7, 0x0, 0xffff}) r9 = geteuid() syz_mount_image$omfs(&(0x7f0000000a40), &(0x7f0000000a80)='./file1\x00', 0x6, 0x7, &(0x7f0000001d00)=[{&(0x7f0000000ac0)="b2448b516c32464b3d8c0654102b0060b4f18471", 0x14, 0xfffffffc}, {&(0x7f0000000b00)="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", 0x1000, 0x401}, {&(0x7f0000001b00)="81562d53534da0b98843fde60e8763f48a0de2c9d81f6be38c982e64acffdad53f296a941e238202a81ddc4942a3ff4abb2df59db2d9ff1f7122f52ea40485bd1ad5efb25096bab5c62ccf9bf5f8a5fa6b81d5b85b0b3781529a3d14da9aad50ab2faa5e3898d77001", 0x69, 0x3f}, {&(0x7f0000001b80)="9fc3a990aa421ce4ded3138568cf5a0aa60fb9a2eddfa15d0294b6be4d89a10dc0b2be368cd540ef4743b420a6d0ce1f98f4b52f44e041b91eecda6ec8c74fb0b4f47e46c0ddc82938aee1fc91482e262f9d54ba13f3867982ff2f7cec267cb96b55adcc728b6a3fc94ac51030f42383c4f112b55fb09f65dac44c94ebc1748cbfb249e5d64b7ccf", 0x88, 0x8e}, {&(0x7f0000001c40)="6caacc2c985db7e1778d9ab31bd233aa2860", 0x12, 0xb1ff}, {&(0x7f0000001c80)="2d50efeebb5de1e754dd3a96a5be36d7aeea87e9a1289281ea630d3d2ade03f7cd1a1bc7af5cdc4f28e42f28d2f278ba737481", 0x33, 0x7ff}, {&(0x7f0000001cc0)="d5ec39efe3e3773a42ef5a68cc1e88df41903e479b8c585c88", 0x19, 0xffffffff}], 0x800001, &(0x7f00000033c0)=ANY=[@ANYBLOB='/dev/vmci\x00,euid<', @ANYRESDEC=r5, @ANYBLOB=',appraise,uid>', @ANYRESDEC=r8, @ANYBLOB=',fowner<', @ANYRESDEC=r9, @ANYBLOB=',rootcontext=root,measure,euid=', @ANYRESDEC=0x0, @ANYBLOB="b29bae7c631605b59653bbda7d40ed65974845434b2c666f776e655efc35fc723e", @ANYRESDEC=0x0, @ANYBLOB=',smackfsroot=\x00,\x00']) [ 1708.275761][ T8720] overlayfs: unrecognized mount option "wobk./file1" or missing value 20:44:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0xa4}}, 0x0) 20:44:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000009000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1708.344604][ T8720] loop1: detected capacity change from 0 to 96 20:44:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:44:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000000000e000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:32 executing program 0: syz_io_uring_setup(0x1d0, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x2}}, './bus\x00'}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000580)={@dev, @loopback}, &(0x7f00000005c0)=0xc) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) [ 1708.461316][ T8736] overlayfs: unrecognized mount option "wobk./file1" or missing value 20:44:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000000000f000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1708.513277][ T8720] loop1: detected capacity change from 0 to 96 20:44:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x240100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xb0, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire_done, @clear_death, @request_death={0x400c630e, 0x1}, @register_looper, @enter_looper, @enter_looper, @acquire_done={0x40106309, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x2, 0x1c}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x34}}, 0x1000}], 0xde, 0x0, &(0x7f0000000280)="728d9b20b802eecf7ea2eb0e9673ada602ea509ba85e2b3a2610aa06365dbb3d9a14e2ef3698006ae374ca718b7cb4d24e93d44d510e2b5652b499df36a12762746964ef37d2c5507a8351cb5f74bf9b82c63272e8c17777869231dce11094c67135aca3b3d17ef04d65adf6ba65783dc9a1dd0b1a6d41b1262527324aa1794a5bbb4ccb4d2e685678558a94c239d46457de554dee2c6d36795e41943b8f8aff12c003b51da8b51e06efbc1dfb1ffb5366db7bc02de68a37e9829591ced92b000ee76972bd26498bf12d6dd320ed81479fbd187d742e6379c9dd3d3e791c"}) 20:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 20:44:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000000003f000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}]}]}, 0x58}}, 0x0) 20:44:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000060000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:33 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) r0 = socket$inet(0x2, 0x0, 0xc0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = inotify_init1(0x0) fcntl$getflags(r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x2001}, 0x1, {0x0, r7}}, 0xfffffffd) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r8 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}]}]}, 0x58}}, 0x0) 20:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x58, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}]}]}, 0x58}}, 0x0) 20:44:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) openat$kvm(0xffffff9c, &(0x7f0000000380), 0x240100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0xb0, 0x0, &(0x7f00000001c0)=[@register_looper, @acquire_done, @clear_death, @request_death={0x400c630e, 0x1}, @register_looper, @enter_looper, @enter_looper, @acquire_done={0x40106309, 0x3}, @free_buffer, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x5, 0x2, 0x1c}, @flat=@weak_binder={0x77622a85, 0x1000, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x34}}, 0x1000}], 0xde, 0x0, &(0x7f0000000280)="728d9b20b802eecf7ea2eb0e9673ada602ea509ba85e2b3a2610aa06365dbb3d9a14e2ef3698006ae374ca718b7cb4d24e93d44d510e2b5652b499df36a12762746964ef37d2c5507a8351cb5f74bf9b82c63272e8c17777869231dce11094c67135aca3b3d17ef04d65adf6ba65783dc9a1dd0b1a6d41b1262527324aa1794a5bbb4ccb4d2e685678558a94c239d46457de554dee2c6d36795e41943b8f8aff12c003b51da8b51e06efbc1dfb1ffb5366db7bc02de68a37e9829591ced92b000ee76972bd26498bf12d6dd320ed81479fbd187d742e6379c9dd3d3e791c"}) 20:44:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000ffffff9e000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x94}}, 0x0) 20:44:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x94}}, 0x0) 20:44:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000006d5000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1710.324129][ T8757] overlayfs: filesystem on './bus' not supported as upperdir 20:44:34 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100}, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x94, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x80, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x94}}, 0x0) 20:44:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000fffffff0000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:34 executing program 0: r0 = syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000eea000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r0, 0x10000000) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000001, 0x1010, r0, 0x10000000) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x3a4, 0xffffffff, 0x22c, 0x0, 0x11c, 0xffffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@uncond, 0x0, 0xc0, 0x11c, 0x0, {}, [@common=@ah={{0x2c}, {[0x0, 0x9], 0x1}}, @common=@ttl={{0x24}, {0x3}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x81, 0xc, [0x31, 0x1, 0x3e, 0xa, 0x8, 0x15, 0x14, 0x25, 0x35, 0x28, 0x39, 0x24, 0x35, 0x6, 0x1c, 0x5], 0x2, 0x1, 0x3e000000}}}, {{@uncond, 0x0, 0xec, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1}}, @common=@addrtype={{0x2c}, {0x14, 0x10, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@multicast2, @private=0xa010100, 0xffffffff, 0xffffff00, 'veth0_virt_wifi\x00', 'bond0\x00', {}, {}, 0x16, 0x2, 0x3}, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@ah={{0x2c}, {[0xcd98, 0x8000]}}, @common=@icmp={{0x24}, {0xf, "c3ca", 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x400) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) r3 = getpgid(0xffffffffffffffff) r4 = getuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x1, 0x0, 0x0, r4, 0x0, 0x21}, 0x10000, 0x7d, 0x0, 0x10000, r3, 0x0, 0xffff}) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x10401, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x10001}}, {@allow_other}], [{@uid_lt={'uid<', 0xee01}}, {@uid_eq={'uid', 0x3d, r4}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@subj_role={'subj_role', 0x3d, ','}}]}}) 20:44:34 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000007fffffff000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x9c}}, 0x0) 20:44:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x9c}}, 0x0) 20:44:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x9c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x9c}}, 0x0) [ 1710.678768][ T8811] fuse: Bad value for 'fd' [ 1711.378476][ T8803] overlayfs: filesystem on './bus' not supported as upperdir 20:44:35 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x30000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) mount$bind(&(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x48000, 0x0) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000f0ffffffffffff000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0xa0}}, 0x0) 20:44:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000080)=[@increfs={0x40046304, 0x3}, @enter_looper, @acquire_done], 0x0, 0x0, 0x0}) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) dup2(r1, r2) 20:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000002000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0xa0}}, 0x0) 20:44:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000003000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:35 executing program 0: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = inotify_init1(0x0) fcntl$getflags(r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001780)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001700)={0x680880, 0xb1, 0x18}, &(0x7f0000001740)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0xf77f) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) syz_io_uring_submit(r1, r0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xe182165) r8 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000004c0)={@host}) [ 1712.380847][ T8834] overlayfs: filesystem on './bus' not supported as upperdir 20:44:36 executing program 1: mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f61"}}]}]}, 0xa0}}, 0x0) 20:44:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000004000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:36 executing program 0: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = inotify_init1(0x0) fcntl$getflags(r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001780)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001700)={0x680880, 0xb1, 0x18}, &(0x7f0000001740)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0xf77f) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) syz_io_uring_submit(r1, r0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xe182165) r8 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0xa4}}, 0x0) 20:44:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000005000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0xa4}}, 0x0) 20:44:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000006000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1713.444060][ T8857] overlayfs: filesystem on './bus' not supported as upperdir 20:44:37 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r1 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000004c0)={@host}) syz_io_uring_setup(0x52f2, &(0x7f0000000100)={0x0, 0x6abc, 0x1, 0x2, 0x6f, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ee9000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 20:44:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f"}}]}]}, 0xa4}}, 0x0) 20:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000007000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:37 executing program 0: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=.']) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) syz_io_uring_setup(0x5d0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4) r3 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r6 = inotify_init1(0x0) fcntl$getflags(r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000440)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001780)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000001700)={0x680880, 0xb1, 0x18}, &(0x7f0000001740)='./file1\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0xf77f) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2}, 0x0) syz_io_uring_submit(r1, r0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xe182165) r8 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0xa4}}, 0x0) 20:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000008000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0xa4}}, 0x0) 20:44:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000009000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1714.509792][ T8888] overlayfs: filesystem on './bus' not supported as upperdir 20:44:38 executing program 1: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/216, 0xd8}, {&(0x7f0000000500)=""/231, 0xe7}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/22, 0x16}], 0x5, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xc0}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000008c0)=""/253, 0xfd}, {&(0x7f00000009c0)=""/51, 0x33}, {&(0x7f0000000a00)=""/175, 0xaf}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/196, 0xc4}], 0x5, &(0x7f0000001c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x2, 0x10000, &(0x7f0000001c80)={0x0, 0x3938700}) r1 = openat$hpet(0xffffff9c, &(0x7f0000001cc0), 0x420200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001d00)=r1, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e480fb4329d6fd6bde15f34813f6f2a05f623324e994ec4c3ac6a8fd2814065fee444ca808b0e5eb6a6e94849c6a6de7a587c8d0fe6ef42d807bd1023a4dce2426af172cf228b6fc15cd379af4e9f1cb9744a98cda7d75f3c6e542985a2e22faa6764d649fbe2a60f891927f5e84ac2ae42d155b8b747ec5c071eaa1bf70a35b7eddab6457afe01c8dff61ee31ee8f041f259bbeb4978d6"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1810000, &(0x7f0000000140)={[{@redirect_dir={'redirect_dir', 0x3d, './file1/file0'}}, {@nfs_export_on}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, ')'}}]}) 20:44:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xa4, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x90, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "62a1fcc1bb67d1da6e91f50bf6ab288a07fac0288c5f09"}}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f85"}}]}]}, 0xa4}}, 0x0) 20:44:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000e000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:38 executing program 0: syz_io_uring_setup(0x1d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723dff"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r0 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000004c0)={@host}) 20:44:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000f000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "056e096507ba4af4b08900825ebf12ff0f72fd43"}}]}]}, 0x54}}, 0x0) 20:44:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000060000000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1714.874380][ T8929] overlayfs: unrecognized mount option "func=BPRM_CHECK" or missing value [ 1715.219038][ T8911] overlayfs: failed to resolve '': -2 [ 1715.325252][ T8917] overlayfs: failed to resolve '.H2oֽ_4?o*#2NNìjҁ@eDʀ^HIƦzX|B#Bjr"oyNtJͧ_0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0xc0}}, {{&(0x7f0000000840), 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000008c0)=""/253, 0xfd}, {&(0x7f00000009c0)=""/51, 0x33}, {&(0x7f0000000a00)=""/175, 0xaf}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/196, 0xc4}], 0x5, &(0x7f0000001c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x2, 0x10000, &(0x7f0000001c80)={0x0, 0x3938700}) r1 = openat$hpet(0xffffff9c, &(0x7f0000001cc0), 0x420200, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001d00)=r1, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="75707065726469723d2e2f6275732c776f726b6469723d2e2f66696c65312c6c6f7765726469723d2e480fb4329d6fd6bde15f34813f6f2a05f623324e994ec4c3ac6a8fd2814065fee444ca808b0e5eb6a6e94849c6a6de7a587c8d0fe6ef42d807bd1023a4dce2426af172cf228b6fc15cd379af4e9f1cb9744a98cda7d75f3c6e542985a2e22faa6764d649fbe2a60f891927f5e84ac2ae42d155b8b747ec5c071eaa1bf70a35b7eddab6457afe01c8dff61ee31ee8f041f259bbeb4978d6"]) socket$inet(0x2, 0x0, 0xc0) signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x0, 0x4]}, 0x8) r2 = openat$vmci(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f00000004c0)={@host}) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100), 0x1810000, &(0x7f0000000140)={[{@redirect_dir={'redirect_dir', 0x3d, './file1/file0'}}, {@nfs_export_on}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, ')'}}]}) 20:44:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba37"}}]}]}, 0x5c}}, 0x0) [ 1715.918363][ T8957] overlayfs: unrecognized mount option "func=BPRM_CHECK" or missing value [ 1716.187036][ T8951] overlayfs: failed to resolve '.H2oֽ_4?o*#2NNìjҁ@eDʀ^HIƦzX|B#Bjr"oyNtJͧ_ 20:44:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000001000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1719.491436][ T9105] dump_stack_lvl+0xcd/0x134 [ 1719.497671][ T9105] should_fail.cold+0x5/0xa [ 1719.505072][ T9105] _copy_from_user+0x2c/0x180 [ 1719.509019][ T9103] overlayfs: unrecognized mount option "up\erdir=./bus" or missing value [ 1719.512134][ T9105] __get_compat_msghdr+0x93/0x470 [ 1719.530177][ T9105] ? __do_compat_sys_socketcall+0x660/0x660 20:44:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 1) [ 1719.538191][ T9105] ? lock_chain_count+0x20/0x20 [ 1719.545619][ T9105] ? __lock_acquire+0x162f/0x54a0 [ 1719.552456][ T9105] ? lock_chain_count+0x20/0x20 [ 1719.558882][ T9105] get_compat_msghdr+0x87/0x120 [ 1719.565223][ T9105] ? __get_compat_msghdr+0x470/0x470 [ 1719.572538][ T9105] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1719.580593][ T9105] ? __lock_acquire+0xbc2/0x54a0 [ 1719.587000][ T9105] sendmsg_copy_msghdr+0x150/0x160 [ 1719.594173][ T9105] ? do_recvmmsg+0x6d0/0x6d0 [ 1719.600971][ T9105] ? lock_chain_count+0x20/0x20 [ 1719.603533][ T9108] FAULT_INJECTION: forcing a failure. [ 1719.603533][ T9108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.607011][ T9105] ? lock_chain_count+0x20/0x20 [ 1719.607051][ T9105] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1719.607090][ T9105] ___sys_sendmsg+0xc6/0x170 [ 1719.645558][ T9105] ? sendmsg_copy_msghdr+0x160/0x160 [ 1719.654757][ T9105] ? __fget_files+0x21b/0x3e0 [ 1719.661305][ T9105] ? lock_downgrade+0x6e0/0x6e0 [ 1719.669830][ T9105] ? __fget_files+0x23d/0x3e0 [ 1719.677351][ T9105] ? __fget_light+0xea/0x280 [ 1719.683572][ T9105] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1719.692660][ T9105] __sys_sendmsg+0xe5/0x1b0 [ 1719.698681][ T9105] ? __sys_sendmsg_sock+0x30/0x30 [ 1719.705342][ T9105] ? lock_downgrade+0x6e0/0x6e0 [ 1719.712260][ T9105] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1719.720368][ T9105] __do_fast_syscall_32+0x65/0xf0 [ 1719.725891][ T9105] do_fast_syscall_32+0x2f/0x70 [ 1719.731639][ T9105] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1719.740638][ T9105] RIP: 0023:0xf6ec4549 [ 1719.746696][ T9105] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1719.773051][ T9105] RSP: 002b:00000000f44be5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1719.783569][ T9105] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1719.793092][ T9105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1719.802115][ T9105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1719.812247][ T9105] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1719.822968][ T9105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1719.832616][ T9105] [ 1719.837768][ T9108] CPU: 3 PID: 9108 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1719.848122][ T9108] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1719.859694][ T9108] Call Trace: [ 1719.863534][ T9108] [ 1719.866729][ T9108] dump_stack_lvl+0xcd/0x134 [ 1719.872054][ T9108] should_fail.cold+0x5/0xa [ 1719.878631][ T9108] _copy_from_user+0x2c/0x180 [ 1719.884817][ T9108] __get_compat_msghdr+0x93/0x470 [ 1719.891017][ T9108] ? __do_compat_sys_socketcall+0x660/0x660 20:44:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000002000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1719.898889][ T9108] ? lock_chain_count+0x20/0x20 [ 1719.907035][ T9108] ? __lock_acquire+0x162f/0x54a0 [ 1719.914097][ T9108] ? lock_chain_count+0x20/0x20 [ 1719.919582][ T9108] get_compat_msghdr+0x87/0x120 [ 1719.926649][ T9108] ? __get_compat_msghdr+0x470/0x470 [ 1719.933298][ T9108] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1719.941161][ T9108] ? __lock_acquire+0xbc2/0x54a0 [ 1719.949685][ T9108] sendmsg_copy_msghdr+0x150/0x160 [ 1719.958691][ T9108] ? do_recvmmsg+0x6d0/0x6d0 [ 1719.965227][ T9108] ? lock_chain_count+0x20/0x20 [ 1719.972638][ T9108] ? lock_chain_count+0x20/0x20 [ 1719.979522][ T9108] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1719.988580][ T9108] ___sys_sendmsg+0xc6/0x170 [ 1719.994596][ T9108] ? sendmsg_copy_msghdr+0x160/0x160 [ 1720.002498][ T9108] ? __fget_files+0x21b/0x3e0 [ 1720.009004][ T9108] ? lock_downgrade+0x6e0/0x6e0 [ 1720.014972][ T9108] ? __fget_files+0x23d/0x3e0 20:44:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 2) 20:44:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000003000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1720.020693][ T9108] ? __fget_light+0xea/0x280 [ 1720.027634][ T9108] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1720.037870][ T9108] __sys_sendmsg+0xe5/0x1b0 [ 1720.046060][ T9108] ? __sys_sendmsg_sock+0x30/0x30 [ 1720.054025][ T9108] ? lock_downgrade+0x6e0/0x6e0 [ 1720.061128][ T9108] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1720.070508][ T9108] __do_fast_syscall_32+0x65/0xf0 [ 1720.076856][ T9108] do_fast_syscall_32+0x2f/0x70 [ 1720.083431][ T9108] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 20:44:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) (fail_nth: 1) 20:44:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000004000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1720.084281][ T9123] FAULT_INJECTION: forcing a failure. [ 1720.084281][ T9123] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.093163][ T9108] RIP: 0023:0xf6f11549 [ 1720.093192][ T9108] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1720.093217][ T9108] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 20:44:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 2) [ 1720.093243][ T9108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1720.093259][ T9108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 20:44:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000005000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1720.093274][ T9108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1720.093288][ T9108] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.093303][ T9108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.093334][ T9108] [ 1720.243572][ T9129] FAULT_INJECTION: forcing a failure. [ 1720.243572][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.253844][ T9123] CPU: 0 PID: 9123 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1720.292068][ T9123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1720.304808][ T9123] Call Trace: [ 1720.309677][ T9123] [ 1720.314054][ T9123] dump_stack_lvl+0xcd/0x134 [ 1720.320796][ T9123] should_fail.cold+0x5/0xa [ 1720.327107][ T9123] should_failslab+0x5/0x10 20:44:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000006000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1720.333619][ T9123] kmem_cache_alloc_node+0x65/0x3f0 [ 1720.340815][ T9123] ? __alloc_skb+0x215/0x340 [ 1720.347682][ T9123] __alloc_skb+0x215/0x340 [ 1720.354783][ T9123] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1720.363371][ T9123] netlink_sendmsg+0x967/0xda0 [ 1720.369182][ T9123] ? netlink_unicast+0x7d0/0x7d0 [ 1720.375996][ T9123] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1720.384275][ T9123] ? netlink_unicast+0x7d0/0x7d0 [ 1720.391171][ T9123] sock_sendmsg+0xcf/0x120 [ 1720.399061][ T9123] ____sys_sendmsg+0x6e8/0x810 [ 1720.407017][ T9123] ? kernel_sendmsg+0x50/0x50 [ 1720.413801][ T9123] ? do_recvmmsg+0x6d0/0x6d0 [ 1720.419277][ T9123] ? lock_chain_count+0x20/0x20 [ 1720.424927][ T9123] ? lock_chain_count+0x20/0x20 [ 1720.429544][ T9136] FAULT_INJECTION: forcing a failure. [ 1720.429544][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.431612][ T9123] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1720.431661][ T9123] ___sys_sendmsg+0xf3/0x170 [ 1720.431698][ T9123] ? sendmsg_copy_msghdr+0x160/0x160 [ 1720.431735][ T9123] ? __fget_files+0x21b/0x3e0 [ 1720.431766][ T9123] ? lock_downgrade+0x6e0/0x6e0 [ 1720.431810][ T9123] ? __fget_files+0x23d/0x3e0 [ 1720.490836][ T9123] ? __fget_light+0xea/0x280 [ 1720.496946][ T9123] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1720.504888][ T9123] __sys_sendmsg+0xe5/0x1b0 [ 1720.510587][ T9123] ? __sys_sendmsg_sock+0x30/0x30 [ 1720.517034][ T9123] ? lock_downgrade+0x6e0/0x6e0 [ 1720.523957][ T9123] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1720.531932][ T9123] __do_fast_syscall_32+0x65/0xf0 [ 1720.539308][ T9123] do_fast_syscall_32+0x2f/0x70 [ 1720.547014][ T9123] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.553879][ T9123] RIP: 0023:0xf6ec4549 [ 1720.557907][ T9123] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1720.584851][ T9123] RSP: 002b:00000000f44be5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1720.596025][ T9123] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1720.609614][ T9123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1720.623499][ T9123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1720.638960][ T9123] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.650714][ T9123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.662252][ T9123] [ 1720.666517][ T9129] CPU: 2 PID: 9129 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1720.681859][ T9129] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1720.694548][ T9129] Call Trace: [ 1720.699242][ T9129] [ 1720.703684][ T9129] dump_stack_lvl+0xcd/0x134 [ 1720.710464][ T9129] should_fail.cold+0x5/0xa [ 1720.716067][ T9129] should_failslab+0x5/0x10 [ 1720.721872][ T9129] kmem_cache_alloc_node+0x65/0x3f0 [ 1720.729163][ T9129] ? __alloc_skb+0x215/0x340 [ 1720.735006][ T9129] __alloc_skb+0x215/0x340 [ 1720.740089][ T9129] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1720.748129][ T9129] netlink_sendmsg+0x967/0xda0 [ 1720.753966][ T9129] ? netlink_unicast+0x7d0/0x7d0 [ 1720.760555][ T9129] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1720.768259][ T9129] ? netlink_unicast+0x7d0/0x7d0 [ 1720.774292][ T9129] sock_sendmsg+0xcf/0x120 [ 1720.779935][ T9129] ____sys_sendmsg+0x6e8/0x810 [ 1720.785881][ T9129] ? kernel_sendmsg+0x50/0x50 [ 1720.792004][ T9129] ? do_recvmmsg+0x6d0/0x6d0 [ 1720.797885][ T9129] ? perf_trace_lock+0xeb/0x4d0 [ 1720.805475][ T9129] ? lock_chain_count+0x20/0x20 [ 1720.812130][ T9129] ? check_path.constprop.0+0x50/0x50 [ 1720.818953][ T9129] ___sys_sendmsg+0xf3/0x170 [ 1720.824722][ T9129] ? sendmsg_copy_msghdr+0x160/0x160 [ 1720.831129][ T9129] ? __fget_files+0x21b/0x3e0 [ 1720.837330][ T9129] ? lock_downgrade+0x6e0/0x6e0 [ 1720.843329][ T9129] ? __fget_files+0x23d/0x3e0 [ 1720.848783][ T9129] ? __fget_light+0xea/0x280 [ 1720.854003][ T9129] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1720.862221][ T9129] __sys_sendmsg+0xe5/0x1b0 [ 1720.868212][ T9129] ? __sys_sendmsg_sock+0x30/0x30 [ 1720.874233][ T9129] ? lock_downgrade+0x6e0/0x6e0 [ 1720.880152][ T9129] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1720.888032][ T9129] __do_fast_syscall_32+0x65/0xf0 [ 1720.893407][ T9129] do_fast_syscall_32+0x2f/0x70 [ 1720.898348][ T9129] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1720.904934][ T9129] RIP: 0023:0xf6f11549 [ 1720.910340][ T9129] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1720.934061][ T9129] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1720.944582][ T9129] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1720.947791][ T9140] FAULT_INJECTION: forcing a failure. 20:44:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 3) 20:44:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000007000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1720.947791][ T9140] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.954447][ T9129] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1720.954469][ T9129] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1720.954484][ T9129] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1720.954500][ T9129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1720.954533][ T9129] [ 1720.954547][ T9136] CPU: 3 PID: 9136 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0 [ 1720.954581][ T9136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1720.954595][ T9136] Call Trace: [ 1720.954604][ T9136] [ 1720.954636][ T9136] dump_stack_lvl+0xcd/0x134 [ 1720.954668][ T9136] should_fail.cold+0x5/0xa [ 1721.060579][ T9136] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1721.067963][ T9136] should_failslab+0x5/0x10 [ 1721.074026][ T9136] __kmalloc+0x72/0x340 [ 1721.080113][ T9136] tomoyo_realpath_from_path+0xc3/0x620 [ 1721.087633][ T9136] ? tomoyo_profile+0x42/0x50 [ 1721.093748][ T9136] tomoyo_path_number_perm+0x1d5/0x590 [ 1721.100752][ T9136] ? tomoyo_path_number_perm+0x18d/0x590 [ 1721.107729][ T9136] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1721.115301][ T9136] ? check_path.constprop.0+0x50/0x50 [ 1721.122517][ T9136] ? lock_downgrade+0x6e0/0x6e0 [ 1721.128611][ T9136] ? find_held_lock+0x2d/0x110 [ 1721.135551][ T9136] ? __fget_files+0x23d/0x3e0 [ 1721.142388][ T9136] security_file_ioctl+0x50/0xb0 [ 1721.148837][ T9136] __do_compat_sys_ioctl+0x4e/0x290 [ 1721.155817][ T9136] __do_fast_syscall_32+0x65/0xf0 [ 1721.162967][ T9136] do_fast_syscall_32+0x2f/0x70 [ 1721.169386][ T9136] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.177075][ T9136] RIP: 0023:0xf6e7a549 [ 1721.182059][ T9136] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1721.205905][ T9136] RSP: 002b:00000000f44535fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1721.215857][ T9136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1721.224872][ T9136] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1721.234836][ T9136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1721.245130][ T9136] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.255223][ T9136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.265743][ T9136] [ 1721.271420][ T9140] CPU: 0 PID: 9140 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1721.272158][ T9136] ERROR: Out of memory at tomoyo_realpath_from_path. 20:44:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000008000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1721.295058][ T9140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1721.295079][ T9140] Call Trace: [ 1721.295089][ T9140] [ 1721.295100][ T9140] dump_stack_lvl+0xcd/0x134 [ 1721.295134][ T9140] should_fail.cold+0x5/0xa [ 1721.295170][ T9140] should_failslab+0x5/0x10 [ 1721.354457][ T9140] __kmalloc_node_track_caller+0x7d/0x360 [ 1721.363401][ T9140] ? netlink_sendmsg+0x967/0xda0 [ 1721.370235][ T9140] __alloc_skb+0xde/0x340 [ 1721.376302][ T9140] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1721.384895][ T9140] netlink_sendmsg+0x967/0xda0 [ 1721.391178][ T9140] ? netlink_unicast+0x7d0/0x7d0 [ 1721.397447][ T9140] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1721.405269][ T9140] ? netlink_unicast+0x7d0/0x7d0 [ 1721.411909][ T9140] sock_sendmsg+0xcf/0x120 [ 1721.417868][ T9140] ____sys_sendmsg+0x6e8/0x810 [ 1721.423796][ T9140] ? kernel_sendmsg+0x50/0x50 [ 1721.429208][ T9140] ? do_recvmmsg+0x6d0/0x6d0 [ 1721.434501][ T9140] ? perf_trace_lock+0xeb/0x4d0 [ 1721.439930][ T9140] ? lock_chain_count+0x20/0x20 [ 1721.445304][ T9140] ? check_path.constprop.0+0x50/0x50 [ 1721.451658][ T9140] ___sys_sendmsg+0xf3/0x170 [ 1721.457529][ T9140] ? sendmsg_copy_msghdr+0x160/0x160 [ 1721.464228][ T9140] ? __fget_files+0x21b/0x3e0 [ 1721.469994][ T9140] ? lock_downgrade+0x6e0/0x6e0 [ 1721.475960][ T9140] ? __fget_files+0x23d/0x3e0 [ 1721.481337][ T9140] ? __fget_light+0xea/0x280 [ 1721.486544][ T9140] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1721.494126][ T9140] __sys_sendmsg+0xe5/0x1b0 [ 1721.499418][ T9140] ? __sys_sendmsg_sock+0x30/0x30 [ 1721.505424][ T9140] ? lock_downgrade+0x6e0/0x6e0 [ 1721.511681][ T9140] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1721.520893][ T9140] __do_fast_syscall_32+0x65/0xf0 [ 1721.528506][ T9140] do_fast_syscall_32+0x2f/0x70 [ 1721.536106][ T9140] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1721.545632][ T9140] RIP: 0023:0xf6ec4549 [ 1721.551722][ T9140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1721.577283][ T9140] RSP: 002b:00000000f44be5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1721.587927][ T9140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1721.598654][ T9140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1721.608442][ T9140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1721.620551][ T9140] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1721.630103][ T9140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1721.639876][ T9140] 20:44:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 4) 20:44:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000009000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 3) [ 1721.726775][ T9150] FAULT_INJECTION: forcing a failure. [ 1721.726775][ T9150] name failslab, interval 1, probability 0, space 0, times 0 20:44:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000e000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1721.742396][ T9149] FAULT_INJECTION: forcing a failure. [ 1721.742396][ T9149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.748694][ T9150] CPU: 3 PID: 9150 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1721.782097][ T9150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1721.795002][ T9150] Call Trace: [ 1721.799905][ T9150] [ 1721.803541][ T9150] dump_stack_lvl+0xcd/0x134 [ 1721.809029][ T9150] should_fail.cold+0x5/0xa [ 1721.814534][ T9150] should_failslab+0x5/0x10 [ 1721.820235][ T9150] __kmalloc_node_track_caller+0x7d/0x360 [ 1721.829749][ T9150] ? netlink_sendmsg+0x967/0xda0 [ 1721.836403][ T9150] __alloc_skb+0xde/0x340 [ 1721.843217][ T9150] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1721.851546][ T9150] netlink_sendmsg+0x967/0xda0 [ 1721.857400][ T9150] ? netlink_unicast+0x7d0/0x7d0 [ 1721.863341][ T9150] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1721.870900][ T9150] ? netlink_unicast+0x7d0/0x7d0 [ 1721.877809][ T9150] sock_sendmsg+0xcf/0x120 [ 1721.884126][ T9150] ____sys_sendmsg+0x6e8/0x810 [ 1721.889654][ T9150] ? kernel_sendmsg+0x50/0x50 [ 1721.895407][ T9150] ? do_recvmmsg+0x6d0/0x6d0 [ 1721.901157][ T9150] ? lock_chain_count+0x20/0x20 [ 1721.907121][ T9150] ? lock_chain_count+0x20/0x20 [ 1721.912226][ T9150] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1721.919636][ T9150] ___sys_sendmsg+0xf3/0x170 [ 1721.925623][ T9150] ? sendmsg_copy_msghdr+0x160/0x160 [ 1721.932885][ T9150] ? __fget_files+0x21b/0x3e0 [ 1721.938393][ T9150] ? lock_downgrade+0x6e0/0x6e0 [ 1721.944260][ T9150] ? __fget_files+0x23d/0x3e0 [ 1721.950235][ T9150] ? __fget_light+0xea/0x280 [ 1721.956067][ T9150] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1721.964152][ T9150] __sys_sendmsg+0xe5/0x1b0 [ 1721.970506][ T9150] ? __sys_sendmsg_sock+0x30/0x30 [ 1721.976760][ T9150] ? lock_downgrade+0x6e0/0x6e0 [ 1721.982697][ T9150] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1721.991744][ T9150] __do_fast_syscall_32+0x65/0xf0 [ 1721.998795][ T9150] do_fast_syscall_32+0x2f/0x70 [ 1722.042857][ T9150] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c 20:44:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000000f000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000003f000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1722.051660][ T9150] RIP: 0023:0xf6f11549 [ 1722.057190][ T9150] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1722.083409][ T9150] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1722.093607][ T9150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1722.103372][ T9150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1722.117024][ T9150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1722.128034][ T9150] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.139893][ T9150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.151890][ T9150] 20:44:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000060000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1722.155881][ T9149] CPU: 1 PID: 9149 Comm: syz-executor.1 Not tainted 5.15.0-syzkaller #0 [ 1722.167253][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1722.178687][ T9149] Call Trace: [ 1722.182728][ T9149] [ 1722.186503][ T9149] dump_stack_lvl+0xcd/0x134 [ 1722.192389][ T9149] should_fail.cold+0x5/0xa [ 1722.198429][ T9149] _copy_from_iter+0x389/0x1320 [ 1722.204928][ T9149] ? hash_and_copy_to_iter+0x200/0x200 [ 1722.213298][ T9149] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1722.221178][ T9149] ? memset+0x20/0x40 [ 1722.226456][ T9149] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1722.236980][ T9149] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1722.245709][ T9149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.253949][ T9149] ? __phys_addr+0xc4/0x140 [ 1722.260202][ T9149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.269337][ T9149] ? __phys_addr_symbol+0x2c/0x70 [ 1722.278770][ T9149] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1722.286702][ T9149] ? __check_object_size+0x16e/0x3f0 [ 1722.293757][ T9149] netlink_sendmsg+0x7d5/0xda0 [ 1722.300831][ T9149] ? netlink_unicast+0x7d0/0x7d0 [ 1722.308211][ T9149] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1722.316120][ T9149] ? netlink_unicast+0x7d0/0x7d0 [ 1722.322639][ T9149] sock_sendmsg+0xcf/0x120 [ 1722.328665][ T9149] ____sys_sendmsg+0x6e8/0x810 [ 1722.334499][ T9149] ? kernel_sendmsg+0x50/0x50 [ 1722.340544][ T9149] ? do_recvmmsg+0x6d0/0x6d0 [ 1722.347392][ T9149] ? lock_chain_count+0x20/0x20 [ 1722.353962][ T9149] ? lock_chain_count+0x20/0x20 [ 1722.360874][ T9149] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1722.369049][ T9149] ___sys_sendmsg+0xf3/0x170 [ 1722.375715][ T9149] ? sendmsg_copy_msghdr+0x160/0x160 [ 1722.382492][ T9149] ? __fget_files+0x21b/0x3e0 [ 1722.388400][ T9149] ? lock_downgrade+0x6e0/0x6e0 [ 1722.394633][ T9149] ? __fget_files+0x23d/0x3e0 [ 1722.400479][ T9149] ? __fget_light+0xea/0x280 [ 1722.406208][ T9149] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.414001][ T9149] __sys_sendmsg+0xe5/0x1b0 [ 1722.420327][ T9149] ? __sys_sendmsg_sock+0x30/0x30 [ 1722.428575][ T9149] ? lock_downgrade+0x6e0/0x6e0 [ 1722.435081][ T9149] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1722.443833][ T9149] __do_fast_syscall_32+0x65/0xf0 [ 1722.450994][ T9149] do_fast_syscall_32+0x2f/0x70 [ 1722.457152][ T9149] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1722.465642][ T9149] RIP: 0023:0xf6ec4549 [ 1722.470726][ T9149] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1722.495889][ T9149] RSP: 002b:00000000f44be5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1722.507338][ T9149] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1722.518753][ T9149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1722.528845][ T9149] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1722.538772][ T9149] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1722.550005][ T9149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1722.559965][ T9149] 20:44:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x7, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 4) 20:44:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000ffffff9e000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1722.698016][ T9177] FAULT_INJECTION: forcing a failure. [ 1722.698016][ T9177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1722.717214][ T9177] CPU: 2 PID: 9177 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1722.730288][ T9177] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1722.743894][ T9177] Call Trace: [ 1722.747849][ T9177] [ 1722.751432][ T9177] dump_stack_lvl+0xcd/0x134 [ 1722.757502][ T9177] should_fail.cold+0x5/0xa [ 1722.763405][ T9177] _copy_from_iter+0x389/0x1320 [ 1722.769788][ T9177] ? hash_and_copy_to_iter+0x200/0x200 [ 1722.777159][ T9177] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1722.784416][ T9177] ? memset+0x20/0x40 20:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1722.789432][ T9177] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1722.797603][ T9177] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1722.805991][ T9177] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.810732][ T9179] binder: 9172:9179 unknown command 0 [ 1722.814055][ T9177] ? __phys_addr+0xc4/0x140 [ 1722.821229][ T9179] binder: 9172:9179 ioctl c0306201 20000040 returned -22 20:44:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000006d5000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1722.826642][ T9177] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.845335][ T9177] ? __phys_addr_symbol+0x2c/0x70 [ 1722.851074][ T9177] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1722.858214][ T9177] ? __check_object_size+0x16e/0x3f0 [ 1722.864982][ T9177] netlink_sendmsg+0x7d5/0xda0 [ 1722.870792][ T9177] ? netlink_unicast+0x7d0/0x7d0 [ 1722.877115][ T9177] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1722.885827][ T9177] ? netlink_unicast+0x7d0/0x7d0 [ 1722.892458][ T9177] sock_sendmsg+0xcf/0x120 [ 1722.899023][ T9177] ____sys_sendmsg+0x6e8/0x810 [ 1722.905348][ T9177] ? kernel_sendmsg+0x50/0x50 [ 1722.912238][ T9177] ? do_recvmmsg+0x6d0/0x6d0 [ 1722.918415][ T9177] ? lock_chain_count+0x20/0x20 [ 1722.926438][ T9177] ? lock_chain_count+0x20/0x20 20:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x2, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1722.932520][ T9177] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1722.941777][ T9177] ___sys_sendmsg+0xf3/0x170 [ 1722.947326][ T9177] ? sendmsg_copy_msghdr+0x160/0x160 [ 1722.955053][ T9177] ? __fget_files+0x21b/0x3e0 [ 1722.962842][ T9177] ? lock_downgrade+0x6e0/0x6e0 [ 1722.969115][ T9177] ? __fget_files+0x23d/0x3e0 [ 1722.976305][ T9177] ? __fget_light+0xea/0x280 20:44:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000fffffff0000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1722.983312][ T9177] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1722.992089][ T9177] __sys_sendmsg+0xe5/0x1b0 [ 1722.999475][ T9177] ? __sys_sendmsg_sock+0x30/0x30 [ 1723.005734][ T9177] ? lock_downgrade+0x6e0/0x6e0 [ 1723.013249][ T9177] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1723.023648][ T9177] __do_fast_syscall_32+0x65/0xf0 [ 1723.032936][ T9177] do_fast_syscall_32+0x2f/0x70 [ 1723.041615][ T9177] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.053369][ T9177] RIP: 0023:0xf6f11549 [ 1723.059714][ T9177] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1723.087800][ T9177] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1723.098686][ T9177] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1723.108529][ T9177] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1723.119301][ T9177] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1723.128975][ T9177] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.139322][ T9177] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.149160][ T9177] [ 1723.202556][ T9179] binder: 9172:9179 unknown command 0 [ 1723.210968][ T9179] binder: 9172:9179 ioctl c0306201 20000040 returned -22 20:44:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000f0ffff000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x700, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x3, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 5) [ 1723.307341][ T9195] FAULT_INJECTION: forcing a failure. [ 1723.307341][ T9195] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.323526][ T9195] CPU: 2 PID: 9195 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1723.334481][ T9195] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1723.346708][ T9195] Call Trace: [ 1723.351550][ T9195] [ 1723.355493][ T9195] dump_stack_lvl+0xcd/0x134 [ 1723.361939][ T9195] should_fail.cold+0x5/0xa 20:44:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000007fffffff000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1723.368002][ T9195] ? skb_clone+0x170/0x3c0 [ 1723.377819][ T9195] should_failslab+0x5/0x10 [ 1723.384043][ T9195] kmem_cache_alloc+0x5e/0x3a0 [ 1723.390746][ T9195] skb_clone+0x170/0x3c0 [ 1723.396473][ T9195] netlink_deliver_tap+0xa63/0xc30 [ 1723.403091][ T9195] netlink_unicast+0x5e5/0x7d0 [ 1723.409992][ T9195] ? netlink_attachskb+0x880/0x880 [ 1723.416756][ T9195] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1723.424668][ T9195] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1723.432608][ T9195] ? __phys_addr_symbol+0x2c/0x70 [ 1723.439492][ T9195] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1723.447268][ T9195] ? __check_object_size+0x16e/0x3f0 [ 1723.453946][ T9195] netlink_sendmsg+0x86d/0xda0 [ 1723.459687][ T9195] ? netlink_unicast+0x7d0/0x7d0 20:44:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x4, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1723.465501][ T9195] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1723.477651][ T9195] ? netlink_unicast+0x7d0/0x7d0 [ 1723.483876][ T9195] sock_sendmsg+0xcf/0x120 [ 1723.497786][ T9195] ____sys_sendmsg+0x6e8/0x810 [ 1723.504121][ T9195] ? kernel_sendmsg+0x50/0x50 [ 1723.515656][ T9195] ? do_recvmmsg+0x6d0/0x6d0 [ 1723.522554][ T9195] ? lock_chain_count+0x20/0x20 [ 1723.529902][ T9195] ? lock_chain_count+0x20/0x20 [ 1723.536440][ T9195] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1723.544684][ T9195] ___sys_sendmsg+0xf3/0x170 [ 1723.550282][ T9195] ? sendmsg_copy_msghdr+0x160/0x160 [ 1723.558487][ T9195] ? __fget_files+0x21b/0x3e0 [ 1723.565065][ T9195] ? lock_downgrade+0x6e0/0x6e0 [ 1723.572116][ T9195] ? __fget_files+0x23d/0x3e0 [ 1723.579085][ T9195] ? __fget_light+0xea/0x280 [ 1723.584887][ T9195] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1723.592888][ T9195] __sys_sendmsg+0xe5/0x1b0 [ 1723.598429][ T9195] ? __sys_sendmsg_sock+0x30/0x30 [ 1723.605083][ T9195] ? lock_downgrade+0x6e0/0x6e0 [ 1723.612709][ T9195] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1723.623641][ T9195] __do_fast_syscall_32+0x65/0xf0 [ 1723.631262][ T9195] do_fast_syscall_32+0x2f/0x70 [ 1723.638879][ T9195] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1723.647968][ T9195] RIP: 0023:0xf6f11549 [ 1723.652598][ T9195] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1723.676843][ T9195] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 20:44:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000009effffff000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1723.687456][ T9195] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1723.713248][ T9195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1723.722918][ T9195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1723.744959][ T9195] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1723.759901][ T9195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1723.770541][ T9195] 20:44:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 6) 20:44:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x7000000, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:47 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000f0ffffff000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1724.099652][ T9212] FAULT_INJECTION: forcing a failure. [ 1724.099652][ T9212] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.150848][ T9212] CPU: 0 PID: 9212 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1724.161198][ T9212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1724.172987][ T9212] Call Trace: [ 1724.177405][ T9212] [ 1724.181563][ T9212] dump_stack_lvl+0xcd/0x134 [ 1724.189487][ T9212] should_fail.cold+0x5/0xa [ 1724.197474][ T9212] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 1724.206182][ T9212] should_failslab+0x5/0x10 [ 1724.211175][ T9212] __kmalloc+0x72/0x340 [ 1724.215720][ T9212] genl_family_rcv_msg_attrs_parse.constprop.0+0xd7/0x290 [ 1724.224598][ T9212] genl_family_rcv_msg_doit+0xda/0x320 [ 1724.232278][ T9212] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1724.240874][ T9212] ? mutex_lock_io_nested+0x1150/0x1150 [ 1724.247907][ T9212] ? __lock_acquire+0x162f/0x54a0 [ 1724.254025][ T9212] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1724.261774][ T9212] ? __radix_tree_lookup+0x211/0x2a0 [ 1724.268447][ T9212] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1724.275211][ T9212] ? genl_get_cmd+0x3cf/0x480 [ 1724.279885][ T9212] genl_rcv_msg+0x328/0x580 [ 1724.285094][ T9212] ? genl_get_cmd+0x480/0x480 [ 1724.290621][ T9212] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1724.298631][ T9212] ? lock_release+0x720/0x720 [ 1724.304711][ T9212] netlink_rcv_skb+0x153/0x420 [ 1724.311561][ T9212] ? genl_get_cmd+0x480/0x480 [ 1724.317597][ T9212] ? netlink_ack+0xa60/0xa60 [ 1724.322979][ T9212] ? netlink_deliver_tap+0x1b1/0xc30 [ 1724.329600][ T9212] genl_rcv+0x24/0x40 [ 1724.334332][ T9212] netlink_unicast+0x533/0x7d0 [ 1724.340360][ T9212] ? netlink_attachskb+0x880/0x880 [ 1724.346564][ T9212] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1724.353817][ T9212] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1724.361396][ T9212] ? __phys_addr_symbol+0x2c/0x70 [ 1724.367668][ T9212] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1724.375387][ T9212] ? __check_object_size+0x16e/0x3f0 [ 1724.383813][ T9212] netlink_sendmsg+0x86d/0xda0 [ 1724.391685][ T9212] ? netlink_unicast+0x7d0/0x7d0 [ 1724.398801][ T9212] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1724.408276][ T9212] ? netlink_unicast+0x7d0/0x7d0 [ 1724.414608][ T9212] sock_sendmsg+0xcf/0x120 [ 1724.421111][ T9212] ____sys_sendmsg+0x6e8/0x810 [ 1724.427919][ T9212] ? kernel_sendmsg+0x50/0x50 [ 1724.434758][ T9212] ? do_recvmmsg+0x6d0/0x6d0 [ 1724.441299][ T9212] ? lock_chain_count+0x20/0x20 [ 1724.448217][ T9212] ? lock_chain_count+0x20/0x20 [ 1724.454020][ T9212] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1724.461797][ T9212] ___sys_sendmsg+0xf3/0x170 [ 1724.467614][ T9212] ? sendmsg_copy_msghdr+0x160/0x160 [ 1724.475015][ T9212] ? __fget_files+0x21b/0x3e0 [ 1724.481314][ T9212] ? lock_downgrade+0x6e0/0x6e0 [ 1724.487706][ T9212] ? __fget_files+0x23d/0x3e0 [ 1724.493877][ T9212] ? __fget_light+0xea/0x280 [ 1724.500496][ T9212] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1724.508967][ T9212] __sys_sendmsg+0xe5/0x1b0 [ 1724.514789][ T9212] ? __sys_sendmsg_sock+0x30/0x30 [ 1724.521412][ T9212] ? lock_downgrade+0x6e0/0x6e0 [ 1724.527359][ T9212] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1724.536932][ T9212] __do_fast_syscall_32+0x65/0xf0 [ 1724.544142][ T9212] do_fast_syscall_32+0x2f/0x70 [ 1724.550339][ T9212] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1724.558758][ T9212] RIP: 0023:0xf6f11549 [ 1724.564933][ T9212] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1724.588373][ T9212] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1724.599732][ T9212] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1724.609889][ T9212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1724.620389][ T9212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1724.629978][ T9212] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1724.639330][ T9212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1724.648999][ T9212] 20:44:48 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 7) 20:44:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x5, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1724.734919][ T9221] FAULT_INJECTION: forcing a failure. [ 1724.734919][ T9221] name failslab, interval 1, probability 0, space 0, times 0 [ 1724.767646][ T9221] CPU: 1 PID: 9221 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1724.781673][ T9221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1724.797914][ T9221] Call Trace: [ 1724.802896][ T9221] [ 1724.807949][ T9221] dump_stack_lvl+0xcd/0x134 [ 1724.814996][ T9221] should_fail.cold+0x5/0xa [ 1724.822656][ T9221] ? tipc_aead_init.constprop.0+0x55/0x8f0 [ 1724.831560][ T9221] should_failslab+0x5/0x10 [ 1724.838476][ T9221] kmem_cache_alloc_trace+0x55/0x2c0 [ 1724.845765][ T9221] tipc_aead_init.constprop.0+0x55/0x8f0 [ 1724.854561][ T9221] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1724.863154][ T9221] ? __crypto_alg_lookup+0x2ad/0x310 [ 1724.868790][ T9221] tipc_crypto_key_init+0x82/0x110 [ 1724.875351][ T9221] ? tipc_ehdr_validate+0x240/0x240 20:44:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000003000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1724.882042][ T9221] ? crypto_mod_put+0x8c/0x100 [ 1724.888227][ T9221] tipc_nl_node_set_key+0xa5d/0xf70 [ 1724.895497][ T9221] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1724.904494][ T9221] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1724.913120][ T9221] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1724.922820][ T9221] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1724.934181][ T9221] genl_family_rcv_msg_doit+0x228/0x320 [ 1724.940914][ T9221] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1724.952013][ T9221] ? mutex_lock_io_nested+0x1150/0x1150 [ 1724.960579][ T9221] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1724.969558][ T9221] ? __radix_tree_lookup+0x211/0x2a0 [ 1724.977267][ T9221] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1724.985933][ T9221] ? genl_get_cmd+0x3cf/0x480 [ 1724.993602][ T9221] genl_rcv_msg+0x328/0x580 [ 1725.000403][ T9221] ? genl_get_cmd+0x480/0x480 [ 1725.006981][ T9221] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1725.015666][ T9221] ? lock_release+0x720/0x720 [ 1725.021824][ T9221] netlink_rcv_skb+0x153/0x420 [ 1725.027986][ T9221] ? genl_get_cmd+0x480/0x480 [ 1725.034465][ T9221] ? netlink_ack+0xa60/0xa60 [ 1725.040883][ T9221] ? netlink_deliver_tap+0x1b1/0xc30 [ 1725.048181][ T9221] genl_rcv+0x24/0x40 [ 1725.053716][ T9221] netlink_unicast+0x533/0x7d0 [ 1725.060335][ T9221] ? netlink_attachskb+0x880/0x880 [ 1725.067480][ T9221] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.075380][ T9221] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.082992][ T9221] ? __phys_addr_symbol+0x2c/0x70 [ 1725.090684][ T9221] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1725.099567][ T9221] ? __check_object_size+0x16e/0x3f0 [ 1725.107313][ T9221] netlink_sendmsg+0x86d/0xda0 [ 1725.112643][ T9221] ? netlink_unicast+0x7d0/0x7d0 [ 1725.117870][ T9221] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.125241][ T9221] ? netlink_unicast+0x7d0/0x7d0 [ 1725.131341][ T9221] sock_sendmsg+0xcf/0x120 [ 1725.137043][ T9221] ____sys_sendmsg+0x6e8/0x810 [ 1725.142825][ T9221] ? kernel_sendmsg+0x50/0x50 [ 1725.149030][ T9221] ? do_recvmmsg+0x6d0/0x6d0 [ 1725.154968][ T9221] ? lock_chain_count+0x20/0x20 [ 1725.161892][ T9221] ? lock_chain_count+0x20/0x20 [ 1725.168032][ T9221] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1725.176592][ T9221] ___sys_sendmsg+0xf3/0x170 [ 1725.183983][ T9221] ? sendmsg_copy_msghdr+0x160/0x160 [ 1725.192147][ T9221] ? __fget_files+0x21b/0x3e0 [ 1725.198355][ T9221] ? lock_downgrade+0x6e0/0x6e0 [ 1725.204974][ T9221] ? __fget_files+0x23d/0x3e0 [ 1725.212009][ T9221] ? __fget_light+0xea/0x280 [ 1725.217570][ T9221] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.226692][ T9221] __sys_sendmsg+0xe5/0x1b0 [ 1725.232746][ T9221] ? __sys_sendmsg_sock+0x30/0x30 [ 1725.240171][ T9221] ? lock_downgrade+0x6e0/0x6e0 [ 1725.247396][ T9221] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1725.256925][ T9221] __do_fast_syscall_32+0x65/0xf0 [ 1725.264475][ T9221] do_fast_syscall_32+0x2f/0x70 [ 1725.270529][ T9221] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1725.278365][ T9221] RIP: 0023:0xf6f11549 [ 1725.283142][ T9221] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1725.312291][ T9221] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1725.323328][ T9221] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1725.333407][ T9221] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1725.345951][ T9221] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1725.356174][ T9221] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1725.366698][ T9221] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1725.378885][ T9221] 20:44:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 8) 20:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x6, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000340000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1725.518986][ T9230] FAULT_INJECTION: forcing a failure. [ 1725.518986][ T9230] name failslab, interval 1, probability 0, space 0, times 0 [ 1725.535763][ T9230] CPU: 1 PID: 9230 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1725.546528][ T9230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1725.559155][ T9230] Call Trace: [ 1725.562417][ T9230] [ 1725.565322][ T9230] dump_stack_lvl+0xcd/0x134 [ 1725.570161][ T9230] should_fail.cold+0x5/0xa [ 1725.574879][ T9230] ? crypto_create_tfm_node+0x7f/0x330 [ 1725.580625][ T9230] should_failslab+0x5/0x10 [ 1725.586661][ T9230] __kmalloc_node+0x75/0x390 [ 1725.592394][ T9230] crypto_create_tfm_node+0x7f/0x330 [ 1725.599623][ T9230] crypto_alloc_tfm_node+0x107/0x260 [ 1725.606138][ T9230] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1725.612900][ T9230] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.620978][ T9230] tipc_crypto_key_init+0x82/0x110 [ 1725.627900][ T9230] ? tipc_ehdr_validate+0x240/0x240 [ 1725.634366][ T9230] ? crypto_mod_put+0x8c/0x100 [ 1725.641220][ T9230] tipc_nl_node_set_key+0xa5d/0xf70 [ 1725.647972][ T9230] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1725.655827][ T9230] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.663512][ T9230] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1725.673702][ T9230] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1725.683483][ T9230] genl_family_rcv_msg_doit+0x228/0x320 [ 1725.690511][ T9230] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1725.700050][ T9230] ? mutex_lock_io_nested+0x1150/0x1150 [ 1725.707180][ T9230] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1725.713852][ T9230] ? __radix_tree_lookup+0x211/0x2a0 [ 1725.720566][ T9230] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.740904][ T9230] ? genl_get_cmd+0x3cf/0x480 [ 1725.746457][ T9230] genl_rcv_msg+0x328/0x580 [ 1725.763270][ T9230] ? genl_get_cmd+0x480/0x480 [ 1725.772888][ T9230] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1725.780390][ T9230] ? lock_release+0x720/0x720 [ 1725.785993][ T9230] netlink_rcv_skb+0x153/0x420 [ 1725.808019][ T9230] ? genl_get_cmd+0x480/0x480 [ 1725.813683][ T9230] ? netlink_ack+0xa60/0xa60 [ 1725.822511][ T9230] ? netlink_deliver_tap+0x1b1/0xc30 [ 1725.829354][ T9230] genl_rcv+0x24/0x40 [ 1725.834478][ T9230] netlink_unicast+0x533/0x7d0 [ 1725.840632][ T9230] ? netlink_attachskb+0x880/0x880 [ 1725.847212][ T9230] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.856291][ T9230] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.865452][ T9230] ? __phys_addr_symbol+0x2c/0x70 [ 1725.872875][ T9230] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1725.879946][ T9230] ? __check_object_size+0x16e/0x3f0 [ 1725.886501][ T9230] netlink_sendmsg+0x86d/0xda0 [ 1725.892302][ T9230] ? netlink_unicast+0x7d0/0x7d0 [ 1725.898752][ T9230] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1725.906314][ T9230] ? netlink_unicast+0x7d0/0x7d0 [ 1725.912661][ T9230] sock_sendmsg+0xcf/0x120 [ 1725.918048][ T9230] ____sys_sendmsg+0x6e8/0x810 [ 1725.924176][ T9230] ? kernel_sendmsg+0x50/0x50 [ 1725.929819][ T9230] ? do_recvmmsg+0x6d0/0x6d0 [ 1725.935448][ T9230] ? lock_chain_count+0x20/0x20 [ 1725.941629][ T9230] ? lock_chain_count+0x20/0x20 [ 1725.947427][ T9230] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1725.955031][ T9230] ___sys_sendmsg+0xf3/0x170 [ 1725.961077][ T9230] ? sendmsg_copy_msghdr+0x160/0x160 [ 1725.967788][ T9230] ? __fget_files+0x21b/0x3e0 [ 1725.973713][ T9230] ? lock_downgrade+0x6e0/0x6e0 [ 1725.979733][ T9230] ? __fget_files+0x23d/0x3e0 [ 1725.985608][ T9230] ? __fget_light+0xea/0x280 [ 1725.991076][ T9230] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1725.999110][ T9230] __sys_sendmsg+0xe5/0x1b0 [ 1726.005436][ T9230] ? __sys_sendmsg_sock+0x30/0x30 [ 1726.012241][ T9230] ? lock_downgrade+0x6e0/0x6e0 [ 1726.019025][ T9230] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1726.028435][ T9230] __do_fast_syscall_32+0x65/0xf0 [ 1726.035417][ T9230] do_fast_syscall_32+0x2f/0x70 [ 1726.042121][ T9230] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.050273][ T9230] RIP: 0023:0xf6f11549 [ 1726.055407][ T9230] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1726.080024][ T9230] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1726.090169][ T9230] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1726.100199][ T9230] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1726.109672][ T9230] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1726.120254][ T9230] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.130330][ T9230] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.141325][ T9230] 20:44:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x700000000000000, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x7, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 9) 20:44:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000fffffffffffff0000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x8, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1726.264801][ T9241] FAULT_INJECTION: forcing a failure. 20:44:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000010000000000000000000000150000fb"], 0x58}}, 0x0) [ 1726.264801][ T9241] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.292052][ T9241] CPU: 0 PID: 9241 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1726.302067][ T9241] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1726.313447][ T9241] Call Trace: [ 1726.317410][ T9241] [ 1726.321298][ T9241] dump_stack_lvl+0xcd/0x134 [ 1726.326679][ T9241] should_fail.cold+0x5/0xa [ 1726.332082][ T9241] ? crypto_create_tfm_node+0x7f/0x330 [ 1726.338056][ T9241] should_failslab+0x5/0x10 [ 1726.343596][ T9241] __kmalloc_node+0x75/0x390 [ 1726.349357][ T9241] crypto_create_tfm_node+0x7f/0x330 [ 1726.355176][ T9241] crypto_alloc_tfm_node+0x107/0x260 [ 1726.361612][ T9241] cryptd_alloc_aead+0x101/0x200 [ 1726.368049][ T9241] ? cryptd_alloc_ahash+0x200/0x200 [ 1726.374573][ T9241] ? __kmalloc_node+0x62/0x390 [ 1726.382002][ T9241] simd_aead_init+0x67/0x1b0 [ 1726.387984][ T9241] ? simd_aead_exit+0x40/0x40 [ 1726.394145][ T9241] crypto_aead_init_tfm+0x138/0x1a0 [ 1726.401008][ T9241] crypto_create_tfm_node+0x10d/0x330 [ 1726.407673][ T9241] crypto_alloc_tfm_node+0x107/0x260 [ 1726.414412][ T9241] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1726.421608][ T9241] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1726.429633][ T9241] tipc_crypto_key_init+0x82/0x110 [ 1726.436527][ T9241] ? tipc_ehdr_validate+0x240/0x240 [ 1726.442836][ T9241] ? crypto_mod_put+0x8c/0x100 [ 1726.449207][ T9241] tipc_nl_node_set_key+0xa5d/0xf70 [ 1726.455963][ T9241] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1726.463569][ T9241] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1726.471626][ T9241] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1726.481220][ T9241] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1726.490412][ T9241] genl_family_rcv_msg_doit+0x228/0x320 [ 1726.497756][ T9241] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1726.506871][ T9241] ? mutex_lock_io_nested+0x1150/0x1150 [ 1726.513773][ T9241] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1726.521629][ T9241] ? __radix_tree_lookup+0x211/0x2a0 [ 1726.528405][ T9241] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1726.535884][ T9241] ? genl_get_cmd+0x3cf/0x480 [ 1726.541514][ T9241] genl_rcv_msg+0x328/0x580 [ 1726.546891][ T9241] ? genl_get_cmd+0x480/0x480 [ 1726.552261][ T9241] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1726.558886][ T9241] ? lock_release+0x720/0x720 [ 1726.564165][ T9241] netlink_rcv_skb+0x153/0x420 [ 1726.569279][ T9241] ? genl_get_cmd+0x480/0x480 [ 1726.574813][ T9241] ? netlink_ack+0xa60/0xa60 [ 1726.579757][ T9241] ? netlink_deliver_tap+0x1b1/0xc30 [ 1726.585948][ T9241] genl_rcv+0x24/0x40 [ 1726.590325][ T9241] netlink_unicast+0x533/0x7d0 [ 1726.595725][ T9241] ? netlink_attachskb+0x880/0x880 [ 1726.602094][ T9241] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1726.608646][ T9241] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1726.615227][ T9241] ? __phys_addr_symbol+0x2c/0x70 [ 1726.621137][ T9241] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1726.628212][ T9241] ? __check_object_size+0x16e/0x3f0 [ 1726.634986][ T9241] netlink_sendmsg+0x86d/0xda0 [ 1726.641757][ T9241] ? netlink_unicast+0x7d0/0x7d0 [ 1726.648728][ T9241] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1726.656136][ T9241] ? netlink_unicast+0x7d0/0x7d0 [ 1726.662511][ T9241] sock_sendmsg+0xcf/0x120 [ 1726.668012][ T9241] ____sys_sendmsg+0x6e8/0x810 [ 1726.674222][ T9241] ? kernel_sendmsg+0x50/0x50 [ 1726.679958][ T9241] ? do_recvmmsg+0x6d0/0x6d0 [ 1726.685925][ T9241] ? lock_chain_count+0x20/0x20 [ 1726.692352][ T9241] ? lock_chain_count+0x20/0x20 [ 1726.698589][ T9241] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1726.706033][ T9241] ___sys_sendmsg+0xf3/0x170 [ 1726.712173][ T9241] ? sendmsg_copy_msghdr+0x160/0x160 [ 1726.718894][ T9241] ? __fget_files+0x21b/0x3e0 [ 1726.723938][ T9241] ? lock_downgrade+0x6e0/0x6e0 [ 1726.729020][ T9241] ? __fget_files+0x23d/0x3e0 [ 1726.733788][ T9241] ? __fget_light+0xea/0x280 [ 1726.739316][ T9241] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1726.746641][ T9241] __sys_sendmsg+0xe5/0x1b0 [ 1726.752047][ T9241] ? __sys_sendmsg_sock+0x30/0x30 [ 1726.757886][ T9241] ? lock_downgrade+0x6e0/0x6e0 [ 1726.763985][ T9241] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1726.772418][ T9241] __do_fast_syscall_32+0x65/0xf0 [ 1726.779210][ T9241] do_fast_syscall_32+0x2f/0x70 [ 1726.785444][ T9241] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1726.793591][ T9241] RIP: 0023:0xf6f11549 [ 1726.798647][ T9241] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1726.822591][ T9241] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1726.833408][ T9241] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1726.843753][ T9241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1726.853146][ T9241] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1726.862712][ T9241] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1726.872860][ T9241] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1726.882249][ T9241] 20:44:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 10) 20:44:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x9, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000020000000000000000000000150000fb"], 0x58}}, 0x0) [ 1726.958296][ T9257] FAULT_INJECTION: forcing a failure. [ 1726.958296][ T9257] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.975577][ T9257] CPU: 0 PID: 9257 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1726.987779][ T9257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1726.998941][ T9257] Call Trace: [ 1727.002182][ T9257] [ 1727.005102][ T9257] dump_stack_lvl+0xcd/0x134 [ 1727.010349][ T9257] should_fail.cold+0x5/0xa [ 1727.015729][ T9257] ? crypto_create_tfm_node+0x7f/0x330 [ 1727.022493][ T9257] should_failslab+0x5/0x10 [ 1727.028286][ T9257] __kmalloc_node+0x75/0x390 [ 1727.034301][ T9257] crypto_create_tfm_node+0x7f/0x330 [ 1727.041130][ T9257] crypto_spawn_tfm2+0x60/0xb0 [ 1727.047093][ T9257] ? cryptd_hash_init_tfm+0x120/0x120 [ 1727.053397][ T9257] cryptd_aead_init_tfm+0x3c/0x140 [ 1727.060193][ T9257] ? cryptd_hash_init_tfm+0x120/0x120 [ 1727.070993][ T9257] crypto_aead_init_tfm+0x138/0x1a0 [ 1727.079503][ T9257] crypto_create_tfm_node+0x10d/0x330 [ 1727.086505][ T9257] crypto_alloc_tfm_node+0x107/0x260 [ 1727.093948][ T9257] cryptd_alloc_aead+0x101/0x200 [ 1727.100291][ T9257] ? cryptd_alloc_ahash+0x200/0x200 [ 1727.106576][ T9257] ? __kmalloc_node+0x62/0x390 [ 1727.112531][ T9257] simd_aead_init+0x67/0x1b0 [ 1727.118506][ T9257] ? simd_aead_exit+0x40/0x40 [ 1727.124269][ T9257] crypto_aead_init_tfm+0x138/0x1a0 [ 1727.145318][ T9257] crypto_create_tfm_node+0x10d/0x330 [ 1727.152834][ T9257] crypto_alloc_tfm_node+0x107/0x260 [ 1727.160660][ T9257] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1727.168507][ T9257] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1727.176443][ T9257] tipc_crypto_key_init+0x82/0x110 [ 1727.184419][ T9257] ? tipc_ehdr_validate+0x240/0x240 [ 1727.191558][ T9257] ? crypto_mod_put+0x8c/0x100 [ 1727.197753][ T9257] tipc_nl_node_set_key+0xa5d/0xf70 [ 1727.204604][ T9257] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1727.212370][ T9257] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1727.220587][ T9257] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1727.229764][ T9257] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1727.240799][ T9257] genl_family_rcv_msg_doit+0x228/0x320 [ 1727.249519][ T9257] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1727.257775][ T9257] ? mutex_lock_io_nested+0x1150/0x1150 [ 1727.264256][ T9257] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1727.271269][ T9257] ? __radix_tree_lookup+0x211/0x2a0 [ 1727.276633][ T9257] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1727.283709][ T9257] ? genl_get_cmd+0x3cf/0x480 [ 1727.290189][ T9257] genl_rcv_msg+0x328/0x580 [ 1727.295404][ T9257] ? genl_get_cmd+0x480/0x480 [ 1727.300996][ T9257] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1727.308781][ T9257] ? lock_release+0x720/0x720 [ 1727.314249][ T9257] netlink_rcv_skb+0x153/0x420 [ 1727.319113][ T9257] ? genl_get_cmd+0x480/0x480 [ 1727.324767][ T9257] ? netlink_ack+0xa60/0xa60 [ 1727.330417][ T9257] ? netlink_deliver_tap+0x1b1/0xc30 [ 1727.337176][ T9257] genl_rcv+0x24/0x40 [ 1727.342692][ T9257] netlink_unicast+0x533/0x7d0 [ 1727.349359][ T9257] ? netlink_attachskb+0x880/0x880 [ 1727.356646][ T9257] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1727.364385][ T9257] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1727.372496][ T9257] ? __phys_addr_symbol+0x2c/0x70 [ 1727.379101][ T9257] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1727.387975][ T9257] ? __check_object_size+0x16e/0x3f0 [ 1727.396495][ T9257] netlink_sendmsg+0x86d/0xda0 [ 1727.402748][ T9257] ? netlink_unicast+0x7d0/0x7d0 [ 1727.408944][ T9257] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1727.416903][ T9257] ? netlink_unicast+0x7d0/0x7d0 [ 1727.423941][ T9257] sock_sendmsg+0xcf/0x120 [ 1727.429573][ T9257] ____sys_sendmsg+0x6e8/0x810 [ 1727.436229][ T9257] ? kernel_sendmsg+0x50/0x50 [ 1727.442526][ T9257] ? do_recvmmsg+0x6d0/0x6d0 [ 1727.448488][ T9257] ? lock_chain_count+0x20/0x20 [ 1727.454953][ T9257] ? lock_chain_count+0x20/0x20 [ 1727.461145][ T9257] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1727.468654][ T9257] ___sys_sendmsg+0xf3/0x170 [ 1727.473784][ T9257] ? sendmsg_copy_msghdr+0x160/0x160 [ 1727.480358][ T9257] ? __fget_files+0x21b/0x3e0 [ 1727.485368][ T9257] ? lock_downgrade+0x6e0/0x6e0 [ 1727.490787][ T9257] ? __fget_files+0x23d/0x3e0 [ 1727.496761][ T9257] ? __fget_light+0xea/0x280 [ 1727.504043][ T9257] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1727.512296][ T9257] __sys_sendmsg+0xe5/0x1b0 [ 1727.518348][ T9257] ? __sys_sendmsg_sock+0x30/0x30 [ 1727.524701][ T9257] ? lock_downgrade+0x6e0/0x6e0 [ 1727.530413][ T9257] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1727.539460][ T9257] __do_fast_syscall_32+0x65/0xf0 [ 1727.545244][ T9257] do_fast_syscall_32+0x2f/0x70 [ 1727.550381][ T9257] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1727.557119][ T9257] RIP: 0023:0xf6f11549 [ 1727.562184][ T9257] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1727.585755][ T9257] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1727.594305][ T9257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1727.604766][ T9257] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1727.615432][ T9257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1727.626041][ T9257] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1727.637443][ T9257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1727.647936][ T9257] 20:44:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000030000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xc, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 11) 20:44:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x7}], 0x0, 0x0, &(0x7f00000001c0)}) [ 1727.746329][ T9269] FAULT_INJECTION: forcing a failure. 20:44:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000040000000000000000000000150000fb"], 0x58}}, 0x0) [ 1727.746329][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 1727.763834][ T9269] CPU: 0 PID: 9269 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1727.774232][ T9269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1727.785438][ T9269] Call Trace: [ 1727.790509][ T9269] [ 1727.794311][ T9269] dump_stack_lvl+0xcd/0x134 [ 1727.799569][ T9269] should_fail.cold+0x5/0xa [ 1727.805252][ T9269] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1727.812881][ T9269] should_failslab+0x5/0x10 [ 1727.818617][ T9269] kmem_cache_alloc_trace+0x55/0x2c0 [ 1727.826052][ T9269] ? crypto_aead_setkey+0x10f/0x290 [ 1727.833470][ T9269] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1727.841382][ T9269] tipc_crypto_key_init+0x82/0x110 [ 1727.847998][ T9269] ? tipc_ehdr_validate+0x240/0x240 [ 1727.854500][ T9269] ? crypto_mod_put+0x8c/0x100 [ 1727.860784][ T9269] tipc_nl_node_set_key+0xa5d/0xf70 [ 1727.867309][ T9269] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1727.876286][ T9269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1727.885039][ T9269] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1727.894555][ T9269] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1727.903230][ T9269] genl_family_rcv_msg_doit+0x228/0x320 [ 1727.910127][ T9269] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1727.919884][ T9269] ? mutex_lock_io_nested+0x1150/0x1150 [ 1727.927279][ T9269] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1727.935681][ T9269] ? __radix_tree_lookup+0x211/0x2a0 [ 1727.942018][ T9269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1727.950155][ T9269] ? genl_get_cmd+0x3cf/0x480 [ 1727.956241][ T9269] genl_rcv_msg+0x328/0x580 [ 1727.961934][ T9269] ? genl_get_cmd+0x480/0x480 [ 1727.967932][ T9269] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1727.976473][ T9269] ? lock_release+0x720/0x720 [ 1727.982495][ T9269] netlink_rcv_skb+0x153/0x420 [ 1727.988909][ T9269] ? genl_get_cmd+0x480/0x480 [ 1727.995293][ T9269] ? netlink_ack+0xa60/0xa60 [ 1728.001394][ T9269] ? netlink_deliver_tap+0x1b1/0xc30 [ 1728.007827][ T9269] genl_rcv+0x24/0x40 [ 1728.012790][ T9269] netlink_unicast+0x533/0x7d0 [ 1728.018743][ T9269] ? netlink_attachskb+0x880/0x880 [ 1728.025551][ T9269] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1728.033710][ T9269] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1728.040589][ T9269] ? __phys_addr_symbol+0x2c/0x70 [ 1728.045614][ T9269] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1728.052002][ T9269] ? __check_object_size+0x16e/0x3f0 [ 1728.057464][ T9269] netlink_sendmsg+0x86d/0xda0 [ 1728.063323][ T9269] ? netlink_unicast+0x7d0/0x7d0 [ 1728.069346][ T9269] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1728.076893][ T9269] ? netlink_unicast+0x7d0/0x7d0 [ 1728.082431][ T9269] sock_sendmsg+0xcf/0x120 [ 1728.087303][ T9269] ____sys_sendmsg+0x6e8/0x810 [ 1728.093497][ T9269] ? kernel_sendmsg+0x50/0x50 [ 1728.099335][ T9269] ? do_recvmmsg+0x6d0/0x6d0 [ 1728.105523][ T9269] ? lock_chain_count+0x20/0x20 [ 1728.111068][ T9269] ? lock_chain_count+0x20/0x20 [ 1728.117491][ T9269] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1728.124369][ T9269] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1728.132525][ T9269] ___sys_sendmsg+0xf3/0x170 [ 1728.139103][ T9269] ? sendmsg_copy_msghdr+0x160/0x160 [ 1728.146003][ T9269] ? __fget_files+0x21b/0x3e0 [ 1728.152183][ T9269] ? lock_downgrade+0x6e0/0x6e0 [ 1728.158188][ T9269] ? __fget_files+0x23d/0x3e0 [ 1728.164808][ T9269] ? __fget_light+0xea/0x280 [ 1728.170883][ T9269] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1728.178496][ T9269] __sys_sendmsg+0xe5/0x1b0 [ 1728.183419][ T9269] ? __sys_sendmsg_sock+0x30/0x30 [ 1728.189150][ T9269] ? lock_downgrade+0x6e0/0x6e0 [ 1728.194412][ T9269] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1728.202262][ T9269] __do_fast_syscall_32+0x65/0xf0 [ 1728.208046][ T9269] do_fast_syscall_32+0x2f/0x70 [ 1728.213116][ T9269] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.221484][ T9269] RIP: 0023:0xf6f11549 [ 1728.226474][ T9269] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1728.247157][ T9269] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1728.257019][ T9269] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1728.265906][ T9269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1728.275614][ T9269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1728.286238][ T9269] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.296669][ T9269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.307136][ T9269] 20:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xe, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 12) 20:44:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000050000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x700}], 0x0, 0x0, &(0x7f00000001c0)}) [ 1728.405359][ T9282] FAULT_INJECTION: forcing a failure. [ 1728.405359][ T9282] name failslab, interval 1, probability 0, space 0, times 0 [ 1728.422387][ T9282] CPU: 3 PID: 9282 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1728.433442][ T9282] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1728.445228][ T9282] Call Trace: [ 1728.449467][ T9282] [ 1728.453105][ T9282] dump_stack_lvl+0xcd/0x134 [ 1728.459062][ T9282] should_fail.cold+0x5/0xa [ 1728.464758][ T9282] ? crypto_create_tfm_node+0x7f/0x330 [ 1728.470847][ T9282] should_failslab+0x5/0x10 [ 1728.476383][ T9282] __kmalloc_node+0x75/0x390 20:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000060000000000000000000000150000fb"], 0x58}}, 0x0) [ 1728.481698][ T9282] crypto_create_tfm_node+0x7f/0x330 [ 1728.487829][ T9282] crypto_alloc_tfm_node+0x107/0x260 [ 1728.494311][ T9282] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1728.501453][ T9282] tipc_crypto_key_init+0x82/0x110 [ 1728.507769][ T9282] ? tipc_ehdr_validate+0x240/0x240 [ 1728.514183][ T9282] ? crypto_mod_put+0x8c/0x100 [ 1728.520091][ T9282] tipc_nl_node_set_key+0xa5d/0xf70 [ 1728.526542][ T9282] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1728.534762][ T9282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1728.543111][ T9282] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1728.552506][ T9282] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1728.561423][ T9282] genl_family_rcv_msg_doit+0x228/0x320 [ 1728.568719][ T9282] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1728.579353][ T9282] ? mutex_lock_io_nested+0x1150/0x1150 [ 1728.587043][ T9282] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1728.594988][ T9282] ? __radix_tree_lookup+0x211/0x2a0 [ 1728.602028][ T9282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1728.610096][ T9282] ? genl_get_cmd+0x3cf/0x480 [ 1728.616126][ T9282] genl_rcv_msg+0x328/0x580 [ 1728.622242][ T9282] ? genl_get_cmd+0x480/0x480 [ 1728.628852][ T9282] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1728.636783][ T9282] ? lock_release+0x720/0x720 [ 1728.642437][ T9282] netlink_rcv_skb+0x153/0x420 [ 1728.648495][ T9282] ? genl_get_cmd+0x480/0x480 [ 1728.654237][ T9282] ? netlink_ack+0xa60/0xa60 [ 1728.659856][ T9282] ? netlink_deliver_tap+0x1b1/0xc30 [ 1728.667527][ T9282] genl_rcv+0x24/0x40 [ 1728.672870][ T9282] netlink_unicast+0x533/0x7d0 [ 1728.678977][ T9282] ? netlink_attachskb+0x880/0x880 [ 1728.684758][ T9282] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1728.692172][ T9282] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1728.699004][ T9282] ? __phys_addr_symbol+0x2c/0x70 [ 1728.705114][ T9282] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1728.711482][ T9282] ? __check_object_size+0x16e/0x3f0 [ 1728.717444][ T9282] netlink_sendmsg+0x86d/0xda0 [ 1728.724501][ T9282] ? netlink_unicast+0x7d0/0x7d0 [ 1728.731677][ T9282] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1728.739744][ T9282] ? netlink_unicast+0x7d0/0x7d0 [ 1728.745488][ T9282] sock_sendmsg+0xcf/0x120 [ 1728.750640][ T9282] ____sys_sendmsg+0x6e8/0x810 [ 1728.756506][ T9282] ? kernel_sendmsg+0x50/0x50 [ 1728.762247][ T9282] ? do_recvmmsg+0x6d0/0x6d0 [ 1728.767324][ T9282] ? lock_chain_count+0x20/0x20 [ 1728.772084][ T9282] ? lock_chain_count+0x20/0x20 [ 1728.777401][ T9282] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1728.784714][ T9282] ___sys_sendmsg+0xf3/0x170 [ 1728.790179][ T9282] ? sendmsg_copy_msghdr+0x160/0x160 [ 1728.795859][ T9282] ? __fget_files+0x21b/0x3e0 [ 1728.800926][ T9282] ? lock_downgrade+0x6e0/0x6e0 [ 1728.806826][ T9282] ? __fget_files+0x23d/0x3e0 [ 1728.812115][ T9282] ? __fget_light+0xea/0x280 [ 1728.818010][ T9282] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1728.826821][ T9282] __sys_sendmsg+0xe5/0x1b0 [ 1728.832452][ T9282] ? __sys_sendmsg_sock+0x30/0x30 [ 1728.838987][ T9282] ? lock_downgrade+0x6e0/0x6e0 [ 1728.845460][ T9282] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1728.853743][ T9282] __do_fast_syscall_32+0x65/0xf0 [ 1728.859785][ T9282] do_fast_syscall_32+0x2f/0x70 [ 1728.865762][ T9282] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1728.873849][ T9282] RIP: 0023:0xf6f11549 [ 1728.878875][ T9282] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1728.904252][ T9282] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1728.915122][ T9282] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1728.925640][ T9282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1728.934864][ T9282] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1728.943274][ T9282] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1728.951791][ T9282] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1728.960355][ T9282] 20:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x60, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000070000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 13) 20:44:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x7000000}], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:52 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000080000000000000000000000150000fb"], 0x58}}, 0x0) [ 1729.130041][ T9304] FAULT_INJECTION: forcing a failure. [ 1729.130041][ T9304] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.145273][ T9304] CPU: 0 PID: 9304 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1729.155876][ T9304] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1729.166615][ T9304] Call Trace: [ 1729.170697][ T9304] [ 1729.174073][ T9304] dump_stack_lvl+0xcd/0x134 [ 1729.179765][ T9304] should_fail.cold+0x5/0xa 20:44:52 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1729.185106][ T9304] ? crypto_create_tfm_node+0x7f/0x330 [ 1729.192816][ T9304] should_failslab+0x5/0x10 [ 1729.197855][ T9304] __kmalloc_node+0x75/0x390 [ 1729.203454][ T9304] crypto_create_tfm_node+0x7f/0x330 [ 1729.209079][ T9304] crypto_alloc_tfm_node+0x107/0x260 [ 1729.214887][ T9304] cryptd_alloc_aead+0x101/0x200 [ 1729.220903][ T9304] ? cryptd_alloc_ahash+0x200/0x200 [ 1729.227104][ T9304] ? __kmalloc_node+0x62/0x390 [ 1729.232525][ T9304] simd_aead_init+0x67/0x1b0 [ 1729.238106][ T9304] ? simd_aead_exit+0x40/0x40 [ 1729.242887][ T9304] crypto_aead_init_tfm+0x138/0x1a0 [ 1729.249178][ T9304] crypto_create_tfm_node+0x10d/0x330 [ 1729.255974][ T9304] crypto_alloc_tfm_node+0x107/0x260 [ 1729.262842][ T9304] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1729.270484][ T9304] tipc_crypto_key_init+0x82/0x110 [ 1729.277103][ T9304] ? tipc_ehdr_validate+0x240/0x240 [ 1729.284265][ T9304] ? crypto_mod_put+0x8c/0x100 [ 1729.290322][ T9304] tipc_nl_node_set_key+0xa5d/0xf70 [ 1729.297337][ T9304] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1729.305521][ T9304] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1729.313453][ T9304] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1729.322435][ T9304] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1729.330130][ T9304] genl_family_rcv_msg_doit+0x228/0x320 [ 1729.336024][ T9304] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1729.343799][ T9304] ? mutex_lock_io_nested+0x1150/0x1150 [ 1729.349401][ T9304] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1729.355435][ T9304] ? __radix_tree_lookup+0x211/0x2a0 [ 1729.361570][ T9304] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1729.368241][ T9304] ? genl_get_cmd+0x3cf/0x480 [ 1729.373036][ T9304] genl_rcv_msg+0x328/0x580 [ 1729.377624][ T9304] ? genl_get_cmd+0x480/0x480 [ 1729.383129][ T9304] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1729.390730][ T9304] ? lock_release+0x720/0x720 [ 1729.396963][ T9304] netlink_rcv_skb+0x153/0x420 [ 1729.402017][ T9304] ? genl_get_cmd+0x480/0x480 [ 1729.407250][ T9304] ? netlink_ack+0xa60/0xa60 [ 1729.411990][ T9304] ? netlink_deliver_tap+0x1b1/0xc30 [ 1729.417778][ T9304] genl_rcv+0x24/0x40 [ 1729.422066][ T9304] netlink_unicast+0x533/0x7d0 [ 1729.427980][ T9304] ? netlink_attachskb+0x880/0x880 [ 1729.434024][ T9304] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1729.441768][ T9304] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1729.449451][ T9304] ? __phys_addr_symbol+0x2c/0x70 [ 1729.454336][ T9304] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1729.460616][ T9304] ? __check_object_size+0x16e/0x3f0 [ 1729.466026][ T9304] netlink_sendmsg+0x86d/0xda0 [ 1729.472168][ T9304] ? netlink_unicast+0x7d0/0x7d0 [ 1729.478174][ T9304] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1729.484874][ T9304] ? netlink_unicast+0x7d0/0x7d0 [ 1729.490069][ T9304] sock_sendmsg+0xcf/0x120 [ 1729.495739][ T9304] ____sys_sendmsg+0x6e8/0x810 [ 1729.501908][ T9304] ? kernel_sendmsg+0x50/0x50 [ 1729.507328][ T9304] ? do_recvmmsg+0x6d0/0x6d0 [ 1729.512267][ T9304] ? lock_chain_count+0x20/0x20 [ 1729.518029][ T9304] ? lock_chain_count+0x20/0x20 [ 1729.523444][ T9304] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1729.529770][ T9304] ___sys_sendmsg+0xf3/0x170 [ 1729.534667][ T9304] ? sendmsg_copy_msghdr+0x160/0x160 [ 1729.540759][ T9304] ? __fget_files+0x21b/0x3e0 [ 1729.546127][ T9304] ? lock_downgrade+0x6e0/0x6e0 [ 1729.551585][ T9304] ? __fget_files+0x23d/0x3e0 [ 1729.556576][ T9304] ? __fget_light+0xea/0x280 [ 1729.562574][ T9304] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1729.569175][ T9304] __sys_sendmsg+0xe5/0x1b0 [ 1729.574122][ T9304] ? __sys_sendmsg_sock+0x30/0x30 [ 1729.581054][ T9304] ? lock_downgrade+0x6e0/0x6e0 [ 1729.587345][ T9304] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1729.596446][ T9304] __do_fast_syscall_32+0x65/0xf0 [ 1729.602887][ T9304] do_fast_syscall_32+0x2f/0x70 [ 1729.609758][ T9304] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1729.617742][ T9304] RIP: 0023:0xf6f11549 [ 1729.621918][ T9304] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1729.645673][ T9304] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1729.654958][ T9304] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1729.664460][ T9304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1729.673514][ T9304] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1729.681975][ T9304] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1729.690858][ T9304] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1729.698639][ T9304] 20:44:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x7}], 0x0, 0x0, &(0x7f00000001c0)}) 20:44:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 14) 20:44:53 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000090000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x300, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1729.762695][ T9315] FAULT_INJECTION: forcing a failure. [ 1729.762695][ T9315] name failslab, interval 1, probability 0, space 0, times 0 [ 1729.775687][ T9315] CPU: 1 PID: 9315 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1729.784338][ T9315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1729.794030][ T9315] Call Trace: [ 1729.797800][ T9315] [ 1729.801064][ T9315] dump_stack_lvl+0xcd/0x134 [ 1729.805869][ T9315] should_fail.cold+0x5/0xa [ 1729.811391][ T9315] ? crypto_create_tfm_node+0x7f/0x330 [ 1729.818076][ T9315] should_failslab+0x5/0x10 [ 1729.823161][ T9315] __kmalloc_node+0x75/0x390 [ 1729.828036][ T9315] crypto_create_tfm_node+0x7f/0x330 [ 1729.833385][ T9315] crypto_spawn_tfm2+0x60/0xb0 [ 1729.838135][ T9315] ? cryptd_hash_init_tfm+0x120/0x120 [ 1729.843550][ T9315] cryptd_aead_init_tfm+0x3c/0x140 [ 1729.848889][ T9315] ? cryptd_hash_init_tfm+0x120/0x120 [ 1729.854251][ T9315] crypto_aead_init_tfm+0x138/0x1a0 [ 1729.859412][ T9315] crypto_create_tfm_node+0x10d/0x330 [ 1729.864822][ T9315] crypto_alloc_tfm_node+0x107/0x260 [ 1729.870177][ T9315] cryptd_alloc_aead+0x101/0x200 [ 1729.875101][ T9315] ? cryptd_alloc_ahash+0x200/0x200 [ 1729.880166][ T9315] ? __kmalloc_node+0x62/0x390 [ 1729.884704][ T9315] simd_aead_init+0x67/0x1b0 [ 1729.889209][ T9315] ? simd_aead_exit+0x40/0x40 [ 1729.894085][ T9315] crypto_aead_init_tfm+0x138/0x1a0 [ 1729.900187][ T9315] crypto_create_tfm_node+0x10d/0x330 [ 1729.905515][ T9315] crypto_alloc_tfm_node+0x107/0x260 [ 1729.910864][ T9315] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1729.917915][ T9315] tipc_crypto_key_init+0x82/0x110 [ 1729.923367][ T9315] ? tipc_ehdr_validate+0x240/0x240 [ 1729.929828][ T9315] ? crypto_mod_put+0x8c/0x100 [ 1729.935946][ T9315] tipc_nl_node_set_key+0xa5d/0xf70 [ 1729.942444][ T9315] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1729.950436][ T9315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1729.957187][ T9315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1729.964286][ T9315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1729.972675][ T9315] genl_family_rcv_msg_doit+0x228/0x320 [ 1729.978824][ T9315] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1729.987415][ T9315] ? mutex_lock_io_nested+0x1150/0x1150 [ 1729.993870][ T9315] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1730.001503][ T9315] ? __radix_tree_lookup+0x211/0x2a0 [ 1730.007478][ T9315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1730.014537][ T9315] ? genl_get_cmd+0x3cf/0x480 [ 1730.019982][ T9315] genl_rcv_msg+0x328/0x580 [ 1730.025125][ T9315] ? genl_get_cmd+0x480/0x480 [ 1730.030525][ T9315] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1730.038587][ T9315] ? lock_release+0x720/0x720 [ 1730.044218][ T9315] netlink_rcv_skb+0x153/0x420 [ 1730.049749][ T9315] ? genl_get_cmd+0x480/0x480 [ 1730.055132][ T9315] ? netlink_ack+0xa60/0xa60 [ 1730.060174][ T9315] ? netlink_deliver_tap+0x1b1/0xc30 [ 1730.066630][ T9315] genl_rcv+0x24/0x40 [ 1730.070908][ T9315] netlink_unicast+0x533/0x7d0 [ 1730.076233][ T9315] ? netlink_attachskb+0x880/0x880 [ 1730.081326][ T9315] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1730.089037][ T9315] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1730.095560][ T9315] ? __phys_addr_symbol+0x2c/0x70 [ 1730.101980][ T9315] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1730.109288][ T9315] ? __check_object_size+0x16e/0x3f0 [ 1730.115957][ T9315] netlink_sendmsg+0x86d/0xda0 [ 1730.121837][ T9315] ? netlink_unicast+0x7d0/0x7d0 [ 1730.127840][ T9315] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1730.135396][ T9315] ? netlink_unicast+0x7d0/0x7d0 [ 1730.141620][ T9315] sock_sendmsg+0xcf/0x120 [ 1730.147222][ T9315] ____sys_sendmsg+0x6e8/0x810 [ 1730.153474][ T9315] ? kernel_sendmsg+0x50/0x50 [ 1730.159950][ T9315] ? do_recvmmsg+0x6d0/0x6d0 [ 1730.166096][ T9315] ? lock_chain_count+0x20/0x20 [ 1730.172423][ T9315] ? lock_chain_count+0x20/0x20 [ 1730.179021][ T9315] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1730.186827][ T9315] ___sys_sendmsg+0xf3/0x170 [ 1730.192806][ T9315] ? sendmsg_copy_msghdr+0x160/0x160 [ 1730.199703][ T9315] ? __fget_files+0x21b/0x3e0 [ 1730.205157][ T9315] ? lock_downgrade+0x6e0/0x6e0 [ 1730.212249][ T9315] ? __fget_files+0x23d/0x3e0 [ 1730.218927][ T9315] ? __fget_light+0xea/0x280 [ 1730.225559][ T9315] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1730.233637][ T9315] __sys_sendmsg+0xe5/0x1b0 [ 1730.239466][ T9315] ? __sys_sendmsg_sock+0x30/0x30 [ 1730.246302][ T9315] ? lock_downgrade+0x6e0/0x6e0 [ 1730.252370][ T9315] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1730.260890][ T9315] __do_fast_syscall_32+0x65/0xf0 [ 1730.267383][ T9315] do_fast_syscall_32+0x2f/0x70 [ 1730.273585][ T9315] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.281685][ T9315] RIP: 0023:0xf6f11549 [ 1730.286942][ T9315] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1730.311294][ T9315] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1730.321494][ T9315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1730.331083][ T9315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1730.340906][ T9315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1730.351238][ T9315] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1730.361231][ T9315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1730.370129][ T9315] 20:44:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 15) 20:44:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000000000e0000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x500, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x700}], 0x0, 0x0, &(0x7f00000001c0)}) [ 1730.479822][ T9326] FAULT_INJECTION: forcing a failure. [ 1730.479822][ T9326] name failslab, interval 1, probability 0, space 0, times 0 [ 1730.495509][ T9326] CPU: 0 PID: 9326 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1730.505393][ T9326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1730.516331][ T9326] Call Trace: [ 1730.521249][ T9326] [ 1730.524954][ T9326] dump_stack_lvl+0xcd/0x134 [ 1730.530767][ T9326] should_fail.cold+0x5/0xa [ 1730.537109][ T9326] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1730.545060][ T9326] should_failslab+0x5/0x10 [ 1730.550607][ T9326] kmem_cache_alloc_trace+0x55/0x2c0 [ 1730.557479][ T9326] ? crypto_aead_setkey+0x10f/0x290 [ 1730.563907][ T9326] tipc_aead_init.constprop.0+0x1bb/0x8f0 20:44:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000000000f0000000000000000000000150000fb"], 0x58}}, 0x0) [ 1730.571144][ T9326] tipc_crypto_key_init+0x82/0x110 [ 1730.577376][ T9326] ? tipc_ehdr_validate+0x240/0x240 [ 1730.583065][ T9326] ? crypto_mod_put+0x8c/0x100 [ 1730.589223][ T9326] tipc_nl_node_set_key+0xa5d/0xf70 [ 1730.595778][ T9326] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1730.603740][ T9326] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1730.611677][ T9326] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1730.622169][ T9326] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1730.632266][ T9326] genl_family_rcv_msg_doit+0x228/0x320 [ 1730.639361][ T9326] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1730.649410][ T9326] ? mutex_lock_io_nested+0x1150/0x1150 [ 1730.657225][ T9326] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1730.665448][ T9326] ? __radix_tree_lookup+0x211/0x2a0 [ 1730.673459][ T9326] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1730.682256][ T9326] ? genl_get_cmd+0x3cf/0x480 [ 1730.687009][ T9326] genl_rcv_msg+0x328/0x580 [ 1730.692462][ T9326] ? genl_get_cmd+0x480/0x480 [ 1730.698156][ T9326] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1730.706713][ T9326] ? lock_release+0x720/0x720 [ 1730.713072][ T9326] netlink_rcv_skb+0x153/0x420 [ 1730.718997][ T9326] ? genl_get_cmd+0x480/0x480 [ 1730.725425][ T9326] ? netlink_ack+0xa60/0xa60 [ 1730.731269][ T9326] ? netlink_deliver_tap+0x1b1/0xc30 [ 1730.737984][ T9326] genl_rcv+0x24/0x40 [ 1730.743658][ T9326] netlink_unicast+0x533/0x7d0 [ 1730.749780][ T9326] ? netlink_attachskb+0x880/0x880 [ 1730.756025][ T9326] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1730.764372][ T9326] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1730.771212][ T9326] ? __phys_addr_symbol+0x2c/0x70 [ 1730.777200][ T9326] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1730.785247][ T9326] ? __check_object_size+0x16e/0x3f0 [ 1730.792523][ T9326] netlink_sendmsg+0x86d/0xda0 [ 1730.798338][ T9326] ? netlink_unicast+0x7d0/0x7d0 [ 1730.804424][ T9326] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1730.811769][ T9326] ? netlink_unicast+0x7d0/0x7d0 [ 1730.817308][ T9326] sock_sendmsg+0xcf/0x120 [ 1730.822449][ T9326] ____sys_sendmsg+0x6e8/0x810 [ 1730.828262][ T9326] ? kernel_sendmsg+0x50/0x50 [ 1730.833522][ T9326] ? do_recvmmsg+0x6d0/0x6d0 [ 1730.838439][ T9326] ? lock_chain_count+0x20/0x20 [ 1730.844121][ T9326] ? lock_chain_count+0x20/0x20 [ 1730.849526][ T9326] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1730.856157][ T9326] ___sys_sendmsg+0xf3/0x170 [ 1730.861775][ T9326] ? sendmsg_copy_msghdr+0x160/0x160 [ 1730.867592][ T9326] ? __fget_files+0x21b/0x3e0 [ 1730.873009][ T9326] ? lock_downgrade+0x6e0/0x6e0 [ 1730.878620][ T9326] ? __fget_files+0x23d/0x3e0 [ 1730.884462][ T9326] ? __fget_light+0xea/0x280 [ 1730.889710][ T9326] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1730.897123][ T9326] __sys_sendmsg+0xe5/0x1b0 [ 1730.903144][ T9326] ? __sys_sendmsg_sock+0x30/0x30 [ 1730.909377][ T9326] ? lock_downgrade+0x6e0/0x6e0 [ 1730.915277][ T9326] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1730.923318][ T9326] __do_fast_syscall_32+0x65/0xf0 [ 1730.929329][ T9326] do_fast_syscall_32+0x2f/0x70 [ 1730.935321][ T9326] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1730.943113][ T9326] RIP: 0023:0xf6f11549 [ 1730.947980][ T9326] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1730.971252][ T9326] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1730.981514][ T9326] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1730.991062][ T9326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.000842][ T9326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.010595][ T9326] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.020181][ T9326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.029241][ T9326] 20:44:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x600, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:54 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 16) 20:44:54 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000000003f0000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x7000000}], 0x0, 0x0, &(0x7f00000001c0)}) [ 1731.121790][ T9344] FAULT_INJECTION: forcing a failure. [ 1731.121790][ T9344] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.138768][ T9344] CPU: 3 PID: 9344 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1731.150830][ T9344] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1731.162609][ T9344] Call Trace: [ 1731.166727][ T9344] [ 1731.171309][ T9344] dump_stack_lvl+0xcd/0x134 [ 1731.177894][ T9344] should_fail.cold+0x5/0xa [ 1731.183881][ T9344] ? crypto_create_tfm_node+0x7f/0x330 [ 1731.190563][ T9344] should_failslab+0x5/0x10 [ 1731.196364][ T9344] __kmalloc_node+0x75/0x390 [ 1731.202696][ T9344] crypto_create_tfm_node+0x7f/0x330 [ 1731.209621][ T9344] crypto_alloc_tfm_node+0x107/0x260 [ 1731.217197][ T9344] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1731.224521][ T9344] tipc_crypto_key_init+0x82/0x110 [ 1731.231326][ T9344] ? tipc_ehdr_validate+0x240/0x240 [ 1731.238986][ T9344] ? crypto_mod_put+0x8c/0x100 [ 1731.245580][ T9344] tipc_nl_node_set_key+0xa5d/0xf70 [ 1731.252797][ T9344] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1731.260841][ T9344] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1731.269673][ T9344] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1731.279759][ T9344] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1731.289109][ T9344] genl_family_rcv_msg_doit+0x228/0x320 [ 1731.296105][ T9344] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1731.305926][ T9344] ? mutex_lock_io_nested+0x1150/0x1150 [ 1731.313591][ T9344] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1731.320560][ T9344] ? __radix_tree_lookup+0x211/0x2a0 [ 1731.326841][ T9344] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1731.334673][ T9344] ? genl_get_cmd+0x3cf/0x480 [ 1731.340645][ T9344] genl_rcv_msg+0x328/0x580 [ 1731.346381][ T9344] ? genl_get_cmd+0x480/0x480 [ 1731.352465][ T9344] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1731.360357][ T9344] ? lock_release+0x720/0x720 [ 1731.365963][ T9344] netlink_rcv_skb+0x153/0x420 [ 1731.372417][ T9344] ? genl_get_cmd+0x480/0x480 [ 1731.378362][ T9344] ? netlink_ack+0xa60/0xa60 [ 1731.384462][ T9344] ? netlink_deliver_tap+0x1b1/0xc30 [ 1731.390982][ T9344] genl_rcv+0x24/0x40 [ 1731.396620][ T9344] netlink_unicast+0x533/0x7d0 [ 1731.402492][ T9344] ? netlink_attachskb+0x880/0x880 [ 1731.408809][ T9344] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1731.417154][ T9344] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1731.424976][ T9344] ? __phys_addr_symbol+0x2c/0x70 [ 1731.431150][ T9344] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1731.439246][ T9344] ? __check_object_size+0x16e/0x3f0 [ 1731.446839][ T9344] netlink_sendmsg+0x86d/0xda0 [ 1731.453120][ T9344] ? netlink_unicast+0x7d0/0x7d0 [ 1731.459242][ T9344] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1731.467028][ T9344] ? netlink_unicast+0x7d0/0x7d0 [ 1731.473364][ T9344] sock_sendmsg+0xcf/0x120 [ 1731.478865][ T9344] ____sys_sendmsg+0x6e8/0x810 [ 1731.484955][ T9344] ? kernel_sendmsg+0x50/0x50 [ 1731.491270][ T9344] ? do_recvmmsg+0x6d0/0x6d0 [ 1731.497370][ T9344] ? lock_chain_count+0x20/0x20 [ 1731.503561][ T9344] ? lock_chain_count+0x20/0x20 [ 1731.509567][ T9344] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1731.517142][ T9344] ___sys_sendmsg+0xf3/0x170 [ 1731.523311][ T9344] ? sendmsg_copy_msghdr+0x160/0x160 [ 1731.530090][ T9344] ? __fget_files+0x21b/0x3e0 [ 1731.537011][ T9344] ? lock_downgrade+0x6e0/0x6e0 [ 1731.543599][ T9344] ? __fget_files+0x23d/0x3e0 [ 1731.549559][ T9344] ? __fget_light+0xea/0x280 [ 1731.555637][ T9344] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1731.564245][ T9344] __sys_sendmsg+0xe5/0x1b0 [ 1731.570247][ T9344] ? __sys_sendmsg_sock+0x30/0x30 [ 1731.577251][ T9344] ? lock_downgrade+0x6e0/0x6e0 [ 1731.583712][ T9344] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1731.592134][ T9344] __do_fast_syscall_32+0x65/0xf0 [ 1731.598489][ T9344] do_fast_syscall_32+0x2f/0x70 [ 1731.604799][ T9344] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1731.613035][ T9344] RIP: 0023:0xf6f11549 [ 1731.618154][ T9344] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1731.642905][ T9344] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1731.653655][ T9344] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1731.663920][ T9344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1731.673496][ T9344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1731.683874][ T9344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1731.694166][ T9344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1731.704258][ T9344] 20:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x700, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000000600000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:55 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 17) 20:44:55 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x900, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x700000000000000}], 0x0, 0x0, &(0x7f00000001c0)}) [ 1731.808290][ T9356] FAULT_INJECTION: forcing a failure. [ 1731.808290][ T9356] name failslab, interval 1, probability 0, space 0, times 0 [ 1731.824525][ T9356] CPU: 2 PID: 9356 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1731.835379][ T9356] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1731.845577][ T9356] Call Trace: [ 1731.849540][ T9356] [ 1731.852567][ T9356] dump_stack_lvl+0xcd/0x134 [ 1731.857621][ T9356] should_fail.cold+0x5/0xa [ 1731.862276][ T9356] ? crypto_create_tfm_node+0x7f/0x330 [ 1731.868998][ T9356] should_failslab+0x5/0x10 [ 1731.873755][ T9356] __kmalloc_node+0x75/0x390 20:44:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000ffffff9e0000000000000000000000150000fb"], 0x58}}, 0x0) [ 1731.879826][ T9356] crypto_create_tfm_node+0x7f/0x330 [ 1731.887033][ T9356] crypto_alloc_tfm_node+0x107/0x260 [ 1731.895680][ T9356] cryptd_alloc_aead+0x101/0x200 [ 1731.902325][ T9356] ? cryptd_alloc_ahash+0x200/0x200 [ 1731.908824][ T9356] ? __kmalloc_node+0x62/0x390 [ 1731.914972][ T9356] simd_aead_init+0x67/0x1b0 [ 1731.921262][ T9356] ? simd_aead_exit+0x40/0x40 [ 1731.927554][ T9356] crypto_aead_init_tfm+0x138/0x1a0 [ 1731.934030][ T9356] crypto_create_tfm_node+0x10d/0x330 [ 1731.940668][ T9356] crypto_alloc_tfm_node+0x107/0x260 [ 1731.947658][ T9356] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1731.954913][ T9356] tipc_crypto_key_init+0x82/0x110 [ 1731.961197][ T9356] ? tipc_ehdr_validate+0x240/0x240 [ 1731.967756][ T9356] ? crypto_mod_put+0x8c/0x100 [ 1731.973901][ T9356] tipc_nl_node_set_key+0xa5d/0xf70 [ 1731.980434][ T9356] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1731.988600][ T9356] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1731.996411][ T9356] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1732.005553][ T9356] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1732.014653][ T9356] genl_family_rcv_msg_doit+0x228/0x320 [ 1732.021861][ T9356] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1732.031505][ T9356] ? mutex_lock_io_nested+0x1150/0x1150 [ 1732.038828][ T9356] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1732.047351][ T9356] ? __radix_tree_lookup+0x211/0x2a0 [ 1732.053584][ T9356] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1732.060005][ T9356] ? genl_get_cmd+0x3cf/0x480 [ 1732.064569][ T9356] genl_rcv_msg+0x328/0x580 [ 1732.068691][ T9356] ? genl_get_cmd+0x480/0x480 [ 1732.073022][ T9356] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1732.079616][ T9356] ? lock_release+0x720/0x720 [ 1732.084371][ T9356] netlink_rcv_skb+0x153/0x420 [ 1732.089415][ T9356] ? genl_get_cmd+0x480/0x480 [ 1732.094401][ T9356] ? netlink_ack+0xa60/0xa60 [ 1732.099110][ T9356] ? netlink_deliver_tap+0x1b1/0xc30 [ 1732.104348][ T9356] genl_rcv+0x24/0x40 [ 1732.108567][ T9356] netlink_unicast+0x533/0x7d0 [ 1732.113448][ T9356] ? netlink_attachskb+0x880/0x880 [ 1732.118776][ T9356] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1732.125475][ T9356] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1732.131603][ T9356] ? __phys_addr_symbol+0x2c/0x70 [ 1732.136546][ T9356] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1732.141933][ T9356] ? __check_object_size+0x16e/0x3f0 [ 1732.146869][ T9356] netlink_sendmsg+0x86d/0xda0 [ 1732.151661][ T9356] ? netlink_unicast+0x7d0/0x7d0 [ 1732.156795][ T9356] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1732.162917][ T9356] ? netlink_unicast+0x7d0/0x7d0 [ 1732.167815][ T9356] sock_sendmsg+0xcf/0x120 [ 1732.172165][ T9356] ____sys_sendmsg+0x6e8/0x810 [ 1732.177452][ T9356] ? kernel_sendmsg+0x50/0x50 [ 1732.182689][ T9356] ? do_recvmmsg+0x6d0/0x6d0 [ 1732.187802][ T9356] ? lock_chain_count+0x20/0x20 [ 1732.193050][ T9356] ? lock_chain_count+0x20/0x20 [ 1732.198038][ T9356] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1732.205001][ T9356] ___sys_sendmsg+0xf3/0x170 [ 1732.210929][ T9356] ? sendmsg_copy_msghdr+0x160/0x160 [ 1732.217291][ T9356] ? __fget_files+0x21b/0x3e0 [ 1732.223221][ T9356] ? lock_downgrade+0x6e0/0x6e0 [ 1732.229869][ T9356] ? __fget_files+0x23d/0x3e0 [ 1732.236134][ T9356] ? __fget_light+0xea/0x280 [ 1732.242301][ T9356] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1732.251075][ T9356] __sys_sendmsg+0xe5/0x1b0 [ 1732.257045][ T9356] ? __sys_sendmsg_sock+0x30/0x30 [ 1732.263469][ T9356] ? lock_downgrade+0x6e0/0x6e0 [ 1732.268558][ T9356] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1732.275004][ T9356] __do_fast_syscall_32+0x65/0xf0 [ 1732.280835][ T9356] do_fast_syscall_32+0x2f/0x70 [ 1732.286732][ T9356] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.293713][ T9356] RIP: 0023:0xf6f11549 [ 1732.298600][ T9356] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1732.320645][ T9356] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1732.329108][ T9356] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1732.337275][ T9356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1732.344604][ T9356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1732.352618][ T9356] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1732.360418][ T9356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1732.368630][ T9356] 20:44:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 18) 20:44:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000000006d50000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xc00, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1732.472607][ T9374] FAULT_INJECTION: forcing a failure. [ 1732.472607][ T9374] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.489090][ T9374] CPU: 0 PID: 9374 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1732.499516][ T9374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1732.510856][ T9374] Call Trace: [ 1732.514122][ T9374] [ 1732.517127][ T9374] dump_stack_lvl+0xcd/0x134 [ 1732.522828][ T9374] should_fail.cold+0x5/0xa 20:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xdca, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1732.529392][ T9374] ? crypto_create_tfm_node+0x7f/0x330 [ 1732.536358][ T9374] should_failslab+0x5/0x10 [ 1732.542357][ T9374] __kmalloc_node+0x75/0x390 [ 1732.548503][ T9374] crypto_create_tfm_node+0x7f/0x330 [ 1732.555526][ T9374] crypto_spawn_tfm2+0x60/0xb0 [ 1732.561333][ T9374] ? cryptd_hash_init_tfm+0x120/0x120 20:44:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000fffffff00000000000000000000000150000fb"], 0x58}}, 0x0) [ 1732.568857][ T9374] cryptd_aead_init_tfm+0x3c/0x140 [ 1732.575613][ T9374] ? cryptd_hash_init_tfm+0x120/0x120 [ 1732.581940][ T9374] crypto_aead_init_tfm+0x138/0x1a0 [ 1732.588474][ T9374] crypto_create_tfm_node+0x10d/0x330 [ 1732.596203][ T9374] crypto_alloc_tfm_node+0x107/0x260 [ 1732.602761][ T9374] cryptd_alloc_aead+0x101/0x200 [ 1732.609210][ T9374] ? cryptd_alloc_ahash+0x200/0x200 [ 1732.616356][ T9374] ? __kmalloc_node+0x62/0x390 [ 1732.622413][ T9374] simd_aead_init+0x67/0x1b0 [ 1732.628307][ T9374] ? simd_aead_exit+0x40/0x40 [ 1732.633996][ T9374] crypto_aead_init_tfm+0x138/0x1a0 [ 1732.640372][ T9374] crypto_create_tfm_node+0x10d/0x330 [ 1732.647650][ T9374] crypto_alloc_tfm_node+0x107/0x260 [ 1732.654222][ T9374] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1732.661356][ T9374] tipc_crypto_key_init+0x82/0x110 [ 1732.667584][ T9374] ? tipc_ehdr_validate+0x240/0x240 [ 1732.673896][ T9374] ? crypto_mod_put+0x8c/0x100 [ 1732.679704][ T9374] tipc_nl_node_set_key+0xa5d/0xf70 [ 1732.686041][ T9374] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1732.693181][ T9374] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1732.700740][ T9374] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1732.709779][ T9374] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1732.717495][ T9374] genl_family_rcv_msg_doit+0x228/0x320 [ 1732.723066][ T9374] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1732.730285][ T9374] ? mutex_lock_io_nested+0x1150/0x1150 [ 1732.736118][ T9374] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1732.743242][ T9374] ? __radix_tree_lookup+0x211/0x2a0 [ 1732.748684][ T9374] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1732.755435][ T9374] ? genl_get_cmd+0x3cf/0x480 [ 1732.760804][ T9374] genl_rcv_msg+0x328/0x580 [ 1732.766597][ T9374] ? genl_get_cmd+0x480/0x480 [ 1732.772633][ T9374] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1732.780559][ T9374] ? lock_release+0x720/0x720 [ 1732.785634][ T9374] netlink_rcv_skb+0x153/0x420 [ 1732.791094][ T9374] ? genl_get_cmd+0x480/0x480 [ 1732.796904][ T9374] ? netlink_ack+0xa60/0xa60 [ 1732.803251][ T9374] ? netlink_deliver_tap+0x1b1/0xc30 [ 1732.809666][ T9374] genl_rcv+0x24/0x40 [ 1732.814019][ T9374] netlink_unicast+0x533/0x7d0 [ 1732.819149][ T9374] ? netlink_attachskb+0x880/0x880 [ 1732.824458][ T9374] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1732.830673][ T9374] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1732.837602][ T9374] ? __phys_addr_symbol+0x2c/0x70 [ 1732.844247][ T9374] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1732.850770][ T9374] ? __check_object_size+0x16e/0x3f0 [ 1732.856180][ T9374] netlink_sendmsg+0x86d/0xda0 [ 1732.861981][ T9374] ? netlink_unicast+0x7d0/0x7d0 [ 1732.867460][ T9374] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1732.874344][ T9374] ? netlink_unicast+0x7d0/0x7d0 [ 1732.880760][ T9374] sock_sendmsg+0xcf/0x120 [ 1732.886228][ T9374] ____sys_sendmsg+0x6e8/0x810 [ 1732.892201][ T9374] ? kernel_sendmsg+0x50/0x50 [ 1732.898343][ T9374] ? do_recvmmsg+0x6d0/0x6d0 [ 1732.904207][ T9374] ? lock_chain_count+0x20/0x20 [ 1732.909091][ T9374] ? lock_chain_count+0x20/0x20 [ 1732.914106][ T9374] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1732.920263][ T9374] ___sys_sendmsg+0xf3/0x170 [ 1732.925402][ T9374] ? sendmsg_copy_msghdr+0x160/0x160 [ 1732.931113][ T9374] ? __fget_files+0x21b/0x3e0 [ 1732.935959][ T9374] ? lock_downgrade+0x6e0/0x6e0 [ 1732.940769][ T9374] ? __fget_files+0x23d/0x3e0 [ 1732.945688][ T9374] ? __fget_light+0xea/0x280 [ 1732.950581][ T9374] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1732.957185][ T9374] __sys_sendmsg+0xe5/0x1b0 [ 1732.962138][ T9374] ? __sys_sendmsg_sock+0x30/0x30 [ 1732.967993][ T9374] ? lock_downgrade+0x6e0/0x6e0 [ 1732.973401][ T9374] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1732.980910][ T9374] __do_fast_syscall_32+0x65/0xf0 [ 1732.986544][ T9374] do_fast_syscall_32+0x2f/0x70 [ 1732.991909][ T9374] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1732.998789][ T9374] RIP: 0023:0xf6f11549 [ 1733.003961][ T9374] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1733.026595][ T9374] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1733.034812][ T9374] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1733.043564][ T9374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.053500][ T9374] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1733.062775][ T9374] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.074104][ T9374] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.085449][ T9374] 20:44:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x7, 0x0, &(0x7f00000001c0)}) 20:44:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 19) 20:44:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000007fffffff0000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xe00, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1733.175598][ T9386] FAULT_INJECTION: forcing a failure. [ 1733.175598][ T9386] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.189159][ T9386] CPU: 0 PID: 9386 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1733.198129][ T9386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1733.207442][ T9386] Call Trace: [ 1733.211004][ T9386] [ 1733.213894][ T9386] dump_stack_lvl+0xcd/0x134 [ 1733.218984][ T9386] should_fail.cold+0x5/0xa [ 1733.223444][ T9386] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1733.230117][ T9386] should_failslab+0x5/0x10 [ 1733.235171][ T9386] kmem_cache_alloc_trace+0x55/0x2c0 [ 1733.242354][ T9386] ? crypto_aead_setkey+0x10f/0x290 [ 1733.247944][ T9386] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1733.254499][ T9386] tipc_crypto_key_init+0x82/0x110 [ 1733.260273][ T9386] ? tipc_ehdr_validate+0x240/0x240 [ 1733.266393][ T9386] ? crypto_mod_put+0x8c/0x100 [ 1733.271366][ T9386] tipc_nl_node_set_key+0xa5d/0xf70 [ 1733.276768][ T9386] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1733.283744][ T9386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.289843][ T9386] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1733.297032][ T9386] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1733.304025][ T9386] genl_family_rcv_msg_doit+0x228/0x320 [ 1733.309532][ T9386] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1733.316472][ T9386] ? mutex_lock_io_nested+0x1150/0x1150 [ 1733.321963][ T9386] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1733.328233][ T9386] ? __radix_tree_lookup+0x211/0x2a0 [ 1733.333978][ T9386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.341690][ T9386] ? genl_get_cmd+0x3cf/0x480 [ 1733.347944][ T9386] genl_rcv_msg+0x328/0x580 [ 1733.354011][ T9386] ? genl_get_cmd+0x480/0x480 [ 1733.359916][ T9386] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1733.367444][ T9386] ? lock_release+0x720/0x720 [ 1733.373015][ T9386] netlink_rcv_skb+0x153/0x420 [ 1733.377911][ T9386] ? genl_get_cmd+0x480/0x480 [ 1733.382850][ T9386] ? netlink_ack+0xa60/0xa60 [ 1733.387481][ T9386] ? netlink_deliver_tap+0x1b1/0xc30 [ 1733.392946][ T9386] genl_rcv+0x24/0x40 [ 1733.396934][ T9386] netlink_unicast+0x533/0x7d0 [ 1733.401693][ T9386] ? netlink_attachskb+0x880/0x880 [ 1733.406849][ T9386] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1733.414773][ T9386] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1733.421153][ T9386] ? __phys_addr_symbol+0x2c/0x70 [ 1733.426217][ T9386] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1733.432015][ T9386] ? __check_object_size+0x16e/0x3f0 [ 1733.437196][ T9386] netlink_sendmsg+0x86d/0xda0 [ 1733.442830][ T9386] ? netlink_unicast+0x7d0/0x7d0 [ 1733.449456][ T9386] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.456599][ T9386] ? netlink_unicast+0x7d0/0x7d0 [ 1733.462841][ T9386] sock_sendmsg+0xcf/0x120 [ 1733.468519][ T9386] ____sys_sendmsg+0x6e8/0x810 [ 1733.474702][ T9386] ? kernel_sendmsg+0x50/0x50 [ 1733.480272][ T9386] ? do_recvmmsg+0x6d0/0x6d0 [ 1733.485440][ T9386] ? lock_chain_count+0x20/0x20 [ 1733.491931][ T9386] ? lock_chain_count+0x20/0x20 [ 1733.497612][ T9386] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1733.504863][ T9386] ___sys_sendmsg+0xf3/0x170 [ 1733.511241][ T9386] ? sendmsg_copy_msghdr+0x160/0x160 [ 1733.517263][ T9386] ? __fget_files+0x21b/0x3e0 [ 1733.522635][ T9386] ? lock_downgrade+0x6e0/0x6e0 [ 1733.528786][ T9386] ? __fget_files+0x23d/0x3e0 [ 1733.533917][ T9386] ? __fget_light+0xea/0x280 [ 1733.539351][ T9386] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1733.546201][ T9386] __sys_sendmsg+0xe5/0x1b0 [ 1733.551344][ T9386] ? __sys_sendmsg_sock+0x30/0x30 [ 1733.557487][ T9386] ? lock_downgrade+0x6e0/0x6e0 [ 1733.563955][ T9386] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1733.572803][ T9386] __do_fast_syscall_32+0x65/0xf0 [ 1733.579114][ T9386] do_fast_syscall_32+0x2f/0x70 [ 1733.585442][ T9386] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1733.593580][ T9386] RIP: 0023:0xf6f11549 [ 1733.598455][ T9386] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1733.620818][ T9386] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1733.630166][ T9386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1733.639165][ T9386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1733.648791][ T9386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1733.659272][ T9386] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1733.669207][ T9386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1733.678476][ T9386] 20:44:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000f0ffffffffffff0000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x700, 0x0, &(0x7f00000001c0)}) 20:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf00, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000020000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 20) [ 1733.801726][ T9402] FAULT_INJECTION: forcing a failure. 20:44:57 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x3f00, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1733.801726][ T9402] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.819653][ T9402] CPU: 1 PID: 9402 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1733.831416][ T9402] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1733.843267][ T9402] Call Trace: [ 1733.847366][ T9402] [ 1733.851190][ T9402] dump_stack_lvl+0xcd/0x134 [ 1733.857529][ T9402] should_fail.cold+0x5/0xa [ 1733.864687][ T9402] ? crypto_create_tfm_node+0x7f/0x330 [ 1733.872361][ T9402] should_failslab+0x5/0x10 [ 1733.878539][ T9402] __kmalloc_node+0x75/0x390 [ 1733.885412][ T9402] crypto_create_tfm_node+0x7f/0x330 [ 1733.892108][ T9402] crypto_alloc_tfm_node+0x107/0x260 [ 1733.898921][ T9402] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1733.906233][ T9402] tipc_crypto_key_init+0x82/0x110 [ 1733.912854][ T9402] ? tipc_ehdr_validate+0x240/0x240 [ 1733.919362][ T9402] ? crypto_mod_put+0x8c/0x100 [ 1733.925514][ T9402] tipc_nl_node_set_key+0xa5d/0xf70 [ 1733.932121][ T9402] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1733.939810][ T9402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1733.947682][ T9402] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1733.957384][ T9402] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1733.967373][ T9402] genl_family_rcv_msg_doit+0x228/0x320 [ 1733.974051][ T9402] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1733.982423][ T9402] ? mutex_lock_io_nested+0x1150/0x1150 [ 1733.988536][ T9402] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1733.995491][ T9402] ? __radix_tree_lookup+0x211/0x2a0 [ 1734.002095][ T9402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.010985][ T9402] ? genl_get_cmd+0x3cf/0x480 [ 1734.017100][ T9402] genl_rcv_msg+0x328/0x580 [ 1734.023434][ T9402] ? genl_get_cmd+0x480/0x480 [ 1734.029222][ T9402] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1734.037351][ T9402] ? lock_release+0x720/0x720 [ 1734.043326][ T9402] netlink_rcv_skb+0x153/0x420 [ 1734.049491][ T9402] ? genl_get_cmd+0x480/0x480 [ 1734.055534][ T9402] ? netlink_ack+0xa60/0xa60 [ 1734.061643][ T9402] ? netlink_deliver_tap+0x1b1/0xc30 [ 1734.068405][ T9402] genl_rcv+0x24/0x40 [ 1734.073226][ T9402] netlink_unicast+0x533/0x7d0 [ 1734.079611][ T9402] ? netlink_attachskb+0x880/0x880 [ 1734.086479][ T9402] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.094066][ T9402] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.102067][ T9402] ? __phys_addr_symbol+0x2c/0x70 [ 1734.108569][ T9402] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1734.115079][ T9402] ? __check_object_size+0x187/0x3f0 [ 1734.120602][ T9402] netlink_sendmsg+0x86d/0xda0 [ 1734.125659][ T9402] ? netlink_unicast+0x7d0/0x7d0 [ 1734.130669][ T9402] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.137472][ T9402] ? netlink_unicast+0x7d0/0x7d0 [ 1734.143702][ T9402] sock_sendmsg+0xcf/0x120 [ 1734.148454][ T9402] ____sys_sendmsg+0x6e8/0x810 [ 1734.153630][ T9402] ? kernel_sendmsg+0x50/0x50 [ 1734.159123][ T9402] ? do_recvmmsg+0x6d0/0x6d0 [ 1734.165650][ T9402] ? lock_chain_count+0x20/0x20 [ 1734.171990][ T9402] ? lock_chain_count+0x20/0x20 [ 1734.177092][ T9402] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1734.184178][ T9402] ___sys_sendmsg+0xf3/0x170 [ 1734.189160][ T9402] ? sendmsg_copy_msghdr+0x160/0x160 [ 1734.195132][ T9402] ? __fget_files+0x21b/0x3e0 [ 1734.201069][ T9402] ? lock_downgrade+0x6e0/0x6e0 [ 1734.206655][ T9402] ? __fget_files+0x23d/0x3e0 [ 1734.212368][ T9402] ? __fget_light+0xea/0x280 [ 1734.217529][ T9402] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.224851][ T9402] __sys_sendmsg+0xe5/0x1b0 [ 1734.231393][ T9402] ? __sys_sendmsg_sock+0x30/0x30 [ 1734.237664][ T9402] ? lock_downgrade+0x6e0/0x6e0 [ 1734.242891][ T9402] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1734.250938][ T9402] __do_fast_syscall_32+0x65/0xf0 [ 1734.257076][ T9402] do_fast_syscall_32+0x2f/0x70 [ 1734.263584][ T9402] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1734.272652][ T9402] RIP: 0023:0xf6f11549 [ 1734.278117][ T9402] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1734.302580][ T9402] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1734.312227][ T9402] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1734.322050][ T9402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1734.331970][ T9402] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1734.343758][ T9402] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1734.354767][ T9402] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1734.365436][ T9402] 20:44:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x7000000, 0x0, &(0x7f00000001c0)}) 20:44:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000030000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 21) 20:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x6000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000040000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1734.487427][ T9418] FAULT_INJECTION: forcing a failure. [ 1734.487427][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 1734.503684][ T9418] CPU: 2 PID: 9418 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1734.513493][ T9418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1734.524320][ T9418] Call Trace: [ 1734.527609][ T9418] [ 1734.531099][ T9418] dump_stack_lvl+0xcd/0x134 [ 1734.537001][ T9418] should_fail.cold+0x5/0xa [ 1734.542993][ T9418] ? crypto_create_tfm_node+0x7f/0x330 [ 1734.550211][ T9418] should_failslab+0x5/0x10 [ 1734.556214][ T9418] __kmalloc_node+0x75/0x390 [ 1734.562251][ T9418] crypto_create_tfm_node+0x7f/0x330 20:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xca0d, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1734.569422][ T9418] crypto_alloc_tfm_node+0x107/0x260 [ 1734.576743][ T9418] cryptd_alloc_aead+0x101/0x200 [ 1734.583014][ T9418] ? cryptd_alloc_ahash+0x200/0x200 [ 1734.589240][ T9418] ? __kmalloc_node+0x62/0x390 [ 1734.595053][ T9418] simd_aead_init+0x67/0x1b0 [ 1734.601008][ T9418] ? simd_aead_exit+0x40/0x40 [ 1734.606656][ T9418] crypto_aead_init_tfm+0x138/0x1a0 [ 1734.613345][ T9418] crypto_create_tfm_node+0x10d/0x330 [ 1734.619849][ T9418] crypto_alloc_tfm_node+0x107/0x260 [ 1734.626446][ T9418] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1734.633612][ T9418] tipc_crypto_key_init+0x82/0x110 [ 1734.639821][ T9418] ? tipc_ehdr_validate+0x240/0x240 [ 1734.646067][ T9418] ? crypto_mod_put+0x8c/0x100 [ 1734.651905][ T9418] tipc_nl_node_set_key+0xa5d/0xf70 [ 1734.658121][ T9418] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1734.665839][ T9418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.673912][ T9418] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1734.683052][ T9418] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1734.692102][ T9418] genl_family_rcv_msg_doit+0x228/0x320 [ 1734.697831][ T9418] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1734.706353][ T9418] ? mutex_lock_io_nested+0x1150/0x1150 [ 1734.712882][ T9418] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1734.720996][ T9418] ? __radix_tree_lookup+0x211/0x2a0 [ 1734.727281][ T9418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.735094][ T9418] ? genl_get_cmd+0x3cf/0x480 [ 1734.740141][ T9418] genl_rcv_msg+0x328/0x580 [ 1734.745900][ T9418] ? genl_get_cmd+0x480/0x480 [ 1734.751792][ T9418] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1734.759308][ T9418] ? lock_release+0x720/0x720 [ 1734.764907][ T9418] netlink_rcv_skb+0x153/0x420 [ 1734.770511][ T9418] ? genl_get_cmd+0x480/0x480 [ 1734.776400][ T9418] ? netlink_ack+0xa60/0xa60 [ 1734.782049][ T9418] ? netlink_deliver_tap+0x1b1/0xc30 [ 1734.788525][ T9418] genl_rcv+0x24/0x40 [ 1734.793292][ T9418] netlink_unicast+0x533/0x7d0 [ 1734.798639][ T9418] ? netlink_attachskb+0x880/0x880 [ 1734.819040][ T9418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.825982][ T9418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.852368][ T9418] ? __phys_addr_symbol+0x2c/0x70 [ 1734.857603][ T9418] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1734.863440][ T9418] ? __check_object_size+0x16e/0x3f0 [ 1734.869412][ T9418] netlink_sendmsg+0x86d/0xda0 [ 1734.874651][ T9418] ? netlink_unicast+0x7d0/0x7d0 [ 1734.879654][ T9418] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1734.887591][ T9418] ? netlink_unicast+0x7d0/0x7d0 [ 1734.894255][ T9418] sock_sendmsg+0xcf/0x120 [ 1734.899624][ T9418] ____sys_sendmsg+0x6e8/0x810 [ 1734.904255][ T9418] ? kernel_sendmsg+0x50/0x50 [ 1734.909968][ T9418] ? do_recvmmsg+0x6d0/0x6d0 [ 1734.914609][ T9418] ? lock_chain_count+0x20/0x20 [ 1734.919652][ T9418] ? lock_chain_count+0x20/0x20 [ 1734.925115][ T9418] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1734.931107][ T9418] ___sys_sendmsg+0xf3/0x170 [ 1734.942024][ T9418] ? sendmsg_copy_msghdr+0x160/0x160 [ 1734.947186][ T9418] ? __fget_files+0x21b/0x3e0 [ 1734.951740][ T9418] ? lock_downgrade+0x6e0/0x6e0 [ 1734.956442][ T9418] ? __fget_files+0x23d/0x3e0 [ 1734.961987][ T9418] ? __fget_light+0xea/0x280 [ 1734.966617][ T9418] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1734.972870][ T9418] __sys_sendmsg+0xe5/0x1b0 [ 1734.977388][ T9418] ? __sys_sendmsg_sock+0x30/0x30 [ 1734.983528][ T9418] ? lock_downgrade+0x6e0/0x6e0 [ 1734.988761][ T9418] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1734.997175][ T9418] __do_fast_syscall_32+0x65/0xf0 [ 1735.003749][ T9418] do_fast_syscall_32+0x2f/0x70 [ 1735.010284][ T9418] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.018637][ T9418] RIP: 0023:0xf6f11549 [ 1735.023676][ T9418] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1735.048294][ T9418] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1735.058878][ T9418] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1735.068038][ T9418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.076593][ T9418] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1735.084979][ T9418] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1735.094574][ T9418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.102871][ T9418] 20:44:58 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 22) 20:44:58 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000050000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x700000000000000, 0x0, &(0x7f00000001c0)}) 20:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1735.203745][ T9431] FAULT_INJECTION: forcing a failure. [ 1735.203745][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.220329][ T9431] CPU: 1 PID: 9431 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 20:44:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x30000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1735.231408][ T9431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1735.243791][ T9431] Call Trace: [ 1735.248495][ T9431] [ 1735.252339][ T9431] dump_stack_lvl+0xcd/0x134 [ 1735.258985][ T9431] should_fail.cold+0x5/0xa [ 1735.266994][ T9431] ? crypto_create_tfm_node+0x7f/0x330 [ 1735.276811][ T9431] should_failslab+0x5/0x10 [ 1735.284914][ T9431] __kmalloc_node+0x75/0x390 [ 1735.291083][ T9431] crypto_create_tfm_node+0x7f/0x330 [ 1735.296818][ T9431] crypto_spawn_tfm2+0x60/0xb0 [ 1735.302431][ T9431] ? cryptd_hash_init_tfm+0x120/0x120 [ 1735.309390][ T9431] cryptd_aead_init_tfm+0x3c/0x140 [ 1735.316585][ T9431] ? cryptd_hash_init_tfm+0x120/0x120 [ 1735.324695][ T9431] crypto_aead_init_tfm+0x138/0x1a0 [ 1735.331955][ T9431] crypto_create_tfm_node+0x10d/0x330 [ 1735.338556][ T9431] crypto_alloc_tfm_node+0x107/0x260 [ 1735.344797][ T9431] cryptd_alloc_aead+0x101/0x200 [ 1735.350792][ T9431] ? cryptd_alloc_ahash+0x200/0x200 [ 1735.357657][ T9431] ? __kmalloc_node+0x62/0x390 [ 1735.363886][ T9431] simd_aead_init+0x67/0x1b0 [ 1735.369855][ T9431] ? simd_aead_exit+0x40/0x40 [ 1735.376571][ T9431] crypto_aead_init_tfm+0x138/0x1a0 [ 1735.382895][ T9431] crypto_create_tfm_node+0x10d/0x330 [ 1735.389800][ T9431] crypto_alloc_tfm_node+0x107/0x260 [ 1735.396393][ T9431] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1735.403485][ T9431] tipc_crypto_key_init+0x82/0x110 [ 1735.409906][ T9431] ? tipc_ehdr_validate+0x240/0x240 [ 1735.416602][ T9431] ? crypto_mod_put+0x8c/0x100 [ 1735.422469][ T9431] tipc_nl_node_set_key+0xa5d/0xf70 [ 1735.428993][ T9431] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1735.436335][ T9431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1735.443851][ T9431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1735.452034][ T9431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1735.461426][ T9431] genl_family_rcv_msg_doit+0x228/0x320 [ 1735.468475][ T9431] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1735.475920][ T9431] ? mutex_lock_io_nested+0x1150/0x1150 [ 1735.482568][ T9431] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1735.490221][ T9431] ? __radix_tree_lookup+0x211/0x2a0 [ 1735.495657][ T9431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1735.502557][ T9431] ? genl_get_cmd+0x3cf/0x480 [ 1735.507721][ T9431] genl_rcv_msg+0x328/0x580 [ 1735.513890][ T9431] ? genl_get_cmd+0x480/0x480 [ 1735.519666][ T9431] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1735.526686][ T9431] ? lock_release+0x720/0x720 [ 1735.532291][ T9431] netlink_rcv_skb+0x153/0x420 [ 1735.537201][ T9431] ? genl_get_cmd+0x480/0x480 [ 1735.542602][ T9431] ? netlink_ack+0xa60/0xa60 [ 1735.548182][ T9431] ? netlink_deliver_tap+0x1b1/0xc30 [ 1735.554525][ T9431] genl_rcv+0x24/0x40 [ 1735.558622][ T9431] netlink_unicast+0x533/0x7d0 [ 1735.563712][ T9431] ? netlink_attachskb+0x880/0x880 [ 1735.569727][ T9431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1735.576001][ T9431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1735.581970][ T9431] ? __phys_addr_symbol+0x2c/0x70 [ 1735.587253][ T9431] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1735.594143][ T9431] ? __check_object_size+0x16e/0x3f0 [ 1735.600155][ T9431] netlink_sendmsg+0x86d/0xda0 [ 1735.605791][ T9431] ? netlink_unicast+0x7d0/0x7d0 [ 1735.611779][ T9431] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1735.619337][ T9431] ? netlink_unicast+0x7d0/0x7d0 [ 1735.625263][ T9431] sock_sendmsg+0xcf/0x120 [ 1735.630715][ T9431] ____sys_sendmsg+0x6e8/0x810 [ 1735.636487][ T9431] ? kernel_sendmsg+0x50/0x50 [ 1735.642067][ T9431] ? do_recvmmsg+0x6d0/0x6d0 [ 1735.648133][ T9431] ? lock_chain_count+0x20/0x20 [ 1735.654211][ T9431] ? lock_chain_count+0x20/0x20 [ 1735.660661][ T9431] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1735.668072][ T9431] ___sys_sendmsg+0xf3/0x170 [ 1735.673563][ T9431] ? sendmsg_copy_msghdr+0x160/0x160 [ 1735.679298][ T9431] ? __fget_files+0x21b/0x3e0 [ 1735.685080][ T9431] ? lock_downgrade+0x6e0/0x6e0 [ 1735.690872][ T9431] ? __fget_files+0x23d/0x3e0 [ 1735.696198][ T9431] ? __fget_light+0xea/0x280 [ 1735.701926][ T9431] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1735.709541][ T9431] __sys_sendmsg+0xe5/0x1b0 [ 1735.715629][ T9431] ? __sys_sendmsg_sock+0x30/0x30 [ 1735.722910][ T9431] ? lock_downgrade+0x6e0/0x6e0 [ 1735.729018][ T9431] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1735.737372][ T9431] __do_fast_syscall_32+0x65/0xf0 [ 1735.743909][ T9431] do_fast_syscall_32+0x2f/0x70 [ 1735.749954][ T9431] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1735.758192][ T9431] RIP: 0023:0xf6f11549 [ 1735.764565][ T9431] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1735.787605][ T9431] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1735.797282][ T9431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1735.809054][ T9431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1735.819918][ T9431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1735.828838][ T9431] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1735.840207][ T9431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1735.852755][ T9431] 20:44:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 23) 20:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf0ffff, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:44:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000060000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x7, &(0x7f00000001c0)}) [ 1735.977133][ T9444] FAULT_INJECTION: forcing a failure. [ 1735.977133][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 1735.992495][ T9444] CPU: 0 PID: 9444 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1736.002294][ T9444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1736.013342][ T9444] Call Trace: 20:44:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000070000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:44:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x1000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1736.017948][ T9444] [ 1736.022545][ T9444] dump_stack_lvl+0xcd/0x134 [ 1736.028655][ T9444] should_fail.cold+0x5/0xa [ 1736.035071][ T9444] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1736.042650][ T9444] should_failslab+0x5/0x10 [ 1736.048230][ T9444] kmem_cache_alloc_trace+0x55/0x2c0 [ 1736.054526][ T9444] ? crypto_aead_setkey+0x10f/0x290 [ 1736.061159][ T9444] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1736.067391][ T9444] tipc_crypto_key_init+0x82/0x110 [ 1736.073252][ T9444] ? tipc_ehdr_validate+0x240/0x240 [ 1736.079509][ T9444] ? crypto_mod_put+0x8c/0x100 [ 1736.084862][ T9444] tipc_nl_node_set_key+0xa5d/0xf70 [ 1736.091438][ T9444] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1736.099536][ T9444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1736.107719][ T9444] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1736.116826][ T9444] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1736.125786][ T9444] genl_family_rcv_msg_doit+0x228/0x320 [ 1736.132213][ T9444] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1736.140606][ T9444] ? mutex_lock_io_nested+0x1150/0x1150 [ 1736.147696][ T9444] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1736.155445][ T9444] ? __radix_tree_lookup+0x211/0x2a0 [ 1736.161914][ T9444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1736.169963][ T9444] ? genl_get_cmd+0x3cf/0x480 [ 1736.175995][ T9444] genl_rcv_msg+0x328/0x580 [ 1736.181610][ T9444] ? genl_get_cmd+0x480/0x480 [ 1736.187354][ T9444] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1736.195754][ T9444] ? lock_release+0x720/0x720 [ 1736.201105][ T9444] netlink_rcv_skb+0x153/0x420 [ 1736.207046][ T9444] ? genl_get_cmd+0x480/0x480 [ 1736.212828][ T9444] ? netlink_ack+0xa60/0xa60 [ 1736.218499][ T9444] ? netlink_deliver_tap+0x1b1/0xc30 [ 1736.224964][ T9444] genl_rcv+0x24/0x40 [ 1736.229788][ T9444] netlink_unicast+0x533/0x7d0 [ 1736.234863][ T9444] ? netlink_attachskb+0x880/0x880 [ 1736.240878][ T9444] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1736.248841][ T9444] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1736.256618][ T9444] ? __phys_addr_symbol+0x2c/0x70 [ 1736.262422][ T9444] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1736.269550][ T9444] ? __check_object_size+0x16e/0x3f0 [ 1736.276406][ T9444] netlink_sendmsg+0x86d/0xda0 [ 1736.282123][ T9444] ? netlink_unicast+0x7d0/0x7d0 [ 1736.288384][ T9444] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1736.295664][ T9444] ? netlink_unicast+0x7d0/0x7d0 [ 1736.301333][ T9444] sock_sendmsg+0xcf/0x120 [ 1736.306379][ T9444] ____sys_sendmsg+0x6e8/0x810 [ 1736.312158][ T9444] ? kernel_sendmsg+0x50/0x50 [ 1736.317484][ T9444] ? do_recvmmsg+0x6d0/0x6d0 [ 1736.323040][ T9444] ? lock_chain_count+0x20/0x20 [ 1736.329403][ T9444] ? lock_chain_count+0x20/0x20 [ 1736.335348][ T9444] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1736.343084][ T9444] ___sys_sendmsg+0xf3/0x170 [ 1736.348953][ T9444] ? sendmsg_copy_msghdr+0x160/0x160 [ 1736.355181][ T9444] ? __fget_files+0x21b/0x3e0 [ 1736.360113][ T9444] ? lock_downgrade+0x6e0/0x6e0 [ 1736.366223][ T9444] ? __fget_files+0x23d/0x3e0 [ 1736.372086][ T9444] ? __fget_light+0xea/0x280 [ 1736.377857][ T9444] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1736.385427][ T9444] __sys_sendmsg+0xe5/0x1b0 [ 1736.391042][ T9444] ? __sys_sendmsg_sock+0x30/0x30 [ 1736.397229][ T9444] ? lock_downgrade+0x6e0/0x6e0 [ 1736.403402][ T9444] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1736.411765][ T9444] __do_fast_syscall_32+0x65/0xf0 [ 1736.418083][ T9444] do_fast_syscall_32+0x2f/0x70 [ 1736.423657][ T9444] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1736.432393][ T9444] RIP: 0023:0xf6f11549 [ 1736.437691][ T9444] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1736.464762][ T9444] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1736.475350][ T9444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1736.484157][ T9444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1736.493599][ T9444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1736.503691][ T9444] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1736.512165][ T9444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1736.521091][ T9444] 20:45:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 24) 20:45:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000080000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x2000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1736.626902][ T9458] FAULT_INJECTION: forcing a failure. [ 1736.626902][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.642485][ T9458] CPU: 1 PID: 9458 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1736.652814][ T9458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1736.663903][ T9458] Call Trace: [ 1736.668225][ T9458] [ 1736.671424][ T9458] dump_stack_lvl+0xcd/0x134 [ 1736.676714][ T9458] should_fail.cold+0x5/0xa [ 1736.682253][ T9458] ? crypto_create_tfm_node+0x7f/0x330 20:45:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x700, &(0x7f00000001c0)}) [ 1736.687837][ T9458] should_failslab+0x5/0x10 [ 1736.693233][ T9458] __kmalloc_node+0x75/0x390 [ 1736.699855][ T9458] crypto_create_tfm_node+0x7f/0x330 [ 1736.707451][ T9458] crypto_alloc_tfm_node+0x107/0x260 [ 1736.715138][ T9458] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1736.722377][ T9458] tipc_crypto_key_init+0x82/0x110 [ 1736.728438][ T9458] ? tipc_ehdr_validate+0x240/0x240 [ 1736.734766][ T9458] ? crypto_mod_put+0x8c/0x100 [ 1736.740429][ T9458] tipc_nl_node_set_key+0xa5d/0xf70 [ 1736.747310][ T9458] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1736.755048][ T9458] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1736.762567][ T9458] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1736.771555][ T9458] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1736.780647][ T9458] genl_family_rcv_msg_doit+0x228/0x320 [ 1736.787559][ T9458] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1736.796463][ T9458] ? mutex_lock_io_nested+0x1150/0x1150 [ 1736.802934][ T9458] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1736.810599][ T9458] ? __radix_tree_lookup+0x211/0x2a0 [ 1736.817148][ T9458] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1736.825003][ T9458] ? genl_get_cmd+0x3cf/0x480 [ 1736.830842][ T9458] genl_rcv_msg+0x328/0x580 [ 1736.836748][ T9458] ? genl_get_cmd+0x480/0x480 [ 1736.842558][ T9458] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1736.850019][ T9458] ? lock_release+0x720/0x720 [ 1736.855920][ T9458] netlink_rcv_skb+0x153/0x420 [ 1736.861964][ T9458] ? genl_get_cmd+0x480/0x480 [ 1736.867766][ T9458] ? netlink_ack+0xa60/0xa60 [ 1736.873771][ T9458] ? netlink_deliver_tap+0x1b1/0xc30 [ 1736.879950][ T9458] genl_rcv+0x24/0x40 [ 1736.884747][ T9458] netlink_unicast+0x533/0x7d0 [ 1736.890430][ T9458] ? netlink_attachskb+0x880/0x880 [ 1736.896477][ T9458] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1736.903895][ T9458] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1736.911300][ T9458] ? __phys_addr_symbol+0x2c/0x70 [ 1736.917470][ T9458] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1736.924410][ T9458] ? __check_object_size+0x16e/0x3f0 [ 1736.931228][ T9458] netlink_sendmsg+0x86d/0xda0 [ 1736.937621][ T9458] ? netlink_unicast+0x7d0/0x7d0 [ 1736.943274][ T9458] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1736.950915][ T9458] ? netlink_unicast+0x7d0/0x7d0 [ 1736.957068][ T9458] sock_sendmsg+0xcf/0x120 [ 1736.962560][ T9458] ____sys_sendmsg+0x6e8/0x810 [ 1736.968646][ T9458] ? kernel_sendmsg+0x50/0x50 [ 1736.974420][ T9458] ? do_recvmmsg+0x6d0/0x6d0 [ 1736.979663][ T9458] ? lock_chain_count+0x20/0x20 [ 1736.985620][ T9458] ? lock_chain_count+0x20/0x20 [ 1736.991492][ T9458] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1736.999023][ T9458] ___sys_sendmsg+0xf3/0x170 [ 1737.004709][ T9458] ? sendmsg_copy_msghdr+0x160/0x160 [ 1737.011534][ T9458] ? __fget_files+0x21b/0x3e0 [ 1737.017337][ T9458] ? lock_downgrade+0x6e0/0x6e0 [ 1737.023434][ T9458] ? __fget_files+0x23d/0x3e0 [ 1737.028765][ T9458] ? __fget_light+0xea/0x280 [ 1737.034895][ T9458] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1737.042838][ T9458] __sys_sendmsg+0xe5/0x1b0 [ 1737.048469][ T9458] ? __sys_sendmsg_sock+0x30/0x30 [ 1737.055001][ T9458] ? lock_downgrade+0x6e0/0x6e0 [ 1737.059892][ T9458] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1737.066661][ T9458] __do_fast_syscall_32+0x65/0xf0 [ 1737.072213][ T9458] do_fast_syscall_32+0x2f/0x70 [ 1737.077848][ T9458] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.085903][ T9458] RIP: 0023:0xf6f11549 [ 1737.090913][ T9458] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1737.115207][ T9458] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1737.125706][ T9458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1737.135575][ T9458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1737.145371][ T9458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1737.154969][ T9458] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.165620][ T9458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.177042][ T9458] 20:45:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 25) 20:45:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x3000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000090000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1737.295959][ T9471] FAULT_INJECTION: forcing a failure. 20:45:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x7000000, &(0x7f00000001c0)}) [ 1737.295959][ T9471] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.313152][ T9471] CPU: 1 PID: 9471 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1737.323675][ T9471] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1737.334718][ T9471] Call Trace: [ 1737.339807][ T9471] [ 1737.343569][ T9471] dump_stack_lvl+0xcd/0x134 [ 1737.348465][ T9471] should_fail.cold+0x5/0xa [ 1737.353105][ T9471] ? crypto_create_tfm_node+0x7f/0x330 [ 1737.358850][ T9471] should_failslab+0x5/0x10 [ 1737.363347][ T9471] __kmalloc_node+0x75/0x390 [ 1737.368056][ T9471] crypto_create_tfm_node+0x7f/0x330 [ 1737.373730][ T9471] crypto_alloc_tfm_node+0x107/0x260 [ 1737.379206][ T9471] cryptd_alloc_aead+0x101/0x200 [ 1737.384453][ T9471] ? cryptd_alloc_ahash+0x200/0x200 [ 1737.390043][ T9471] ? __kmalloc_node+0x62/0x390 [ 1737.395175][ T9471] simd_aead_init+0x67/0x1b0 [ 1737.400475][ T9471] ? simd_aead_exit+0x40/0x40 [ 1737.405335][ T9471] crypto_aead_init_tfm+0x138/0x1a0 [ 1737.410953][ T9471] crypto_create_tfm_node+0x10d/0x330 [ 1737.417050][ T9471] crypto_alloc_tfm_node+0x107/0x260 [ 1737.422312][ T9471] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1737.428758][ T9471] tipc_crypto_key_init+0x82/0x110 [ 1737.434050][ T9471] ? tipc_ehdr_validate+0x240/0x240 [ 1737.439461][ T9471] ? crypto_mod_put+0x8c/0x100 [ 1737.444788][ T9471] tipc_nl_node_set_key+0xa5d/0xf70 [ 1737.450357][ T9471] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1737.456697][ T9471] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1737.463053][ T9471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1737.470539][ T9471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1737.478173][ T9471] genl_family_rcv_msg_doit+0x228/0x320 [ 1737.483768][ T9471] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1737.490951][ T9471] ? mutex_lock_io_nested+0x1150/0x1150 [ 1737.497319][ T9471] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1737.505166][ T9471] ? __radix_tree_lookup+0x211/0x2a0 [ 1737.511755][ T9471] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1737.519321][ T9471] ? genl_get_cmd+0x3cf/0x480 [ 1737.525356][ T9471] genl_rcv_msg+0x328/0x580 [ 1737.530931][ T9471] ? genl_get_cmd+0x480/0x480 [ 1737.537072][ T9471] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1737.545495][ T9471] ? lock_release+0x720/0x720 [ 1737.552188][ T9471] netlink_rcv_skb+0x153/0x420 [ 1737.558282][ T9471] ? genl_get_cmd+0x480/0x480 [ 1737.564236][ T9471] ? netlink_ack+0xa60/0xa60 [ 1737.570187][ T9471] ? netlink_deliver_tap+0x1b1/0xc30 [ 1737.576033][ T9471] genl_rcv+0x24/0x40 [ 1737.580163][ T9471] netlink_unicast+0x533/0x7d0 [ 1737.585188][ T9471] ? netlink_attachskb+0x880/0x880 [ 1737.591289][ T9471] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1737.598865][ T9471] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1737.606260][ T9471] ? __phys_addr_symbol+0x2c/0x70 [ 1737.612235][ T9471] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1737.618685][ T9471] ? __check_object_size+0x16e/0x3f0 [ 1737.624997][ T9471] netlink_sendmsg+0x86d/0xda0 [ 1737.630370][ T9471] ? netlink_unicast+0x7d0/0x7d0 [ 1737.636373][ T9471] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1737.644183][ T9471] ? netlink_unicast+0x7d0/0x7d0 [ 1737.649921][ T9471] sock_sendmsg+0xcf/0x120 [ 1737.655850][ T9471] ____sys_sendmsg+0x6e8/0x810 [ 1737.660732][ T9471] ? kernel_sendmsg+0x50/0x50 [ 1737.665880][ T9471] ? do_recvmmsg+0x6d0/0x6d0 [ 1737.671383][ T9471] ? lock_chain_count+0x20/0x20 [ 1737.677427][ T9471] ? lock_chain_count+0x20/0x20 [ 1737.683490][ T9471] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1737.690811][ T9471] ___sys_sendmsg+0xf3/0x170 [ 1737.697113][ T9471] ? sendmsg_copy_msghdr+0x160/0x160 [ 1737.703827][ T9471] ? __fget_files+0x21b/0x3e0 [ 1737.709529][ T9471] ? lock_downgrade+0x6e0/0x6e0 [ 1737.715632][ T9471] ? __fget_files+0x23d/0x3e0 [ 1737.721978][ T9471] ? __fget_light+0xea/0x280 [ 1737.738114][ T9471] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1737.745700][ T9471] __sys_sendmsg+0xe5/0x1b0 [ 1737.753662][ T9471] ? __sys_sendmsg_sock+0x30/0x30 [ 1737.760089][ T9471] ? lock_downgrade+0x6e0/0x6e0 [ 1737.765799][ T9471] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1737.773704][ T9471] __do_fast_syscall_32+0x65/0xf0 [ 1737.779150][ T9471] do_fast_syscall_32+0x2f/0x70 [ 1737.784013][ T9471] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1737.791800][ T9471] RIP: 0023:0xf6f11549 [ 1737.796953][ T9471] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1737.821049][ T9471] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1737.830210][ T9471] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1737.838653][ T9471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1737.846911][ T9471] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1737.855785][ T9471] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1737.864386][ T9471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1737.873788][ T9471] 20:45:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 26) 20:45:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x4000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000e0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1737.978309][ T9485] FAULT_INJECTION: forcing a failure. [ 1737.978309][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.997665][ T9485] CPU: 1 PID: 9485 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1738.009078][ T9485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1738.022298][ T9485] Call Trace: [ 1738.027456][ T9485] [ 1738.031225][ T9485] dump_stack_lvl+0xcd/0x134 [ 1738.037925][ T9485] should_fail.cold+0x5/0xa [ 1738.043975][ T9485] ? crypto_create_tfm_node+0x7f/0x330 [ 1738.050177][ T9485] should_failslab+0x5/0x10 [ 1738.054928][ T9485] __kmalloc_node+0x75/0x390 [ 1738.059440][ T9485] crypto_create_tfm_node+0x7f/0x330 [ 1738.065649][ T9485] crypto_spawn_tfm2+0x60/0xb0 [ 1738.070642][ T9485] ? cryptd_hash_init_tfm+0x120/0x120 [ 1738.075936][ T9485] cryptd_aead_init_tfm+0x3c/0x140 [ 1738.081207][ T9485] ? cryptd_hash_init_tfm+0x120/0x120 [ 1738.086948][ T9485] crypto_aead_init_tfm+0x138/0x1a0 [ 1738.092625][ T9485] crypto_create_tfm_node+0x10d/0x330 [ 1738.098300][ T9485] crypto_alloc_tfm_node+0x107/0x260 [ 1738.104292][ T9485] cryptd_alloc_aead+0x101/0x200 [ 1738.109832][ T9485] ? cryptd_alloc_ahash+0x200/0x200 [ 1738.115010][ T9485] ? __kmalloc_node+0x62/0x390 [ 1738.119636][ T9485] simd_aead_init+0x67/0x1b0 [ 1738.124203][ T9485] ? simd_aead_exit+0x40/0x40 [ 1738.128814][ T9485] crypto_aead_init_tfm+0x138/0x1a0 [ 1738.134362][ T9485] crypto_create_tfm_node+0x10d/0x330 [ 1738.141624][ T9485] crypto_alloc_tfm_node+0x107/0x260 [ 1738.146785][ T9485] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1738.152757][ T9485] tipc_crypto_key_init+0x82/0x110 [ 1738.158218][ T9485] ? tipc_ehdr_validate+0x240/0x240 [ 1738.163561][ T9485] ? crypto_mod_put+0x8c/0x100 [ 1738.168209][ T9485] tipc_nl_node_set_key+0xa5d/0xf70 [ 1738.173918][ T9485] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1738.180522][ T9485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1738.186856][ T9485] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1738.195358][ T9485] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1738.205046][ T9485] genl_family_rcv_msg_doit+0x228/0x320 [ 1738.212513][ T9485] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1738.221372][ T9485] ? mutex_lock_io_nested+0x1150/0x1150 [ 1738.228014][ T9485] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1738.235442][ T9485] ? __radix_tree_lookup+0x211/0x2a0 [ 1738.241430][ T9485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1738.248870][ T9485] ? genl_get_cmd+0x3cf/0x480 [ 1738.255251][ T9485] genl_rcv_msg+0x328/0x580 [ 1738.260741][ T9485] ? genl_get_cmd+0x480/0x480 [ 1738.266480][ T9485] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1738.274136][ T9485] ? lock_release+0x720/0x720 [ 1738.279145][ T9485] ? check_path.constprop.0+0x50/0x50 [ 1738.284969][ T9485] netlink_rcv_skb+0x153/0x420 [ 1738.290220][ T9485] ? genl_get_cmd+0x480/0x480 [ 1738.295748][ T9485] ? netlink_ack+0xa60/0xa60 [ 1738.300852][ T9485] ? netlink_deliver_tap+0x1b1/0xc30 [ 1738.307733][ T9485] genl_rcv+0x24/0x40 [ 1738.312766][ T9485] netlink_unicast+0x533/0x7d0 [ 1738.319223][ T9485] ? netlink_attachskb+0x880/0x880 [ 1738.326429][ T9485] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1738.335007][ T9485] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1738.342974][ T9485] ? __phys_addr_symbol+0x2c/0x70 [ 1738.348543][ T9485] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1738.355966][ T9485] ? __check_object_size+0x16e/0x3f0 [ 1738.362287][ T9485] netlink_sendmsg+0x86d/0xda0 [ 1738.367171][ T9485] ? netlink_unicast+0x7d0/0x7d0 [ 1738.373895][ T9485] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1738.383300][ T9485] ? netlink_unicast+0x7d0/0x7d0 [ 1738.391416][ T9485] sock_sendmsg+0xcf/0x120 [ 1738.397075][ T9485] ____sys_sendmsg+0x6e8/0x810 [ 1738.403914][ T9485] ? kernel_sendmsg+0x50/0x50 [ 1738.412841][ T9485] ? do_recvmmsg+0x6d0/0x6d0 [ 1738.421282][ T9485] ? perf_trace_lock+0xeb/0x4d0 [ 1738.429403][ T9485] ? lock_chain_count+0x20/0x20 [ 1738.436187][ T9485] ? check_path.constprop.0+0x50/0x50 [ 1738.444175][ T9485] ___sys_sendmsg+0xf3/0x170 [ 1738.449524][ T9485] ? sendmsg_copy_msghdr+0x160/0x160 [ 1738.456047][ T9485] ? __fget_files+0x21b/0x3e0 [ 1738.461624][ T9485] ? lock_downgrade+0x6e0/0x6e0 [ 1738.466861][ T9485] ? __fget_files+0x23d/0x3e0 [ 1738.472300][ T9485] ? __fget_light+0xea/0x280 [ 1738.477228][ T9485] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1738.484907][ T9485] __sys_sendmsg+0xe5/0x1b0 [ 1738.489785][ T9485] ? __sys_sendmsg_sock+0x30/0x30 [ 1738.495435][ T9485] ? lock_downgrade+0x6e0/0x6e0 [ 1738.500916][ T9485] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1738.507668][ T9485] __do_fast_syscall_32+0x65/0xf0 [ 1738.513254][ T9485] do_fast_syscall_32+0x2f/0x70 [ 1738.519328][ T9485] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1738.526284][ T9485] RIP: 0023:0xf6f11549 [ 1738.531345][ T9485] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1738.555094][ T9485] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1738.564313][ T9485] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1738.573533][ T9485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1738.582827][ T9485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1738.592774][ T9485] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1738.603066][ T9485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1738.615068][ T9485] 20:45:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000f0000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x700000000000000, &(0x7f00000001c0)}) 20:45:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x5000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 27) 20:45:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000600000000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1738.746740][ T9496] FAULT_INJECTION: forcing a failure. [ 1738.746740][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.762625][ T9496] CPU: 1 PID: 9496 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1738.772693][ T9496] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1738.783888][ T9496] Call Trace: [ 1738.788653][ T9496] [ 1738.792417][ T9496] dump_stack_lvl+0xcd/0x134 [ 1738.798087][ T9496] should_fail.cold+0x5/0xa [ 1738.803392][ T9496] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1738.810965][ T9496] should_failslab+0x5/0x10 [ 1738.816494][ T9496] kmem_cache_alloc_trace+0x55/0x2c0 [ 1738.822959][ T9496] ? crypto_aead_setkey+0x10f/0x290 [ 1738.829579][ T9496] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1738.836786][ T9496] tipc_crypto_key_init+0x82/0x110 [ 1738.843871][ T9496] ? tipc_ehdr_validate+0x240/0x240 [ 1738.850072][ T9496] ? crypto_mod_put+0x8c/0x100 [ 1738.856360][ T9496] tipc_nl_node_set_key+0xa5d/0xf70 [ 1738.862634][ T9496] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1738.870640][ T9496] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1738.878454][ T9496] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1738.888905][ T9496] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1738.897788][ T9496] genl_family_rcv_msg_doit+0x228/0x320 [ 1738.905418][ T9496] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1738.914707][ T9496] ? mutex_lock_io_nested+0x1150/0x1150 [ 1738.922260][ T9496] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1738.930261][ T9496] ? __radix_tree_lookup+0x211/0x2a0 [ 1738.936806][ T9496] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1738.945090][ T9496] ? genl_get_cmd+0x3cf/0x480 [ 1738.950809][ T9496] genl_rcv_msg+0x328/0x580 [ 1738.957654][ T9496] ? genl_get_cmd+0x480/0x480 [ 1738.964989][ T9496] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1738.974016][ T9496] ? lock_release+0x720/0x720 [ 1738.979703][ T9496] ? check_path.constprop.0+0x50/0x50 [ 1738.987051][ T9496] netlink_rcv_skb+0x153/0x420 [ 1738.992954][ T9496] ? genl_get_cmd+0x480/0x480 [ 1738.998693][ T9496] ? netlink_ack+0xa60/0xa60 [ 1739.004364][ T9496] ? netlink_deliver_tap+0x1b1/0xc30 [ 1739.012141][ T9496] genl_rcv+0x24/0x40 [ 1739.017538][ T9496] netlink_unicast+0x533/0x7d0 [ 1739.023828][ T9496] ? netlink_attachskb+0x880/0x880 [ 1739.030735][ T9496] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1739.038308][ T9496] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1739.046534][ T9496] ? __phys_addr_symbol+0x2c/0x70 [ 1739.053406][ T9496] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1739.061968][ T9496] ? __check_object_size+0x187/0x3f0 [ 1739.068974][ T9496] netlink_sendmsg+0x86d/0xda0 [ 1739.074887][ T9496] ? netlink_unicast+0x7d0/0x7d0 [ 1739.080914][ T9496] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1739.090013][ T9496] ? netlink_unicast+0x7d0/0x7d0 [ 1739.097097][ T9496] sock_sendmsg+0xcf/0x120 [ 1739.103477][ T9496] ____sys_sendmsg+0x6e8/0x810 [ 1739.110284][ T9496] ? kernel_sendmsg+0x50/0x50 [ 1739.116445][ T9496] ? do_recvmmsg+0x6d0/0x6d0 [ 1739.122528][ T9496] ? perf_trace_lock+0xeb/0x4d0 [ 1739.129064][ T9496] ? lock_chain_count+0x20/0x20 [ 1739.135938][ T9496] ? check_path.constprop.0+0x50/0x50 [ 1739.144256][ T9496] ___sys_sendmsg+0xf3/0x170 [ 1739.151309][ T9496] ? sendmsg_copy_msghdr+0x160/0x160 [ 1739.157439][ T9496] ? __fget_files+0x21b/0x3e0 [ 1739.164128][ T9496] ? lock_downgrade+0x6e0/0x6e0 [ 1739.171280][ T9496] ? __fget_files+0x23d/0x3e0 [ 1739.179285][ T9496] ? __fget_light+0xea/0x280 [ 1739.187851][ T9496] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1739.197305][ T9496] __sys_sendmsg+0xe5/0x1b0 [ 1739.204155][ T9496] ? __sys_sendmsg_sock+0x30/0x30 [ 1739.210438][ T9496] ? lock_downgrade+0x6e0/0x6e0 [ 1739.216815][ T9496] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1739.225916][ T9496] __do_fast_syscall_32+0x65/0xf0 [ 1739.232851][ T9496] do_fast_syscall_32+0x2f/0x70 [ 1739.239768][ T9496] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.248999][ T9496] RIP: 0023:0xf6f11549 [ 1739.254786][ T9496] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1739.281491][ T9496] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1739.292814][ T9496] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1739.301534][ T9496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1739.311058][ T9496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1739.321828][ T9496] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1739.331878][ T9496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1739.341839][ T9496] 20:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x6000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000f00000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 28) 20:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x7000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1739.470068][ T9508] FAULT_INJECTION: forcing a failure. 20:45:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 1739.470068][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 1739.486855][ T9508] CPU: 1 PID: 9508 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 20:45:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000300000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1739.498644][ T9508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1739.511579][ T9508] Call Trace: [ 1739.515692][ T9508] [ 1739.519530][ T9508] dump_stack_lvl+0xcd/0x134 [ 1739.525533][ T9508] should_fail.cold+0x5/0xa [ 1739.531675][ T9508] ? crypto_create_tfm_node+0x7f/0x330 [ 1739.538553][ T9508] should_failslab+0x5/0x10 [ 1739.543458][ T9508] __kmalloc_node+0x75/0x390 [ 1739.548767][ T9508] crypto_create_tfm_node+0x7f/0x330 [ 1739.554641][ T9508] crypto_alloc_tfm_node+0x107/0x260 [ 1739.560931][ T9508] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1739.568901][ T9508] tipc_crypto_key_init+0x82/0x110 [ 1739.575932][ T9508] ? tipc_ehdr_validate+0x240/0x240 [ 1739.583127][ T9508] ? crypto_mod_put+0x8c/0x100 [ 1739.589252][ T9508] tipc_nl_node_set_key+0xa5d/0xf70 [ 1739.596426][ T9508] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1739.604500][ T9508] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1739.612870][ T9508] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1739.622001][ T9508] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1739.630987][ T9508] genl_family_rcv_msg_doit+0x228/0x320 [ 1739.637742][ T9508] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 20:45:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000080)=[@register_looper, @enter_looper, @register_looper], 0x65, 0x0, &(0x7f00000000c0)="edfcd4160eb6b0a63741736ef38a3356bff0da12e0f4bd33d0bdcf1ac2274476af65c44139e4cbc547df90e8b10fe0b477b80e61df8a019fabba2e3f6d3d6f3e088b2c1acf72551e54ee8774ee3859bafb888f5127ed99e0c23f1750a4b406c3950ba9868f"}) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 1739.646634][ T9508] ? mutex_lock_io_nested+0x1150/0x1150 [ 1739.653096][ T9508] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1739.660390][ T9508] ? __radix_tree_lookup+0x211/0x2a0 [ 1739.667088][ T9508] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1739.674593][ T9508] ? genl_get_cmd+0x3cf/0x480 [ 1739.680355][ T9508] genl_rcv_msg+0x328/0x580 [ 1739.686291][ T9508] ? genl_get_cmd+0x480/0x480 [ 1739.693318][ T9508] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1739.702667][ T9508] ? lock_release+0x720/0x720 [ 1739.708413][ T9508] netlink_rcv_skb+0x153/0x420 [ 1739.714151][ T9508] ? genl_get_cmd+0x480/0x480 [ 1739.720956][ T9508] ? netlink_ack+0xa60/0xa60 [ 1739.726722][ T9508] ? netlink_deliver_tap+0x1b1/0xc30 [ 1739.733085][ T9508] genl_rcv+0x24/0x40 [ 1739.737686][ T9508] netlink_unicast+0x533/0x7d0 [ 1739.743197][ T9508] ? netlink_attachskb+0x880/0x880 [ 1739.749054][ T9508] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1739.756440][ T9508] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1739.763919][ T9508] ? __phys_addr_symbol+0x2c/0x70 [ 1739.769584][ T9508] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1739.776144][ T9508] ? __check_object_size+0x16e/0x3f0 [ 1739.782467][ T9508] netlink_sendmsg+0x86d/0xda0 [ 1739.787345][ T9508] ? netlink_unicast+0x7d0/0x7d0 [ 1739.792911][ T9508] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1739.800064][ T9508] ? netlink_unicast+0x7d0/0x7d0 [ 1739.805289][ T9508] sock_sendmsg+0xcf/0x120 [ 1739.810437][ T9508] ____sys_sendmsg+0x6e8/0x810 [ 1739.815973][ T9508] ? kernel_sendmsg+0x50/0x50 [ 1739.822478][ T9508] ? do_recvmmsg+0x6d0/0x6d0 [ 1739.827702][ T9508] ? lock_chain_count+0x20/0x20 [ 1739.834039][ T9508] ? lock_chain_count+0x20/0x20 [ 1739.842474][ T9508] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1739.850382][ T9508] ___sys_sendmsg+0xf3/0x170 [ 1739.855610][ T9508] ? sendmsg_copy_msghdr+0x160/0x160 [ 1739.862288][ T9508] ? __fget_files+0x21b/0x3e0 [ 1739.868076][ T9508] ? lock_downgrade+0x6e0/0x6e0 [ 1739.873956][ T9508] ? __fget_files+0x23d/0x3e0 [ 1739.879470][ T9508] ? __fget_light+0xea/0x280 [ 1739.884744][ T9508] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1739.892530][ T9508] __sys_sendmsg+0xe5/0x1b0 [ 1739.897562][ T9508] ? __sys_sendmsg_sock+0x30/0x30 [ 1739.904311][ T9508] ? lock_downgrade+0x6e0/0x6e0 [ 1739.910778][ T9508] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1739.918200][ T9508] __do_fast_syscall_32+0x65/0xf0 [ 1739.924743][ T9508] do_fast_syscall_32+0x2f/0x70 [ 1739.930104][ T9508] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1739.937433][ T9508] RIP: 0023:0xf6f11549 [ 1739.944118][ T9508] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1739.974699][ T9508] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1739.985566][ T9508] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1739.994925][ T9508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1740.007036][ T9508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1740.017130][ T9508] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.028303][ T9508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.038734][ T9508] 20:45:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 29) 20:45:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000500000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x8000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1740.125335][ T9522] FAULT_INJECTION: forcing a failure. [ 1740.125335][ T9522] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.143041][ T9522] CPU: 0 PID: 9522 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1740.153815][ T9522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1740.166270][ T9522] Call Trace: [ 1740.170588][ T9522] [ 1740.174416][ T9522] dump_stack_lvl+0xcd/0x134 20:45:03 executing program 2: msgrcv(0xffffffffffffffff, &(0x7f0000000080), 0x4, 0x3, 0x800) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 1740.181307][ T9522] should_fail.cold+0x5/0xa [ 1740.187877][ T9522] ? crypto_create_tfm_node+0x7f/0x330 [ 1740.195317][ T9522] should_failslab+0x5/0x10 [ 1740.201512][ T9522] __kmalloc_node+0x75/0x390 [ 1740.207146][ T9522] crypto_create_tfm_node+0x7f/0x330 [ 1740.213801][ T9522] crypto_alloc_tfm_node+0x107/0x260 [ 1740.220785][ T9522] cryptd_alloc_aead+0x101/0x200 [ 1740.227054][ T9522] ? cryptd_alloc_ahash+0x200/0x200 [ 1740.234096][ T9522] ? __kmalloc_node+0x62/0x390 [ 1740.240041][ T9522] simd_aead_init+0x67/0x1b0 [ 1740.245826][ T9522] ? simd_aead_exit+0x40/0x40 [ 1740.251817][ T9522] crypto_aead_init_tfm+0x138/0x1a0 [ 1740.258691][ T9522] crypto_create_tfm_node+0x10d/0x330 [ 1740.265196][ T9522] crypto_alloc_tfm_node+0x107/0x260 [ 1740.271696][ T9522] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1740.278268][ T9522] tipc_crypto_key_init+0x82/0x110 [ 1740.284807][ T9522] ? tipc_ehdr_validate+0x240/0x240 [ 1740.291068][ T9522] ? crypto_mod_put+0x8c/0x100 [ 1740.297201][ T9522] tipc_nl_node_set_key+0xa5d/0xf70 [ 1740.303503][ T9522] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1740.311107][ T9522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.318350][ T9522] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1740.327393][ T9522] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1740.336272][ T9522] genl_family_rcv_msg_doit+0x228/0x320 [ 1740.342768][ T9522] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1740.351544][ T9522] ? mutex_lock_io_nested+0x1150/0x1150 [ 1740.357288][ T9522] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1740.364922][ T9522] ? __radix_tree_lookup+0x211/0x2a0 [ 1740.371343][ T9522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.378647][ T9522] ? genl_get_cmd+0x3cf/0x480 [ 1740.383958][ T9522] genl_rcv_msg+0x328/0x580 [ 1740.389602][ T9522] ? genl_get_cmd+0x480/0x480 [ 1740.395526][ T9522] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1740.403849][ T9522] ? lock_release+0x720/0x720 [ 1740.410021][ T9522] netlink_rcv_skb+0x153/0x420 [ 1740.415696][ T9522] ? genl_get_cmd+0x480/0x480 [ 1740.421666][ T9522] ? netlink_ack+0xa60/0xa60 [ 1740.427835][ T9522] ? netlink_deliver_tap+0x1b1/0xc30 [ 1740.434441][ T9522] genl_rcv+0x24/0x40 [ 1740.439606][ T9522] netlink_unicast+0x533/0x7d0 [ 1740.445698][ T9522] ? netlink_attachskb+0x880/0x880 [ 1740.451856][ T9522] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1740.460395][ T9522] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1740.468149][ T9522] ? __phys_addr_symbol+0x2c/0x70 [ 1740.474324][ T9522] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1740.482045][ T9522] ? __check_object_size+0x16e/0x3f0 [ 1740.489146][ T9522] netlink_sendmsg+0x86d/0xda0 [ 1740.495339][ T9522] ? netlink_unicast+0x7d0/0x7d0 [ 1740.501418][ T9522] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1740.508982][ T9522] ? netlink_unicast+0x7d0/0x7d0 [ 1740.515006][ T9522] sock_sendmsg+0xcf/0x120 [ 1740.520150][ T9522] ____sys_sendmsg+0x6e8/0x810 [ 1740.525781][ T9522] ? kernel_sendmsg+0x50/0x50 [ 1740.531541][ T9522] ? do_recvmmsg+0x6d0/0x6d0 [ 1740.537352][ T9522] ? lock_chain_count+0x20/0x20 [ 1740.543656][ T9522] ? lock_chain_count+0x20/0x20 [ 1740.550771][ T9522] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1740.558169][ T9522] ___sys_sendmsg+0xf3/0x170 [ 1740.563343][ T9522] ? sendmsg_copy_msghdr+0x160/0x160 [ 1740.569757][ T9522] ? __fget_files+0x21b/0x3e0 [ 1740.575418][ T9522] ? lock_downgrade+0x6e0/0x6e0 [ 1740.581907][ T9522] ? __fget_files+0x23d/0x3e0 [ 1740.588303][ T9522] ? __fget_light+0xea/0x280 [ 1740.594175][ T9522] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1740.602668][ T9522] __sys_sendmsg+0xe5/0x1b0 [ 1740.608385][ T9522] ? __sys_sendmsg_sock+0x30/0x30 [ 1740.614571][ T9522] ? lock_downgrade+0x6e0/0x6e0 [ 1740.620500][ T9522] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1740.628541][ T9522] __do_fast_syscall_32+0x65/0xf0 [ 1740.635035][ T9522] do_fast_syscall_32+0x2f/0x70 [ 1740.641137][ T9522] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1740.649058][ T9522] RIP: 0023:0xf6f11549 [ 1740.653975][ T9522] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1740.678640][ T9522] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1740.689250][ T9522] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1740.699724][ T9522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1740.709700][ T9522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1740.720181][ T9522] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1740.729723][ T9522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1740.739672][ T9522] 20:45:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000600000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 30) 20:45:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x9000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1740.821970][ T9534] FAULT_INJECTION: forcing a failure. 20:45:04 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c2f0000000000000040000000be"], 0x0, 0x0, &(0x7f00000001c0)}) [ 1740.821970][ T9534] name failslab, interval 1, probability 0, space 0, times 0 [ 1740.844213][ T9534] CPU: 0 PID: 9534 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1740.856107][ T9534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1740.867162][ T9534] Call Trace: [ 1740.871177][ T9534] [ 1740.874730][ T9534] dump_stack_lvl+0xcd/0x134 [ 1740.880591][ T9534] should_fail.cold+0x5/0xa [ 1740.886261][ T9534] ? crypto_create_tfm_node+0x7f/0x330 [ 1740.893073][ T9534] should_failslab+0x5/0x10 [ 1740.899443][ T9534] __kmalloc_node+0x75/0x390 [ 1740.905310][ T9534] crypto_create_tfm_node+0x7f/0x330 [ 1740.911787][ T9534] crypto_spawn_tfm2+0x60/0xb0 [ 1740.918072][ T9534] ? cryptd_hash_init_tfm+0x120/0x120 [ 1740.925562][ T9534] cryptd_aead_init_tfm+0x3c/0x140 [ 1740.932912][ T9534] ? cryptd_hash_init_tfm+0x120/0x120 [ 1740.941330][ T9534] crypto_aead_init_tfm+0x138/0x1a0 [ 1740.950005][ T9534] crypto_create_tfm_node+0x10d/0x330 [ 1740.959532][ T9534] crypto_alloc_tfm_node+0x107/0x260 [ 1740.968881][ T9534] cryptd_alloc_aead+0x101/0x200 [ 1740.976047][ T9534] ? cryptd_alloc_ahash+0x200/0x200 [ 1740.983553][ T9534] ? __kmalloc_node+0x62/0x390 [ 1740.990475][ T9534] simd_aead_init+0x67/0x1b0 [ 1740.996940][ T9534] ? simd_aead_exit+0x40/0x40 [ 1741.002830][ T9534] crypto_aead_init_tfm+0x138/0x1a0 [ 1741.009265][ T9534] crypto_create_tfm_node+0x10d/0x330 [ 1741.016996][ T9534] crypto_alloc_tfm_node+0x107/0x260 [ 1741.024878][ T9534] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1741.033489][ T9534] tipc_crypto_key_init+0x82/0x110 [ 1741.040465][ T9534] ? tipc_ehdr_validate+0x240/0x240 [ 1741.047167][ T9534] ? crypto_mod_put+0x8c/0x100 [ 1741.054076][ T9534] tipc_nl_node_set_key+0xa5d/0xf70 [ 1741.061890][ T9534] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1741.072309][ T9534] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1741.082653][ T9534] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1741.092412][ T9534] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1741.101940][ T9534] genl_family_rcv_msg_doit+0x228/0x320 [ 1741.109287][ T9534] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1741.118473][ T9534] ? mutex_lock_io_nested+0x1150/0x1150 [ 1741.125940][ T9534] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1741.134421][ T9534] ? __radix_tree_lookup+0x211/0x2a0 [ 1741.140767][ T9534] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1741.149791][ T9534] ? genl_get_cmd+0x3cf/0x480 [ 1741.156308][ T9534] genl_rcv_msg+0x328/0x580 [ 1741.162450][ T9534] ? genl_get_cmd+0x480/0x480 [ 1741.169057][ T9534] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1741.177190][ T9534] ? lock_release+0x720/0x720 [ 1741.183375][ T9534] netlink_rcv_skb+0x153/0x420 [ 1741.190293][ T9534] ? genl_get_cmd+0x480/0x480 [ 1741.196949][ T9534] ? netlink_ack+0xa60/0xa60 [ 1741.204387][ T9534] ? netlink_deliver_tap+0x1b1/0xc30 [ 1741.211816][ T9534] genl_rcv+0x24/0x40 [ 1741.217637][ T9534] netlink_unicast+0x533/0x7d0 [ 1741.224711][ T9534] ? netlink_attachskb+0x880/0x880 [ 1741.232053][ T9534] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1741.240071][ T9534] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1741.247502][ T9534] ? __phys_addr_symbol+0x2c/0x70 [ 1741.254622][ T9534] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1741.261805][ T9534] ? __check_object_size+0x16e/0x3f0 [ 1741.268293][ T9534] netlink_sendmsg+0x86d/0xda0 [ 1741.275272][ T9534] ? netlink_unicast+0x7d0/0x7d0 [ 1741.281411][ T9534] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1741.289753][ T9534] ? netlink_unicast+0x7d0/0x7d0 [ 1741.295927][ T9534] sock_sendmsg+0xcf/0x120 [ 1741.301094][ T9534] ____sys_sendmsg+0x6e8/0x810 [ 1741.307303][ T9534] ? kernel_sendmsg+0x50/0x50 [ 1741.314684][ T9534] ? do_recvmmsg+0x6d0/0x6d0 [ 1741.320791][ T9534] ? lock_chain_count+0x20/0x20 [ 1741.327259][ T9534] ? lock_chain_count+0x20/0x20 [ 1741.334169][ T9534] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1741.341729][ T9534] ___sys_sendmsg+0xf3/0x170 [ 1741.347412][ T9534] ? sendmsg_copy_msghdr+0x160/0x160 [ 1741.353902][ T9534] ? __fget_files+0x21b/0x3e0 [ 1741.359524][ T9534] ? lock_downgrade+0x6e0/0x6e0 [ 1741.365448][ T9534] ? __fget_files+0x23d/0x3e0 [ 1741.371427][ T9534] ? __fget_light+0xea/0x280 [ 1741.377354][ T9534] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1741.384791][ T9534] __sys_sendmsg+0xe5/0x1b0 [ 1741.390398][ T9534] ? __sys_sendmsg_sock+0x30/0x30 [ 1741.396421][ T9534] ? lock_downgrade+0x6e0/0x6e0 [ 1741.402006][ T9534] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1741.410320][ T9534] __do_fast_syscall_32+0x65/0xf0 [ 1741.416547][ T9534] do_fast_syscall_32+0x2f/0x70 [ 1741.422406][ T9534] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1741.430209][ T9534] RIP: 0023:0xf6f11549 [ 1741.434796][ T9534] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1741.459039][ T9534] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1741.468663][ T9534] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1741.478386][ T9534] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1741.489586][ T9534] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1741.500212][ T9534] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1741.508886][ T9534] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1741.519086][ T9534] [ 1741.546709][ T9540] binder: 9538:9540 unknown command 789340942 20:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xc000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1741.555007][ T9540] binder: 9538:9540 ioctl c0306201 20000040 returned -22 20:45:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 31) 20:45:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000d50600000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1741.621443][ T9548] FAULT_INJECTION: forcing a failure. [ 1741.621443][ T9548] name failslab, interval 1, probability 0, space 0, times 0 20:45:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000140), &(0x7f00000001c0)={0x0, 0xfb, 0x51, 0x1, 0x26, "28ea04418a1bab9ab5001e629beec28b", "2161b80556d24ea9ac343b0c30fdc7caabb96a53014433230991ea184dd342c67221dbd887899b6715d955acc419967280a8d0a5fa1f6c74642f0014"}, 0x51, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0x18, 0x0, &(0x7f00000000c0)="04512cf09cbaf61aaad035abb2222bd295321cc9502ac978"}) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @nfc={0x27, 0x0, 0x1, 0x2}, @can={0x1d, 0x0}, @nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x9, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000240)='syz_tun\x00', 0x42, 0xb12, 0x80}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000300)={'tunl0\x00', r1, 0x20, 0x80, 0x7, 0x6, {{0x7, 0x4, 0x1, 0x8, 0x1c, 0x64, 0x0, 0xdc, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x7c, [@broadcast]}, @end]}}}}}) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 1741.639200][ T9548] CPU: 3 PID: 9548 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1741.650023][ T9548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1741.660413][ T9548] Call Trace: [ 1741.664606][ T9548] [ 1741.668172][ T9548] dump_stack_lvl+0xcd/0x134 [ 1741.673825][ T9548] should_fail.cold+0x5/0xa [ 1741.679680][ T9548] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1741.686587][ T9548] should_failslab+0x5/0x10 [ 1741.692031][ T9548] kmem_cache_alloc_trace+0x55/0x2c0 [ 1741.697991][ T9548] ? crypto_aead_setkey+0x10f/0x290 [ 1741.703646][ T9548] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1741.710296][ T9548] tipc_crypto_key_init+0x82/0x110 [ 1741.716443][ T9548] ? tipc_ehdr_validate+0x240/0x240 [ 1741.722814][ T9548] ? crypto_mod_put+0x8c/0x100 [ 1741.728238][ T9548] tipc_nl_node_set_key+0xa5d/0xf70 [ 1741.733685][ T9548] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1741.741159][ T9548] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1741.748282][ T9548] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1741.756943][ T9548] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1741.766168][ T9548] genl_family_rcv_msg_doit+0x228/0x320 [ 1741.773069][ T9548] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1741.781519][ T9548] ? mutex_lock_io_nested+0x1150/0x1150 [ 1741.788091][ T9548] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1741.796377][ T9548] ? __radix_tree_lookup+0x211/0x2a0 [ 1741.803224][ T9548] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1741.810286][ T9548] ? genl_get_cmd+0x3cf/0x480 [ 1741.815791][ T9548] genl_rcv_msg+0x328/0x580 [ 1741.820822][ T9548] ? genl_get_cmd+0x480/0x480 [ 1741.826297][ T9548] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1741.834404][ T9548] ? lock_release+0x720/0x720 [ 1741.840783][ T9548] netlink_rcv_skb+0x153/0x420 [ 1741.846811][ T9548] ? genl_get_cmd+0x480/0x480 [ 1741.852498][ T9548] ? netlink_ack+0xa60/0xa60 [ 1741.857940][ T9548] ? netlink_deliver_tap+0x1b1/0xc30 [ 1741.864658][ T9548] genl_rcv+0x24/0x40 [ 1741.869577][ T9548] netlink_unicast+0x533/0x7d0 [ 1741.874891][ T9548] ? netlink_attachskb+0x880/0x880 [ 1741.880820][ T9548] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1741.887762][ T9548] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1741.894884][ T9548] ? __phys_addr_symbol+0x2c/0x70 [ 1741.900523][ T9548] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1741.908058][ T9548] ? __check_object_size+0x187/0x3f0 [ 1741.914904][ T9548] netlink_sendmsg+0x86d/0xda0 [ 1741.920657][ T9548] ? netlink_unicast+0x7d0/0x7d0 [ 1741.926135][ T9548] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1741.933151][ T9548] ? netlink_unicast+0x7d0/0x7d0 [ 1741.938745][ T9548] sock_sendmsg+0xcf/0x120 [ 1741.943581][ T9548] ____sys_sendmsg+0x6e8/0x810 [ 1741.948801][ T9548] ? kernel_sendmsg+0x50/0x50 [ 1741.954210][ T9548] ? do_recvmmsg+0x6d0/0x6d0 [ 1741.959593][ T9548] ? lock_chain_count+0x20/0x20 [ 1741.964809][ T9548] ? lock_chain_count+0x20/0x20 [ 1741.970085][ T9548] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1741.976928][ T9548] ___sys_sendmsg+0xf3/0x170 [ 1741.982171][ T9548] ? sendmsg_copy_msghdr+0x160/0x160 [ 1741.988196][ T9548] ? __fget_files+0x21b/0x3e0 [ 1741.993369][ T9548] ? lock_downgrade+0x6e0/0x6e0 [ 1741.998565][ T9548] ? __fget_files+0x23d/0x3e0 [ 1742.003664][ T9548] ? __fget_light+0xea/0x280 [ 1742.008990][ T9548] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1742.016469][ T9548] __sys_sendmsg+0xe5/0x1b0 [ 1742.021517][ T9548] ? __sys_sendmsg_sock+0x30/0x30 [ 1742.027125][ T9548] ? lock_downgrade+0x6e0/0x6e0 [ 1742.032651][ T9548] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1742.039965][ T9548] __do_fast_syscall_32+0x65/0xf0 [ 1742.045675][ T9548] do_fast_syscall_32+0x2f/0x70 [ 1742.051251][ T9548] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.058599][ T9548] RIP: 0023:0xf6f11549 [ 1742.063287][ T9548] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1742.086716][ T9548] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1742.096024][ T9548] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1742.105002][ T9548] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1742.115857][ T9548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1742.125750][ T9548] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.135460][ T9548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.145988][ T9548] 20:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xe000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 32) 20:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000700000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1742.264081][ T9564] FAULT_INJECTION: forcing a failure. 20:45:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x3f000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1742.264081][ T9564] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.280627][ T9564] CPU: 0 PID: 9564 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1742.290467][ T9564] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1742.300919][ T9564] Call Trace: [ 1742.304762][ T9564] [ 1742.308214][ T9564] dump_stack_lvl+0xcd/0x134 [ 1742.313570][ T9564] should_fail.cold+0x5/0xa [ 1742.319387][ T9564] ? crypto_create_tfm_node+0x7f/0x330 [ 1742.326214][ T9564] should_failslab+0x5/0x10 [ 1742.331663][ T9564] __kmalloc_node+0x75/0x390 [ 1742.336406][ T9564] crypto_create_tfm_node+0x7f/0x330 [ 1742.342348][ T9564] crypto_alloc_tfm_node+0x107/0x260 [ 1742.348987][ T9564] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1742.356304][ T9564] tipc_crypto_key_init+0x82/0x110 [ 1742.362776][ T9564] ? tipc_ehdr_validate+0x240/0x240 [ 1742.369506][ T9564] ? crypto_mod_put+0x8c/0x100 [ 1742.375827][ T9564] tipc_nl_node_set_key+0xa5d/0xf70 [ 1742.382577][ T9564] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1742.390492][ T9564] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1742.398821][ T9564] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1742.407758][ T9564] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1742.416379][ T9564] genl_family_rcv_msg_doit+0x228/0x320 [ 1742.423154][ T9564] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1742.432464][ T9564] ? mutex_lock_io_nested+0x1150/0x1150 [ 1742.439233][ T9564] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1742.447091][ T9564] ? __radix_tree_lookup+0x211/0x2a0 [ 1742.453284][ T9564] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1742.460533][ T9564] ? genl_get_cmd+0x3cf/0x480 [ 1742.466125][ T9564] genl_rcv_msg+0x328/0x580 [ 1742.471837][ T9564] ? genl_get_cmd+0x480/0x480 [ 1742.477779][ T9564] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1742.484992][ T9564] ? lock_release+0x720/0x720 [ 1742.491131][ T9564] netlink_rcv_skb+0x153/0x420 [ 1742.497614][ T9564] ? genl_get_cmd+0x480/0x480 [ 1742.503867][ T9564] ? netlink_ack+0xa60/0xa60 [ 1742.509653][ T9564] ? netlink_deliver_tap+0x1b1/0xc30 [ 1742.516594][ T9564] genl_rcv+0x24/0x40 [ 1742.521827][ T9564] netlink_unicast+0x533/0x7d0 [ 1742.527859][ T9564] ? netlink_attachskb+0x880/0x880 [ 1742.533940][ T9564] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1742.541630][ T9564] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1742.548832][ T9564] ? __phys_addr_symbol+0x2c/0x70 [ 1742.554148][ T9564] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1742.560157][ T9564] ? __check_object_size+0x16e/0x3f0 [ 1742.566213][ T9564] netlink_sendmsg+0x86d/0xda0 [ 1742.571821][ T9564] ? netlink_unicast+0x7d0/0x7d0 [ 1742.577749][ T9564] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1742.584418][ T9564] ? netlink_unicast+0x7d0/0x7d0 [ 1742.590476][ T9564] sock_sendmsg+0xcf/0x120 [ 1742.595755][ T9564] ____sys_sendmsg+0x6e8/0x810 [ 1742.600918][ T9564] ? kernel_sendmsg+0x50/0x50 [ 1742.606118][ T9564] ? do_recvmmsg+0x6d0/0x6d0 [ 1742.611814][ T9564] ? lock_chain_count+0x20/0x20 [ 1742.617910][ T9564] ? lock_chain_count+0x20/0x20 [ 1742.624129][ T9564] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1742.631879][ T9564] ___sys_sendmsg+0xf3/0x170 [ 1742.637870][ T9564] ? sendmsg_copy_msghdr+0x160/0x160 [ 1742.644993][ T9564] ? __fget_files+0x21b/0x3e0 [ 1742.651749][ T9564] ? lock_downgrade+0x6e0/0x6e0 [ 1742.658723][ T9564] ? __fget_files+0x23d/0x3e0 [ 1742.664532][ T9564] ? __fget_light+0xea/0x280 [ 1742.670589][ T9564] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1742.679170][ T9564] __sys_sendmsg+0xe5/0x1b0 [ 1742.684973][ T9564] ? __sys_sendmsg_sock+0x30/0x30 [ 1742.691322][ T9564] ? lock_downgrade+0x6e0/0x6e0 [ 1742.697615][ T9564] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1742.706287][ T9564] __do_fast_syscall_32+0x65/0xf0 [ 1742.712430][ T9564] do_fast_syscall_32+0x2f/0x70 [ 1742.718303][ T9564] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1742.726158][ T9564] RIP: 0023:0xf6f11549 [ 1742.731399][ T9564] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1742.755682][ T9564] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1742.766485][ T9564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1742.776395][ T9564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1742.786109][ T9564] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1742.795972][ T9564] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1742.806455][ T9564] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1742.816179][ T9564] 20:45:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000900000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:06 executing program 2: r0 = perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/289], 0x0, 0x0, &(0x7f00000001c0)}) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="0da7b87212c9fc5d4d89ed10119dea17181abb395cff8a50b9e301ac9b8efc913e735ea5b31fd6acdc98e7fda574b24243207bed2f6e939418db9a6c7836d70bfff750bf536645633fcd4d3492cfba71d350a0a8844e2793f9bf0ec58f", 0x5d}], 0x1, 0xffffffff, 0x3) 20:45:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000e00000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 33) 20:45:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x60000000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000f00000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1742.913222][ T9580] FAULT_INJECTION: forcing a failure. [ 1742.913222][ T9580] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.928827][ T9580] CPU: 1 PID: 9580 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1742.938958][ T9580] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1742.949747][ T9580] Call Trace: [ 1742.953773][ T9580] [ 1742.957400][ T9580] dump_stack_lvl+0xcd/0x134 [ 1742.962691][ T9580] should_fail.cold+0x5/0xa [ 1742.968178][ T9580] ? crypto_create_tfm_node+0x7f/0x330 [ 1742.975116][ T9580] should_failslab+0x5/0x10 [ 1742.980222][ T9580] __kmalloc_node+0x75/0x390 [ 1742.985545][ T9580] crypto_create_tfm_node+0x7f/0x330 [ 1742.991906][ T9580] crypto_alloc_tfm_node+0x107/0x260 [ 1742.998015][ T9580] cryptd_alloc_aead+0x101/0x200 [ 1743.004080][ T9580] ? cryptd_alloc_ahash+0x200/0x200 [ 1743.010924][ T9580] ? __kmalloc_node+0x62/0x390 [ 1743.016894][ T9580] simd_aead_init+0x67/0x1b0 [ 1743.022932][ T9580] ? simd_aead_exit+0x40/0x40 [ 1743.029405][ T9580] crypto_aead_init_tfm+0x138/0x1a0 [ 1743.036101][ T9580] crypto_create_tfm_node+0x10d/0x330 [ 1743.042744][ T9580] crypto_alloc_tfm_node+0x107/0x260 [ 1743.049252][ T9580] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1743.055483][ T9580] tipc_crypto_key_init+0x82/0x110 [ 1743.060747][ T9580] ? tipc_ehdr_validate+0x240/0x240 [ 1743.065999][ T9580] ? crypto_mod_put+0x8c/0x100 [ 1743.071099][ T9580] tipc_nl_node_set_key+0xa5d/0xf70 [ 1743.076482][ T9580] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1743.082715][ T9580] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1743.089157][ T9580] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1743.096614][ T9580] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1743.104988][ T9580] genl_family_rcv_msg_doit+0x228/0x320 [ 1743.110872][ T9580] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1743.118098][ T9580] ? mutex_lock_io_nested+0x1150/0x1150 [ 1743.123429][ T9580] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1743.129622][ T9580] ? __radix_tree_lookup+0x211/0x2a0 [ 1743.135028][ T9580] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1743.141348][ T9580] ? genl_get_cmd+0x3cf/0x480 [ 1743.146062][ T9580] genl_rcv_msg+0x328/0x580 [ 1743.150998][ T9580] ? genl_get_cmd+0x480/0x480 [ 1743.155639][ T9580] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1743.162235][ T9580] ? lock_release+0x720/0x720 [ 1743.167199][ T9580] netlink_rcv_skb+0x153/0x420 [ 1743.173339][ T9580] ? genl_get_cmd+0x480/0x480 [ 1743.178930][ T9580] ? netlink_ack+0xa60/0xa60 [ 1743.184544][ T9580] ? netlink_deliver_tap+0x1b1/0xc30 [ 1743.191203][ T9580] genl_rcv+0x24/0x40 [ 1743.195448][ T9580] netlink_unicast+0x533/0x7d0 [ 1743.200558][ T9580] ? netlink_attachskb+0x880/0x880 [ 1743.206433][ T9580] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1743.214903][ T9580] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1743.221494][ T9580] ? __phys_addr_symbol+0x2c/0x70 [ 1743.226579][ T9580] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1743.232360][ T9580] ? __check_object_size+0x16e/0x3f0 [ 1743.237857][ T9580] netlink_sendmsg+0x86d/0xda0 [ 1743.242608][ T9580] ? netlink_unicast+0x7d0/0x7d0 [ 1743.248591][ T9580] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1743.256041][ T9580] ? netlink_unicast+0x7d0/0x7d0 [ 1743.260886][ T9580] sock_sendmsg+0xcf/0x120 [ 1743.265403][ T9580] ____sys_sendmsg+0x6e8/0x810 [ 1743.270146][ T9580] ? kernel_sendmsg+0x50/0x50 [ 1743.274841][ T9580] ? do_recvmmsg+0x6d0/0x6d0 [ 1743.280013][ T9580] ? lock_chain_count+0x20/0x20 [ 1743.285223][ T9580] ? lock_chain_count+0x20/0x20 [ 1743.291318][ T9580] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1743.298392][ T9580] ___sys_sendmsg+0xf3/0x170 [ 1743.303535][ T9580] ? sendmsg_copy_msghdr+0x160/0x160 [ 1743.309457][ T9580] ? __fget_files+0x21b/0x3e0 [ 1743.314942][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 1743.320877][ T9580] ? __fget_files+0x23d/0x3e0 [ 1743.326710][ T9580] ? __fget_light+0xea/0x280 [ 1743.332537][ T9580] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1743.340448][ T9580] __sys_sendmsg+0xe5/0x1b0 [ 1743.346072][ T9580] ? __sys_sendmsg_sock+0x30/0x30 [ 1743.352302][ T9580] ? lock_downgrade+0x6e0/0x6e0 [ 1743.358313][ T9580] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1743.366644][ T9580] __do_fast_syscall_32+0x65/0xf0 [ 1743.372649][ T9580] do_fast_syscall_32+0x2f/0x70 [ 1743.378864][ T9580] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1743.386485][ T9580] RIP: 0023:0xf6f11549 [ 1743.391676][ T9580] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1743.415838][ T9580] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1743.426275][ T9580] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1743.436081][ T9580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1743.445744][ T9580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1743.455528][ T9580] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1743.465521][ T9580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1743.474952][ T9580] 20:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x9effffff, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:07 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 34) 20:45:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000003f00000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1743.554403][ T9591] FAULT_INJECTION: forcing a failure. [ 1743.554403][ T9591] name failslab, interval 1, probability 0, space 0, times 0 20:45:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x4, 0x3, 0x7}}, 0x30) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000340)={0x0, 0x3f, 0x4, 0x80000, r1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) dup3(r4, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x144, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x1, 0x2, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x0, 0x0, 0xf}, @fda={0x66646185, 0x1, 0x2, 0xb}}, &(0x7f0000000240)={0x0, 0x1c, 0x44}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0xffff, 0x0, 0x3a}, @flat=@handle={0x73682a85, 0x1009}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000300)={0x0, 0x1c, 0x34}}, 0x400}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x1001, 0x3}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x10a, 0x2}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}, 0x400}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x2, 0x0, 0x12}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/27, 0x1b, 0x2, 0x19}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000500)={0x0, 0x1c, 0x44}}, 0x1000}, @enter_looper, @acquire={0x40046305, 0x3}], 0xe2, 0x0, &(0x7f00000006c0)="c206c2e510f15369ef2353d47373cb9edaff0d1bb292fc1f06e66d9a5c301954e0f83f406d20c3a6023df44afb1e045ed136a6203feb8369bd0ec9bd99f05e2140d348f443d944cbc6c4b31e1512046a4bca928d04dd02fc47da8039ea8c45fb9472ea0da45d1f72af617043e6769ecd924435ec65827a877f2607e68b6608bf598aa76006c0a1415ad15f36ef82a0f17227f0cc231f4942283c7578a887b633722a73cb1f2c300507a6723fdb05f1b226d0133b6f98da7183f6d763eee7cc5a394f7966082b81b9aafe1fa427fd853cdde18ce00bb019daef158381b0d83e759d53"}) 20:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xca0d0000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1743.571315][ T9591] CPU: 1 PID: 9591 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1743.582460][ T9591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1743.593103][ T9591] Call Trace: [ 1743.597047][ T9591] [ 1743.600761][ T9591] dump_stack_lvl+0xcd/0x134 [ 1743.607765][ T9591] should_fail.cold+0x5/0xa [ 1743.614217][ T9591] ? crypto_create_tfm_node+0x7f/0x330 [ 1743.621567][ T9591] should_failslab+0x5/0x10 [ 1743.627186][ T9591] __kmalloc_node+0x75/0x390 [ 1743.633497][ T9591] crypto_create_tfm_node+0x7f/0x330 [ 1743.640490][ T9591] crypto_spawn_tfm2+0x60/0xb0 [ 1743.647603][ T9591] ? cryptd_hash_init_tfm+0x120/0x120 [ 1743.654441][ T9591] cryptd_aead_init_tfm+0x3c/0x140 [ 1743.660108][ T9591] ? cryptd_hash_init_tfm+0x120/0x120 [ 1743.666406][ T9591] crypto_aead_init_tfm+0x138/0x1a0 [ 1743.672843][ T9591] crypto_create_tfm_node+0x10d/0x330 [ 1743.680867][ T9591] crypto_alloc_tfm_node+0x107/0x260 [ 1743.687713][ T9591] cryptd_alloc_aead+0x101/0x200 [ 1743.693881][ T9591] ? cryptd_alloc_ahash+0x200/0x200 [ 1743.700196][ T9591] ? __kmalloc_node+0x62/0x390 [ 1743.705996][ T9591] simd_aead_init+0x67/0x1b0 [ 1743.712057][ T9591] ? simd_aead_exit+0x40/0x40 [ 1743.717721][ T9591] crypto_aead_init_tfm+0x138/0x1a0 [ 1743.724975][ T9591] crypto_create_tfm_node+0x10d/0x330 [ 1743.732461][ T9591] crypto_alloc_tfm_node+0x107/0x260 [ 1743.739994][ T9591] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1743.746903][ T9591] tipc_crypto_key_init+0x82/0x110 [ 1743.753103][ T9591] ? tipc_ehdr_validate+0x240/0x240 [ 1743.762198][ T9591] ? crypto_mod_put+0x8c/0x100 [ 1743.770413][ T9591] tipc_nl_node_set_key+0xa5d/0xf70 [ 1743.776913][ T9591] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1743.785140][ T9591] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1743.795113][ T9591] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1743.804543][ T9591] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1743.813902][ T9591] genl_family_rcv_msg_doit+0x228/0x320 [ 1743.820433][ T9591] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1743.829948][ T9591] ? mutex_lock_io_nested+0x1150/0x1150 [ 1743.836974][ T9591] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1743.845539][ T9591] ? __radix_tree_lookup+0x211/0x2a0 [ 1743.852526][ T9591] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1743.860257][ T9591] ? genl_get_cmd+0x3cf/0x480 [ 1743.866610][ T9591] genl_rcv_msg+0x328/0x580 [ 1743.872344][ T9591] ? genl_get_cmd+0x480/0x480 [ 1743.878618][ T9591] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1743.886662][ T9591] ? lock_release+0x720/0x720 [ 1743.892668][ T9591] netlink_rcv_skb+0x153/0x420 [ 1743.898335][ T9591] ? genl_get_cmd+0x480/0x480 [ 1743.903676][ T9591] ? netlink_ack+0xa60/0xa60 [ 1743.909600][ T9591] ? netlink_deliver_tap+0x1b1/0xc30 [ 1743.916182][ T9591] genl_rcv+0x24/0x40 [ 1743.921206][ T9591] netlink_unicast+0x533/0x7d0 [ 1743.927111][ T9591] ? netlink_attachskb+0x880/0x880 [ 1743.935045][ T9591] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1743.941919][ T9591] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1743.949027][ T9591] ? __phys_addr_symbol+0x2c/0x70 [ 1743.955852][ T9591] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1743.964059][ T9591] ? __check_object_size+0x16e/0x3f0 [ 1743.970404][ T9591] netlink_sendmsg+0x86d/0xda0 [ 1743.975481][ T9591] ? netlink_unicast+0x7d0/0x7d0 [ 1743.982000][ T9591] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1743.989705][ T9591] ? netlink_unicast+0x7d0/0x7d0 [ 1743.995072][ T9591] sock_sendmsg+0xcf/0x120 [ 1744.000401][ T9591] ____sys_sendmsg+0x6e8/0x810 [ 1744.006577][ T9591] ? kernel_sendmsg+0x50/0x50 [ 1744.012617][ T9591] ? do_recvmmsg+0x6d0/0x6d0 [ 1744.018482][ T9591] ? lock_chain_count+0x20/0x20 [ 1744.024824][ T9591] ? lock_chain_count+0x20/0x20 [ 1744.030703][ T9591] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1744.037861][ T9591] ___sys_sendmsg+0xf3/0x170 [ 1744.043596][ T9591] ? sendmsg_copy_msghdr+0x160/0x160 [ 1744.050163][ T9591] ? __fget_files+0x21b/0x3e0 [ 1744.056148][ T9591] ? lock_downgrade+0x6e0/0x6e0 [ 1744.062124][ T9591] ? __fget_files+0x23d/0x3e0 [ 1744.067506][ T9591] ? __fget_light+0xea/0x280 [ 1744.072647][ T9591] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1744.079757][ T9591] __sys_sendmsg+0xe5/0x1b0 [ 1744.085683][ T9591] ? __sys_sendmsg_sock+0x30/0x30 [ 1744.092614][ T9591] ? lock_downgrade+0x6e0/0x6e0 [ 1744.098679][ T9591] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1744.106328][ T9591] __do_fast_syscall_32+0x65/0xf0 [ 1744.112503][ T9591] do_fast_syscall_32+0x2f/0x70 [ 1744.119422][ T9591] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.128261][ T9591] RIP: 0023:0xf6f11549 [ 1744.133801][ T9591] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1744.157184][ T9591] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1744.167576][ T9591] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1744.177660][ T9591] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.188148][ T9591] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.198977][ T9591] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.209703][ T9591] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.220197][ T9591] 20:45:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf0ffffff, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:07 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000006000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 35) [ 1744.347685][ T9611] FAULT_INJECTION: forcing a failure. [ 1744.347685][ T9611] name failslab, interval 1, probability 0, space 0, times 0 [ 1744.364161][ T9611] CPU: 3 PID: 9611 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1744.374763][ T9611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1744.386718][ T9611] Call Trace: [ 1744.390953][ T9611] [ 1744.394625][ T9611] dump_stack_lvl+0xcd/0x134 [ 1744.400872][ T9611] should_fail.cold+0x5/0xa [ 1744.407294][ T9611] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1744.414411][ T9611] should_failslab+0x5/0x10 [ 1744.419168][ T9611] kmem_cache_alloc_trace+0x55/0x2c0 [ 1744.424345][ T9611] ? crypto_aead_setkey+0x10f/0x290 [ 1744.429580][ T9611] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1744.436174][ T9611] tipc_crypto_key_init+0x82/0x110 [ 1744.441248][ T9611] ? tipc_ehdr_validate+0x240/0x240 [ 1744.446555][ T9611] ? crypto_mod_put+0x8c/0x100 [ 1744.451126][ T9611] tipc_nl_node_set_key+0xa5d/0xf70 [ 1744.455856][ T9611] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1744.462058][ T9611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1744.468202][ T9611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1744.475371][ T9611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1744.483439][ T9611] genl_family_rcv_msg_doit+0x228/0x320 [ 1744.490340][ T9611] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 20:45:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000006d500000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xf5ffffff, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1744.499662][ T9611] ? mutex_lock_io_nested+0x1150/0x1150 [ 1744.507556][ T9611] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1744.515913][ T9611] ? __radix_tree_lookup+0x211/0x2a0 [ 1744.523452][ T9611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1744.531217][ T9611] ? genl_get_cmd+0x3cf/0x480 [ 1744.536654][ T9611] genl_rcv_msg+0x328/0x580 [ 1744.543023][ T9611] ? genl_get_cmd+0x480/0x480 [ 1744.549784][ T9611] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1744.557533][ T9611] ? lock_release+0x720/0x720 [ 1744.563325][ T9611] netlink_rcv_skb+0x153/0x420 [ 1744.569131][ T9611] ? genl_get_cmd+0x480/0x480 [ 1744.574914][ T9611] ? netlink_ack+0xa60/0xa60 [ 1744.580695][ T9611] ? netlink_deliver_tap+0x1b1/0xc30 [ 1744.587058][ T9611] genl_rcv+0x24/0x40 [ 1744.592285][ T9611] netlink_unicast+0x533/0x7d0 [ 1744.598861][ T9611] ? netlink_attachskb+0x880/0x880 [ 1744.605489][ T9611] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1744.613054][ T9611] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1744.620512][ T9611] ? __phys_addr_symbol+0x2c/0x70 [ 1744.627827][ T9611] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1744.635238][ T9611] ? __check_object_size+0x16e/0x3f0 [ 1744.641634][ T9611] netlink_sendmsg+0x86d/0xda0 [ 1744.647843][ T9611] ? netlink_unicast+0x7d0/0x7d0 [ 1744.654083][ T9611] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1744.662178][ T9611] ? netlink_unicast+0x7d0/0x7d0 [ 1744.668683][ T9611] sock_sendmsg+0xcf/0x120 [ 1744.674379][ T9611] ____sys_sendmsg+0x6e8/0x810 [ 1744.681169][ T9611] ? kernel_sendmsg+0x50/0x50 [ 1744.687078][ T9611] ? do_recvmmsg+0x6d0/0x6d0 [ 1744.692932][ T9611] ? lock_chain_count+0x20/0x20 [ 1744.698946][ T9611] ? lock_chain_count+0x20/0x20 [ 1744.705519][ T9611] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1744.715318][ T9611] ___sys_sendmsg+0xf3/0x170 [ 1744.721069][ T9611] ? sendmsg_copy_msghdr+0x160/0x160 [ 1744.727559][ T9611] ? __fget_files+0x21b/0x3e0 [ 1744.733799][ T9611] ? lock_downgrade+0x6e0/0x6e0 [ 1744.739692][ T9611] ? __fget_files+0x23d/0x3e0 [ 1744.744760][ T9611] ? __fget_light+0xea/0x280 [ 1744.749209][ T9611] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1744.757145][ T9611] __sys_sendmsg+0xe5/0x1b0 [ 1744.762323][ T9611] ? __sys_sendmsg_sock+0x30/0x30 [ 1744.767297][ T9611] ? lock_downgrade+0x6e0/0x6e0 [ 1744.772610][ T9611] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1744.779776][ T9611] __do_fast_syscall_32+0x65/0xf0 [ 1744.785230][ T9611] do_fast_syscall_32+0x2f/0x70 [ 1744.791054][ T9611] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1744.799489][ T9611] RIP: 0023:0xf6f11549 [ 1744.804074][ T9611] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1744.826155][ T9611] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1744.836122][ T9611] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1744.846453][ T9611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1744.856638][ T9611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1744.866404][ T9611] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1744.876180][ T9611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1744.887559][ T9611] 20:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xfcffffff, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 36) 20:45:08 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d286165732900000000000000f000000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xfffff000, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1745.218730][ T9629] FAULT_INJECTION: forcing a failure. [ 1745.218730][ T9629] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.234412][ T9629] CPU: 1 PID: 9629 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1745.244146][ T9629] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1745.256407][ T9629] Call Trace: [ 1745.260663][ T9629] [ 1745.264345][ T9629] dump_stack_lvl+0xcd/0x134 [ 1745.270109][ T9629] should_fail.cold+0x5/0xa [ 1745.275822][ T9629] ? crypto_create_tfm_node+0x7f/0x330 [ 1745.282957][ T9629] should_failslab+0x5/0x10 [ 1745.288788][ T9629] __kmalloc_node+0x75/0x390 [ 1745.295007][ T9629] crypto_create_tfm_node+0x7f/0x330 [ 1745.301423][ T9629] crypto_alloc_tfm_node+0x107/0x260 [ 1745.308359][ T9629] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1745.316024][ T9629] tipc_crypto_key_init+0x82/0x110 [ 1745.322365][ T9629] ? tipc_ehdr_validate+0x240/0x240 [ 1745.328718][ T9629] ? crypto_mod_put+0x8c/0x100 [ 1745.334806][ T9629] tipc_nl_node_set_key+0xa5d/0xf70 [ 1745.341579][ T9629] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1745.349947][ T9629] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 20:45:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$vcsa(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/block/loop12', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x9, 0x2, 0x0, 0x81, 0x0, 0x80, 0x1, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x3f, 0x8}, 0x800, 0x3, 0xffffffff, 0x6, 0x4, 0x25a3, 0x0, 0x0, 0x80000001}, 0x0, 0xa, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000600)=ANY=[@ANYBLOB="635d4ea9de6c9c2692ffba8a2e775aff5c0202776cb591f1f41dbcbb23a730c975472eafec119d202f368edd56b88a2f8c6b7de20f3749e09716035e6be6c22993665e1f73c807e4c252394399bd1c8e02e14bae288d365b8b9608116aafcd8841", @ANYRES32=r2, @ANYBLOB="05000000000000002e2f66696c653000"]) r6 = openat$tcp_mem(0xffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) r8 = mmap$binder(&(0x7f00006c2000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x9) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000005c0)={0xbc, 0x0, &(0x7f00000004c0)=[@increfs={0x40046304, 0x3}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/41, 0x29, 0x0, 0x19}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000002c0)={0x0, 0x18, 0x40}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r6}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/148, 0x94, 0x0, 0x1b}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}, 0x40}, @free_buffer={0x40086303, r8}, @request_death={0x400c630e, 0x1}], 0x30, 0x0, &(0x7f0000000580)="00e8a6e9442cb132eb7e8b44a4a3d458dccd8cdd6d1b7a5b8655584864785ddbaf701de9b3150ce72c7be078192167a9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00000000c0)=[@dead_binder_done, @register_looper, @enter_looper, @free_buffer={0x40086303, r8}, @exit_looper, @increfs_done, @release={0x40046306, 0x3}, @exit_looper, @acquire_done, @decrefs={0x40046307, 0x2}], 0xf, 0x0, &(0x7f0000000140)="9b423ff7514a268cfd1e8f13a86e3a"}) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 1745.358190][ T9629] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1745.367769][ T9629] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1745.376767][ T9629] genl_family_rcv_msg_doit+0x228/0x320 [ 1745.384330][ T9629] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1745.393488][ T9629] ? mutex_lock_io_nested+0x1150/0x1150 [ 1745.400417][ T9629] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1745.408857][ T9629] ? __radix_tree_lookup+0x211/0x2a0 [ 1745.408896][ T9629] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1745.408934][ T9629] ? genl_get_cmd+0x3cf/0x480 [ 1745.408972][ T9629] genl_rcv_msg+0x328/0x580 [ 1745.409008][ T9629] ? genl_get_cmd+0x480/0x480 [ 1745.409038][ T9629] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1745.453238][ T9629] ? lock_release+0x720/0x720 [ 1745.475503][ T9629] netlink_rcv_skb+0x153/0x420 [ 1745.480999][ T9629] ? genl_get_cmd+0x480/0x480 [ 1745.486342][ T9629] ? netlink_ack+0xa60/0xa60 [ 1745.492374][ T9629] ? netlink_deliver_tap+0x1b1/0xc30 [ 1745.499445][ T9629] genl_rcv+0x24/0x40 [ 1745.504997][ T9629] netlink_unicast+0x533/0x7d0 [ 1745.511154][ T9629] ? netlink_attachskb+0x880/0x880 [ 1745.519029][ T9629] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1745.527868][ T9629] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1745.536259][ T9629] ? __phys_addr_symbol+0x2c/0x70 [ 1745.542677][ T9629] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1745.549449][ T9629] ? __check_object_size+0x16e/0x3f0 [ 1745.556349][ T9629] netlink_sendmsg+0x86d/0xda0 [ 1745.563387][ T9629] ? netlink_unicast+0x7d0/0x7d0 [ 1745.569914][ T9629] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1745.579629][ T9629] ? netlink_unicast+0x7d0/0x7d0 [ 1745.585727][ T9629] sock_sendmsg+0xcf/0x120 [ 1745.591499][ T9629] ____sys_sendmsg+0x6e8/0x810 [ 1745.597874][ T9629] ? kernel_sendmsg+0x50/0x50 [ 1745.603794][ T9629] ? do_recvmmsg+0x6d0/0x6d0 [ 1745.609570][ T9629] ? lock_chain_count+0x20/0x20 [ 1745.615496][ T9629] ? lock_chain_count+0x20/0x20 [ 1745.621744][ T9629] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1745.629806][ T9629] ___sys_sendmsg+0xf3/0x170 [ 1745.636002][ T9629] ? sendmsg_copy_msghdr+0x160/0x160 [ 1745.643316][ T9629] ? __fget_files+0x21b/0x3e0 [ 1745.650684][ T9629] ? lock_downgrade+0x6e0/0x6e0 [ 1745.656632][ T9629] ? __fget_files+0x23d/0x3e0 [ 1745.662484][ T9629] ? __fget_light+0xea/0x280 [ 1745.668131][ T9629] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1745.676298][ T9629] __sys_sendmsg+0xe5/0x1b0 [ 1745.682218][ T9629] ? __sys_sendmsg_sock+0x30/0x30 [ 1745.688554][ T9629] ? lock_downgrade+0x6e0/0x6e0 [ 1745.694818][ T9629] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1745.703122][ T9629] __do_fast_syscall_32+0x65/0xf0 [ 1745.710810][ T9629] do_fast_syscall_32+0x2f/0x70 [ 1745.717117][ T9629] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1745.725486][ T9629] RIP: 0023:0xf6f11549 [ 1745.730715][ T9629] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1745.755081][ T9629] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1745.765761][ T9629] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1745.776211][ T9629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1745.785931][ T9629] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1745.796608][ T9629] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1745.806336][ T9629] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1745.816430][ T9629] 20:45:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xffffff7f, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 37) 20:45:09 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000003000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1745.912126][ T9636] FAULT_INJECTION: forcing a failure. [ 1745.912126][ T9636] name failslab, interval 1, probability 0, space 0, times 0 [ 1745.932712][ T9636] CPU: 3 PID: 9636 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1745.943831][ T9636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1745.957274][ T9636] Call Trace: [ 1745.961815][ T9636] [ 1745.965957][ T9636] dump_stack_lvl+0xcd/0x134 [ 1745.972536][ T9636] should_fail.cold+0x5/0xa [ 1745.978255][ T9636] ? crypto_create_tfm_node+0x7f/0x330 [ 1745.985851][ T9636] should_failslab+0x5/0x10 [ 1745.992406][ T9636] __kmalloc_node+0x75/0x390 [ 1745.999324][ T9636] crypto_create_tfm_node+0x7f/0x330 [ 1746.008161][ T9636] crypto_alloc_tfm_node+0x107/0x260 [ 1746.014582][ T9636] cryptd_alloc_aead+0x101/0x200 [ 1746.020894][ T9636] ? cryptd_alloc_ahash+0x200/0x200 [ 1746.027823][ T9636] ? __kmalloc_node+0x62/0x390 [ 1746.034077][ T9636] simd_aead_init+0x67/0x1b0 [ 1746.039618][ T9636] ? simd_aead_exit+0x40/0x40 [ 1746.046249][ T9636] crypto_aead_init_tfm+0x138/0x1a0 [ 1746.052836][ T9636] crypto_create_tfm_node+0x10d/0x330 [ 1746.059500][ T9636] crypto_alloc_tfm_node+0x107/0x260 [ 1746.066235][ T9636] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1746.072896][ T9636] tipc_crypto_key_init+0x82/0x110 [ 1746.078592][ T9636] ? tipc_ehdr_validate+0x240/0x240 [ 1746.086264][ T9636] ? crypto_mod_put+0x8c/0x100 [ 1746.092875][ T9636] tipc_nl_node_set_key+0xa5d/0xf70 [ 1746.099253][ T9636] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1746.107252][ T9636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1746.113768][ T9636] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1746.122272][ T9636] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1746.130954][ T9636] genl_family_rcv_msg_doit+0x228/0x320 [ 1746.139301][ T9636] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1746.148974][ T9636] ? mutex_lock_io_nested+0x1150/0x1150 [ 1746.156211][ T9636] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1746.163877][ T9636] ? __radix_tree_lookup+0x211/0x2a0 [ 1746.172083][ T9636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1746.180051][ T9636] ? genl_get_cmd+0x3cf/0x480 [ 1746.186485][ T9636] genl_rcv_msg+0x328/0x580 [ 1746.192610][ T9636] ? genl_get_cmd+0x480/0x480 [ 1746.198850][ T9636] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1746.208791][ T9636] ? lock_release+0x720/0x720 [ 1746.216003][ T9636] ? check_path.constprop.0+0x50/0x50 [ 1746.222940][ T9636] netlink_rcv_skb+0x153/0x420 [ 1746.229783][ T9636] ? genl_get_cmd+0x480/0x480 [ 1746.236211][ T9636] ? netlink_ack+0xa60/0xa60 [ 1746.243726][ T9636] ? netlink_deliver_tap+0x1b1/0xc30 [ 1746.252544][ T9636] genl_rcv+0x24/0x40 [ 1746.258384][ T9636] netlink_unicast+0x533/0x7d0 [ 1746.264746][ T9636] ? netlink_attachskb+0x880/0x880 [ 1746.271750][ T9636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1746.281370][ T9636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1746.290054][ T9636] ? __phys_addr_symbol+0x2c/0x70 [ 1746.298048][ T9636] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1746.305884][ T9636] ? __check_object_size+0x187/0x3f0 [ 1746.312936][ T9636] netlink_sendmsg+0x86d/0xda0 [ 1746.319243][ T9636] ? netlink_unicast+0x7d0/0x7d0 [ 1746.325334][ T9636] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1746.333812][ T9636] ? netlink_unicast+0x7d0/0x7d0 [ 1746.340130][ T9636] sock_sendmsg+0xcf/0x120 [ 1746.345574][ T9636] ____sys_sendmsg+0x6e8/0x810 [ 1746.352117][ T9636] ? kernel_sendmsg+0x50/0x50 [ 1746.358959][ T9636] ? do_recvmmsg+0x6d0/0x6d0 [ 1746.365558][ T9636] ? perf_trace_lock+0xeb/0x4d0 [ 1746.373339][ T9636] ? lock_chain_count+0x20/0x20 [ 1746.379413][ T9636] ? check_path.constprop.0+0x50/0x50 [ 1746.385834][ T9636] ___sys_sendmsg+0xf3/0x170 [ 1746.391993][ T9636] ? sendmsg_copy_msghdr+0x160/0x160 [ 1746.399126][ T9636] ? __fget_files+0x21b/0x3e0 [ 1746.404219][ T9636] ? lock_downgrade+0x6e0/0x6e0 [ 1746.409595][ T9636] ? __fget_files+0x23d/0x3e0 [ 1746.414405][ T9636] ? __fget_light+0xea/0x280 [ 1746.419470][ T9636] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1746.427473][ T9636] __sys_sendmsg+0xe5/0x1b0 [ 1746.433591][ T9636] ? __sys_sendmsg_sock+0x30/0x30 [ 1746.440452][ T9636] ? lock_downgrade+0x6e0/0x6e0 [ 1746.446526][ T9636] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1746.456786][ T9636] __do_fast_syscall_32+0x65/0xf0 [ 1746.463747][ T9636] do_fast_syscall_32+0x2f/0x70 [ 1746.470490][ T9636] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1746.479124][ T9636] RIP: 0023:0xf6f11549 [ 1746.485565][ T9636] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1746.513176][ T9636] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1746.526579][ T9636] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1746.536715][ T9636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1746.547745][ T9636] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1746.557697][ T9636] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1746.567307][ T9636] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1746.576977][ T9636] 20:45:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xffffff9e, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 38) 20:45:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000004003000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1746.682795][ T9645] FAULT_INJECTION: forcing a failure. [ 1746.682795][ T9645] name failslab, interval 1, probability 0, space 0, times 0 [ 1746.701612][ T9645] CPU: 2 PID: 9645 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1746.712804][ T9645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1746.726318][ T9645] Call Trace: [ 1746.731074][ T9645] [ 1746.735580][ T9645] dump_stack_lvl+0xcd/0x134 [ 1746.742535][ T9645] should_fail.cold+0x5/0xa [ 1746.750482][ T9645] ? crypto_create_tfm_node+0x7f/0x330 [ 1746.758212][ T9645] should_failslab+0x5/0x10 [ 1746.765103][ T9645] __kmalloc_node+0x75/0x390 [ 1746.771901][ T9645] crypto_create_tfm_node+0x7f/0x330 [ 1746.778483][ T9650] binder: 9649:9650 unknown command 1082942211 [ 1746.779595][ T9645] crypto_spawn_tfm2+0x60/0xb0 [ 1746.789190][ T9650] binder: 9649:9650 ioctl c0306201 20000040 returned -22 [ 1746.795665][ T9645] ? cryptd_hash_init_tfm+0x120/0x120 [ 1746.795708][ T9645] cryptd_aead_init_tfm+0x3c/0x140 [ 1746.795765][ T9645] ? cryptd_hash_init_tfm+0x120/0x120 20:45:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder1\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f00000015c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa0002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03638c4000000000a85e00e6ff000000"], 0x0, 0x0, &(0x7f00000001c0)}) r2 = openat$mice(0xffffff9c, &(0x7f00000001c0), 0xc8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x6c, 0x0, &(0x7f0000000340)=[@release={0x40046306, 0x1}, @increfs={0x40046304, 0x3}, @clear_death, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/67, 0x43, 0x0, 0x1f}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x1000}], 0x24, 0x0, &(0x7f00000003c0)="3ccf495c01606ff171115e014ceaccba2b803bc30f7a11cb83e01b073b76e14c6353ad79"}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0xa1108, 0xf, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x1000, 0x5, 0xa4, 0x4, 0x6, 0x8, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r3, 0x3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) [ 1746.795792][ T9645] crypto_aead_init_tfm+0x138/0x1a0 [ 1746.795841][ T9645] crypto_create_tfm_node+0x10d/0x330 [ 1746.795875][ T9645] crypto_alloc_tfm_node+0x107/0x260 [ 1746.795913][ T9645] cryptd_alloc_aead+0x101/0x200 [ 1746.795940][ T9645] ? cryptd_alloc_ahash+0x200/0x200 [ 1746.795977][ T9645] ? __kmalloc_node+0x62/0x390 [ 1746.796022][ T9645] simd_aead_init+0x67/0x1b0 [ 1746.796052][ T9645] ? simd_aead_exit+0x40/0x40 [ 1746.796082][ T9645] crypto_aead_init_tfm+0x138/0x1a0 [ 1746.796114][ T9645] crypto_create_tfm_node+0x10d/0x330 [ 1746.796147][ T9645] crypto_alloc_tfm_node+0x107/0x260 [ 1746.796183][ T9645] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1746.796226][ T9645] tipc_crypto_key_init+0x82/0x110 [ 1746.796251][ T9645] ? tipc_ehdr_validate+0x240/0x240 [ 1746.796275][ T9645] ? crypto_mod_put+0x8c/0x100 [ 1746.796311][ T9645] tipc_nl_node_set_key+0xa5d/0xf70 [ 1746.796344][ T9645] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1746.796379][ T9645] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1746.796411][ T9645] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1747.008977][ T9645] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1747.019341][ T9645] genl_family_rcv_msg_doit+0x228/0x320 [ 1747.029164][ T9645] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1747.039893][ T9645] ? mutex_lock_io_nested+0x1150/0x1150 [ 1747.047615][ T9645] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1747.058233][ T9645] ? __radix_tree_lookup+0x211/0x2a0 [ 1747.065034][ T9645] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1747.072770][ T9645] ? genl_get_cmd+0x3cf/0x480 [ 1747.078238][ T9645] genl_rcv_msg+0x328/0x580 [ 1747.084111][ T9645] ? genl_get_cmd+0x480/0x480 [ 1747.090777][ T9645] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1747.099650][ T9645] ? lock_release+0x720/0x720 [ 1747.106610][ T9645] netlink_rcv_skb+0x153/0x420 [ 1747.113713][ T9645] ? genl_get_cmd+0x480/0x480 [ 1747.120740][ T9645] ? netlink_ack+0xa60/0xa60 [ 1747.126738][ T9645] ? netlink_deliver_tap+0x1b1/0xc30 [ 1747.133339][ T9645] genl_rcv+0x24/0x40 [ 1747.138234][ T9645] netlink_unicast+0x533/0x7d0 [ 1747.143631][ T9645] ? netlink_attachskb+0x880/0x880 [ 1747.150417][ T9645] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1747.158499][ T9645] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1747.167003][ T9645] ? __phys_addr_symbol+0x2c/0x70 [ 1747.174005][ T9645] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1747.183846][ T9645] ? __check_object_size+0x16e/0x3f0 [ 1747.191260][ T9645] netlink_sendmsg+0x86d/0xda0 [ 1747.197193][ T9645] ? netlink_unicast+0x7d0/0x7d0 [ 1747.204685][ T9645] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1747.215464][ T9645] ? netlink_unicast+0x7d0/0x7d0 [ 1747.222265][ T9645] sock_sendmsg+0xcf/0x120 [ 1747.228878][ T9645] ____sys_sendmsg+0x6e8/0x810 [ 1747.236036][ T9645] ? kernel_sendmsg+0x50/0x50 [ 1747.242220][ T9645] ? do_recvmmsg+0x6d0/0x6d0 [ 1747.248644][ T9645] ? lock_chain_count+0x20/0x20 [ 1747.255491][ T9645] ? lock_chain_count+0x20/0x20 [ 1747.261706][ T9645] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1747.270092][ T9645] ___sys_sendmsg+0xf3/0x170 [ 1747.276897][ T9645] ? sendmsg_copy_msghdr+0x160/0x160 [ 1747.285100][ T9645] ? __fget_files+0x21b/0x3e0 [ 1747.290898][ T9645] ? lock_downgrade+0x6e0/0x6e0 [ 1747.296934][ T9645] ? __fget_files+0x23d/0x3e0 [ 1747.303077][ T9645] ? __fget_light+0xea/0x280 [ 1747.309265][ T9645] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1747.317219][ T9645] __sys_sendmsg+0xe5/0x1b0 [ 1747.323181][ T9645] ? __sys_sendmsg_sock+0x30/0x30 [ 1747.331459][ T9645] ? lock_downgrade+0x6e0/0x6e0 [ 1747.338761][ T9645] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1747.347770][ T9645] __do_fast_syscall_32+0x65/0xf0 [ 1747.354255][ T9645] do_fast_syscall_32+0x2f/0x70 [ 1747.359604][ T9645] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1747.367640][ T9645] RIP: 0023:0xf6f11549 [ 1747.372315][ T9645] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1747.400271][ T9645] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1747.412349][ T9645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1747.422536][ T9645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1747.435506][ T9645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1747.446627][ T9645] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1747.460269][ T9645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1747.472699][ T9645] [ 1747.493444][ T9653] binder: 9649:9653 unknown command 1082942211 [ 1747.501337][ T9653] binder: 9649:9653 ioctl c0306201 20000040 returned -22 20:45:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 39) 20:45:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000340000000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xfffffff0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1747.574081][ T9657] FAULT_INJECTION: forcing a failure. [ 1747.574081][ T9657] name failslab, interval 1, probability 0, space 0, times 0 [ 1747.594084][ T9657] CPU: 2 PID: 9657 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1747.604378][ T9657] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1747.616059][ T9657] Call Trace: [ 1747.620760][ T9657] [ 1747.625589][ T9657] dump_stack_lvl+0xcd/0x134 [ 1747.633500][ T9657] should_fail.cold+0x5/0xa [ 1747.639489][ T9657] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1747.646240][ T9657] should_failslab+0x5/0x10 [ 1747.652826][ T9657] kmem_cache_alloc_trace+0x55/0x2c0 [ 1747.660551][ T9657] ? crypto_aead_setkey+0x10f/0x290 [ 1747.667492][ T9657] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1747.675842][ T9657] tipc_crypto_key_init+0x82/0x110 [ 1747.683854][ T9657] ? tipc_ehdr_validate+0x240/0x240 [ 1747.691838][ T9657] ? crypto_mod_put+0x8c/0x100 [ 1747.700798][ T9657] tipc_nl_node_set_key+0xa5d/0xf70 [ 1747.708772][ T9657] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1747.717036][ T9657] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1747.727266][ T9657] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1747.736852][ T9657] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1747.748355][ T9657] genl_family_rcv_msg_doit+0x228/0x320 [ 1747.756080][ T9657] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1747.766683][ T9657] ? mutex_lock_io_nested+0x1150/0x1150 [ 1747.773470][ T9657] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1747.782962][ T9657] ? __radix_tree_lookup+0x211/0x2a0 [ 1747.789524][ T9657] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1747.799539][ T9657] ? genl_get_cmd+0x3cf/0x480 [ 1747.806519][ T9657] genl_rcv_msg+0x328/0x580 [ 1747.812390][ T9657] ? genl_get_cmd+0x480/0x480 [ 1747.820049][ T9657] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1747.830246][ T9657] ? lock_release+0x720/0x720 [ 1747.837281][ T9657] netlink_rcv_skb+0x153/0x420 [ 1747.843795][ T9657] ? genl_get_cmd+0x480/0x480 [ 1747.850284][ T9657] ? netlink_ack+0xa60/0xa60 [ 1747.856545][ T9657] ? netlink_deliver_tap+0x1b1/0xc30 [ 1747.863516][ T9657] genl_rcv+0x24/0x40 [ 1747.868300][ T9657] netlink_unicast+0x533/0x7d0 [ 1747.874684][ T9657] ? netlink_attachskb+0x880/0x880 [ 1747.880998][ T9657] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1747.889893][ T9657] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1747.897334][ T9657] ? __phys_addr_symbol+0x2c/0x70 [ 1747.903320][ T9657] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1747.910242][ T9657] ? __check_object_size+0x16e/0x3f0 [ 1747.915941][ T9657] netlink_sendmsg+0x86d/0xda0 [ 1747.921192][ T9657] ? netlink_unicast+0x7d0/0x7d0 [ 1747.926280][ T9657] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1747.933948][ T9657] ? netlink_unicast+0x7d0/0x7d0 [ 1747.941367][ T9657] sock_sendmsg+0xcf/0x120 [ 1747.948043][ T9657] ____sys_sendmsg+0x6e8/0x810 [ 1747.954603][ T9657] ? kernel_sendmsg+0x50/0x50 [ 1747.961613][ T9657] ? do_recvmmsg+0x6d0/0x6d0 [ 1747.968522][ T9657] ? lock_chain_count+0x20/0x20 [ 1747.975094][ T9657] ? lock_chain_count+0x20/0x20 [ 1747.982010][ T9657] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1747.989778][ T9657] ___sys_sendmsg+0xf3/0x170 [ 1747.996137][ T9657] ? sendmsg_copy_msghdr+0x160/0x160 [ 1748.003030][ T9657] ? __fget_files+0x21b/0x3e0 [ 1748.009247][ T9657] ? lock_downgrade+0x6e0/0x6e0 [ 1748.015741][ T9657] ? __fget_files+0x23d/0x3e0 [ 1748.021846][ T9657] ? __fget_light+0xea/0x280 [ 1748.029132][ T9657] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1748.037514][ T9657] __sys_sendmsg+0xe5/0x1b0 [ 1748.043881][ T9657] ? __sys_sendmsg_sock+0x30/0x30 [ 1748.050613][ T9657] ? lock_downgrade+0x6e0/0x6e0 [ 1748.058924][ T9657] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1748.070962][ T9657] __do_fast_syscall_32+0x65/0xf0 [ 1748.078959][ T9657] do_fast_syscall_32+0x2f/0x70 [ 1748.085859][ T9657] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.098244][ T9657] RIP: 0023:0xf6f11549 [ 1748.103664][ T9657] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1748.131392][ T9657] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1748.144589][ T9657] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1748.154911][ T9657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.166236][ T9657] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1748.177200][ T9657] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1748.188678][ T9657] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.200759][ T9657] 20:45:11 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r0 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x94, 0x0, &(0x7f00000002c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x9, 0x0, 0x23}, @flat=@binder={0x73622a85, 0x1000, 0x2}, @fda={0x66646185, 0x1, 0x1, 0x16}}, &(0x7f0000000140)={0x0, 0x1c, 0x34}}, 0x400}, @request_death={0x400c630e, 0x2}, @increfs, @increfs={0x40046304, 0x1}, @increfs_done={0x40106308, 0x3}, @acquire_done={0x40106309, 0x1}], 0x6e, 0x0, &(0x7f0000000380)="02ad9cfe9892f2dd9ed2c17475ca598ace14cdb617a2a1e755da3a73c6fc30239693f93c44c6461e7d83d343287686c2ee5f6bc6be7da7c35ea6ff61831f974ff542a648d7d6b96386bc0871f3f78c3f806c81140388a3b0a2cdb816a45ec99ba7205072a757d07b8cd89c6c50a4"}) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffddc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c1e00000000002fef0000000000"], 0x0, 0x0, &(0x7f00000001c0)="b8a0816bf7c93128c753b080d0e501828c0ad858b9a547e15a3624c5eb000000000000000000000074c231228633e5b6bd6da8c7cc419a31c6ca4c6adc82a260e04ecbe4daeead4551b8cd451d3a0e320a1299e2a4ae4db2631c5f6bd645827f417db4b2ec0c421c2677"}) 20:45:11 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 40) 20:45:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xfffffff5, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:11 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000fffff0000000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1748.271333][ T9665] FAULT_INJECTION: forcing a failure. [ 1748.271333][ T9665] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.289013][ T9665] CPU: 3 PID: 9665 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1748.299373][ T9665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1748.310048][ T9665] Call Trace: [ 1748.314447][ T9665] [ 1748.318352][ T9665] dump_stack_lvl+0xcd/0x134 [ 1748.324378][ T9665] should_fail.cold+0x5/0xa [ 1748.329773][ T9665] ? crypto_create_tfm_node+0x7f/0x330 [ 1748.338149][ T9665] should_failslab+0x5/0x10 [ 1748.345050][ T9665] __kmalloc_node+0x75/0x390 [ 1748.350839][ T9665] crypto_create_tfm_node+0x7f/0x330 [ 1748.358225][ T9665] crypto_alloc_tfm_node+0x107/0x260 [ 1748.365645][ T9665] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1748.373616][ T9665] tipc_crypto_key_init+0x82/0x110 [ 1748.380972][ T9665] ? tipc_ehdr_validate+0x240/0x240 [ 1748.388878][ T9665] ? crypto_mod_put+0x8c/0x100 [ 1748.396081][ T9665] tipc_nl_node_set_key+0xa5d/0xf70 [ 1748.404575][ T9665] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1748.412479][ T9665] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1748.421783][ T9665] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1748.431680][ T9665] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1748.441105][ T9665] genl_family_rcv_msg_doit+0x228/0x320 [ 1748.448834][ T9665] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1748.459131][ T9665] ? mutex_lock_io_nested+0x1150/0x1150 [ 1748.466319][ T9665] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1748.474802][ T9665] ? __radix_tree_lookup+0x211/0x2a0 [ 1748.481448][ T9665] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1748.489312][ T9665] ? genl_get_cmd+0x3cf/0x480 [ 1748.495096][ T9665] genl_rcv_msg+0x328/0x580 [ 1748.500638][ T9665] ? genl_get_cmd+0x480/0x480 [ 1748.506477][ T9665] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1748.514212][ T9665] ? lock_release+0x720/0x720 [ 1748.520030][ T9665] netlink_rcv_skb+0x153/0x420 [ 1748.526238][ T9665] ? genl_get_cmd+0x480/0x480 [ 1748.532190][ T9665] ? netlink_ack+0xa60/0xa60 [ 1748.538181][ T9665] ? netlink_deliver_tap+0x1b1/0xc30 [ 1748.545486][ T9665] genl_rcv+0x24/0x40 [ 1748.551083][ T9665] netlink_unicast+0x533/0x7d0 [ 1748.556986][ T9665] ? netlink_attachskb+0x880/0x880 [ 1748.563492][ T9665] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1748.571431][ T9665] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1748.579873][ T9665] ? __phys_addr_symbol+0x2c/0x70 [ 1748.587044][ T9665] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1748.595476][ T9665] ? __check_object_size+0x187/0x3f0 [ 1748.602899][ T9665] netlink_sendmsg+0x86d/0xda0 [ 1748.609963][ T9665] ? netlink_unicast+0x7d0/0x7d0 [ 1748.616640][ T9665] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1748.624438][ T9665] ? netlink_unicast+0x7d0/0x7d0 [ 1748.630562][ T9665] sock_sendmsg+0xcf/0x120 [ 1748.636408][ T9665] ____sys_sendmsg+0x6e8/0x810 [ 1748.643392][ T9665] ? kernel_sendmsg+0x50/0x50 [ 1748.649779][ T9665] ? do_recvmmsg+0x6d0/0x6d0 [ 1748.656589][ T9665] ? lock_chain_count+0x20/0x20 [ 1748.663004][ T9665] ? lock_chain_count+0x20/0x20 [ 1748.669441][ T9665] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1748.677439][ T9665] ___sys_sendmsg+0xf3/0x170 [ 1748.683503][ T9665] ? sendmsg_copy_msghdr+0x160/0x160 [ 1748.691123][ T9665] ? __fget_files+0x21b/0x3e0 [ 1748.697446][ T9665] ? lock_downgrade+0x6e0/0x6e0 [ 1748.703793][ T9665] ? __fget_files+0x23d/0x3e0 [ 1748.709676][ T9665] ? __fget_light+0xea/0x280 [ 1748.716000][ T9665] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1748.724337][ T9665] __sys_sendmsg+0xe5/0x1b0 [ 1748.730690][ T9665] ? __sys_sendmsg_sock+0x30/0x30 [ 1748.738432][ T9665] ? lock_downgrade+0x6e0/0x6e0 [ 1748.744737][ T9665] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1748.754356][ T9665] __do_fast_syscall_32+0x65/0xf0 [ 1748.760887][ T9665] do_fast_syscall_32+0x2f/0x70 [ 1748.768178][ T9665] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1748.776113][ T9665] RIP: 0023:0xf6f11549 [ 1748.781215][ T9665] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1748.820789][ T9665] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1748.831989][ T9665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1748.842649][ T9665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1748.854172][ T9665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1748.865859][ T9665] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1748.877792][ T9665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1748.888029][ T9665] 20:45:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 41) 20:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xfffffffc, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000010000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1748.996870][ T9683] FAULT_INJECTION: forcing a failure. [ 1748.996870][ T9683] name failslab, interval 1, probability 0, space 0, times 0 20:45:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0xffffffff, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1749.012821][ T9683] CPU: 2 PID: 9683 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1749.023548][ T9683] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1749.034900][ T9683] Call Trace: [ 1749.039543][ T9683] [ 1749.043227][ T9683] dump_stack_lvl+0xcd/0x134 [ 1749.048852][ T9683] should_fail.cold+0x5/0xa [ 1749.054493][ T9683] ? crypto_create_tfm_node+0x7f/0x330 [ 1749.061638][ T9683] should_failslab+0x5/0x10 [ 1749.067928][ T9683] __kmalloc_node+0x75/0x390 [ 1749.073979][ T9683] crypto_create_tfm_node+0x7f/0x330 [ 1749.081137][ T9683] crypto_alloc_tfm_node+0x107/0x260 [ 1749.087642][ T9683] cryptd_alloc_aead+0x101/0x200 [ 1749.093777][ T9683] ? cryptd_alloc_ahash+0x200/0x200 [ 1749.101187][ T9683] ? __kmalloc_node+0x62/0x390 [ 1749.108787][ T9683] simd_aead_init+0x67/0x1b0 [ 1749.114549][ T9683] ? simd_aead_exit+0x40/0x40 [ 1749.120496][ T9683] crypto_aead_init_tfm+0x138/0x1a0 [ 1749.127506][ T9683] crypto_create_tfm_node+0x10d/0x330 [ 1749.134358][ T9683] crypto_alloc_tfm_node+0x107/0x260 [ 1749.140502][ T9683] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1749.147791][ T9683] tipc_crypto_key_init+0x82/0x110 [ 1749.154154][ T9683] ? tipc_ehdr_validate+0x240/0x240 [ 1749.161135][ T9683] ? crypto_mod_put+0x8c/0x100 [ 1749.167945][ T9683] tipc_nl_node_set_key+0xa5d/0xf70 [ 1749.174948][ T9683] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1749.182374][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1749.190085][ T9683] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1749.198983][ T9683] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1749.207913][ T9683] genl_family_rcv_msg_doit+0x228/0x320 [ 1749.214287][ T9683] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1749.221973][ T9683] ? mutex_lock_io_nested+0x1150/0x1150 [ 1749.228598][ T9683] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1749.235910][ T9683] ? __radix_tree_lookup+0x211/0x2a0 [ 1749.242371][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1749.249381][ T9683] ? genl_get_cmd+0x3cf/0x480 [ 1749.255462][ T9683] genl_rcv_msg+0x328/0x580 [ 1749.261432][ T9683] ? genl_get_cmd+0x480/0x480 [ 1749.266372][ T9683] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1749.272540][ T9683] ? lock_release+0x720/0x720 [ 1749.277741][ T9683] netlink_rcv_skb+0x153/0x420 [ 1749.284125][ T9683] ? genl_get_cmd+0x480/0x480 [ 1749.288700][ T9683] ? netlink_ack+0xa60/0xa60 [ 1749.294372][ T9683] ? netlink_deliver_tap+0x1b1/0xc30 [ 1749.301301][ T9683] genl_rcv+0x24/0x40 [ 1749.306458][ T9683] netlink_unicast+0x533/0x7d0 [ 1749.312542][ T9683] ? netlink_attachskb+0x880/0x880 [ 1749.318797][ T9683] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1749.326763][ T9683] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1749.334715][ T9683] ? __phys_addr_symbol+0x2c/0x70 [ 1749.341310][ T9683] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1749.348687][ T9683] ? __check_object_size+0x16e/0x3f0 [ 1749.355787][ T9683] netlink_sendmsg+0x86d/0xda0 [ 1749.361916][ T9683] ? netlink_unicast+0x7d0/0x7d0 [ 1749.368232][ T9683] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1749.376296][ T9683] ? netlink_unicast+0x7d0/0x7d0 [ 1749.382663][ T9683] sock_sendmsg+0xcf/0x120 [ 1749.387789][ T9683] ____sys_sendmsg+0x6e8/0x810 [ 1749.393803][ T9683] ? kernel_sendmsg+0x50/0x50 [ 1749.400195][ T9683] ? do_recvmmsg+0x6d0/0x6d0 [ 1749.406352][ T9683] ? lock_chain_count+0x20/0x20 [ 1749.412344][ T9683] ? lock_chain_count+0x20/0x20 [ 1749.418144][ T9683] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1749.426447][ T9683] ___sys_sendmsg+0xf3/0x170 [ 1749.432606][ T9683] ? sendmsg_copy_msghdr+0x160/0x160 [ 1749.439162][ T9683] ? __fget_files+0x21b/0x3e0 [ 1749.445364][ T9683] ? lock_downgrade+0x6e0/0x6e0 [ 1749.451954][ T9683] ? __fget_files+0x23d/0x3e0 [ 1749.458502][ T9683] ? __fget_light+0xea/0x280 [ 1749.464156][ T9683] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1749.472952][ T9683] __sys_sendmsg+0xe5/0x1b0 [ 1749.478835][ T9683] ? __sys_sendmsg_sock+0x30/0x30 [ 1749.485066][ T9683] ? lock_downgrade+0x6e0/0x6e0 [ 1749.491256][ T9683] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1749.499344][ T9683] __do_fast_syscall_32+0x65/0xf0 [ 1749.505635][ T9683] do_fast_syscall_32+0x2f/0x70 [ 1749.512202][ T9683] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1749.519346][ T9683] RIP: 0023:0xf6f11549 [ 1749.524171][ T9683] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1749.547652][ T9683] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1749.558028][ T9683] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1749.567619][ T9683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1749.578212][ T9683] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1749.588701][ T9683] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1749.598658][ T9683] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1749.609794][ T9683] 20:45:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116361d0512ed4dab1ba02dd5e2bca6e"], 0x0, 0x0, &(0x7f00000001c0)}) 20:45:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 42) 20:45:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000020000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xf, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1749.704319][ T9690] FAULT_INJECTION: forcing a failure. [ 1749.704319][ T9690] name failslab, interval 1, probability 0, space 0, times 0 [ 1749.722327][ T9690] CPU: 0 PID: 9690 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1749.736160][ T9690] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1749.749478][ T9690] Call Trace: [ 1749.755632][ T9690] [ 1749.760668][ T9690] dump_stack_lvl+0xcd/0x134 [ 1749.768296][ T9690] should_fail.cold+0x5/0xa [ 1749.774024][ T9690] ? crypto_create_tfm_node+0x7f/0x330 [ 1749.781670][ T9690] should_failslab+0x5/0x10 [ 1749.787887][ T9690] __kmalloc_node+0x75/0x390 [ 1749.794389][ T9690] crypto_create_tfm_node+0x7f/0x330 [ 1749.801793][ T9690] crypto_spawn_tfm2+0x60/0xb0 [ 1749.807702][ T9690] ? cryptd_hash_init_tfm+0x120/0x120 [ 1749.815168][ T9690] cryptd_aead_init_tfm+0x3c/0x140 [ 1749.821308][ T9690] ? cryptd_hash_init_tfm+0x120/0x120 [ 1749.827899][ T9690] crypto_aead_init_tfm+0x138/0x1a0 [ 1749.834611][ T9690] crypto_create_tfm_node+0x10d/0x330 [ 1749.841310][ T9690] crypto_alloc_tfm_node+0x107/0x260 [ 1749.847843][ T9690] cryptd_alloc_aead+0x101/0x200 [ 1749.854046][ T9690] ? cryptd_alloc_ahash+0x200/0x200 [ 1749.860379][ T9690] ? __kmalloc_node+0x62/0x390 [ 1749.866440][ T9690] simd_aead_init+0x67/0x1b0 [ 1749.872539][ T9690] ? simd_aead_exit+0x40/0x40 [ 1749.878341][ T9690] crypto_aead_init_tfm+0x138/0x1a0 [ 1749.884497][ T9690] crypto_create_tfm_node+0x10d/0x330 [ 1749.891968][ T9690] crypto_alloc_tfm_node+0x107/0x260 [ 1749.898723][ T9690] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1749.905634][ T9690] tipc_crypto_key_init+0x82/0x110 [ 1749.912970][ T9690] ? tipc_ehdr_validate+0x240/0x240 [ 1749.919781][ T9690] ? crypto_mod_put+0x8c/0x100 [ 1749.925445][ T9690] tipc_nl_node_set_key+0xa5d/0xf70 [ 1749.932849][ T9690] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1749.939571][ T9696] binder: 9689:9696 unknown command -798924015 [ 1749.940790][ T9690] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1749.940836][ T9690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1749.948263][ T9696] binder: 9689:9696 ioctl c0306201 20000040 returned -22 [ 1749.957305][ T9690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1749.957364][ T9690] genl_family_rcv_msg_doit+0x228/0x320 [ 1749.957401][ T9690] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1750.007348][ T9690] ? mutex_lock_io_nested+0x1150/0x1150 [ 1750.014063][ T9690] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1750.022872][ T9690] ? __radix_tree_lookup+0x211/0x2a0 [ 1750.029868][ T9690] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1750.037670][ T9690] ? genl_get_cmd+0x3cf/0x480 [ 1750.043565][ T9690] genl_rcv_msg+0x328/0x580 [ 1750.049541][ T9690] ? genl_get_cmd+0x480/0x480 [ 1750.055527][ T9690] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1750.063283][ T9690] ? lock_release+0x720/0x720 [ 1750.069397][ T9690] netlink_rcv_skb+0x153/0x420 [ 1750.075068][ T9690] ? genl_get_cmd+0x480/0x480 [ 1750.080989][ T9690] ? netlink_ack+0xa60/0xa60 [ 1750.086837][ T9690] ? netlink_deliver_tap+0x1b1/0xc30 [ 1750.093588][ T9690] genl_rcv+0x24/0x40 [ 1750.099134][ T9690] netlink_unicast+0x533/0x7d0 [ 1750.108576][ T9690] ? netlink_attachskb+0x880/0x880 [ 1750.117466][ T9690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1750.126806][ T9690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1750.134354][ T9690] ? __phys_addr_symbol+0x2c/0x70 [ 1750.141194][ T9690] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1750.149007][ T9690] ? __check_object_size+0x16e/0x3f0 [ 1750.156715][ T9690] netlink_sendmsg+0x86d/0xda0 [ 1750.163967][ T9690] ? netlink_unicast+0x7d0/0x7d0 [ 1750.172287][ T9690] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1750.180923][ T9690] ? netlink_unicast+0x7d0/0x7d0 [ 1750.187043][ T9690] sock_sendmsg+0xcf/0x120 [ 1750.193792][ T9690] ____sys_sendmsg+0x6e8/0x810 [ 1750.200959][ T9690] ? kernel_sendmsg+0x50/0x50 [ 1750.208453][ T9690] ? do_recvmmsg+0x6d0/0x6d0 [ 1750.215906][ T9690] ? lock_chain_count+0x20/0x20 [ 1750.222156][ T9690] ? lock_chain_count+0x20/0x20 [ 1750.228871][ T9690] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1750.236808][ T9690] ___sys_sendmsg+0xf3/0x170 [ 1750.243419][ T9690] ? sendmsg_copy_msghdr+0x160/0x160 [ 1750.250644][ T9690] ? __fget_files+0x21b/0x3e0 [ 1750.257651][ T9690] ? lock_downgrade+0x6e0/0x6e0 [ 1750.266116][ T9690] ? __fget_files+0x23d/0x3e0 [ 1750.273485][ T9690] ? __fget_light+0xea/0x280 [ 1750.279461][ T9690] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1750.287183][ T9690] __sys_sendmsg+0xe5/0x1b0 [ 1750.295226][ T9690] ? __sys_sendmsg_sock+0x30/0x30 [ 1750.303250][ T9690] ? lock_downgrade+0x6e0/0x6e0 [ 1750.312841][ T9690] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1750.323640][ T9690] __do_fast_syscall_32+0x65/0xf0 [ 1750.332368][ T9690] do_fast_syscall_32+0x2f/0x70 [ 1750.339414][ T9690] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1750.348146][ T9690] RIP: 0023:0xf6f11549 [ 1750.352869][ T9690] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1750.377615][ T9690] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1750.389125][ T9690] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1750.399158][ T9690] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1750.409943][ T9690] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1750.420496][ T9690] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1750.431438][ T9690] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1750.441245][ T9690] 20:45:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 43) 20:45:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000030000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1750.524977][ T9696] binder: 9689:9696 unknown command -798924015 [ 1750.534877][ T9696] binder: 9689:9696 ioctl c0306201 20000040 returned -22 20:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1750.603929][ T9706] FAULT_INJECTION: forcing a failure. [ 1750.603929][ T9706] name failslab, interval 1, probability 0, space 0, times 0 20:45:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000040000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1750.622966][ T9706] CPU: 3 PID: 9706 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1750.634400][ T9706] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1750.649201][ T9706] Call Trace: [ 1750.654490][ T9706] [ 1750.658766][ T9706] dump_stack_lvl+0xcd/0x134 [ 1750.665327][ T9706] should_fail.cold+0x5/0xa [ 1750.672058][ T9706] ? tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1750.680102][ T9706] should_failslab+0x5/0x10 [ 1750.686641][ T9706] kmem_cache_alloc_trace+0x55/0x2c0 [ 1750.695265][ T9706] ? crypto_aead_setkey+0x10f/0x290 [ 1750.705111][ T9706] tipc_aead_init.constprop.0+0x1bb/0x8f0 [ 1750.715612][ T9706] tipc_crypto_key_init+0x82/0x110 [ 1750.723931][ T9706] ? tipc_ehdr_validate+0x240/0x240 [ 1750.732712][ T9706] ? crypto_mod_put+0x8c/0x100 [ 1750.739761][ T9706] tipc_nl_node_set_key+0xa5d/0xf70 [ 1750.748241][ T9706] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1750.758177][ T9706] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1750.766002][ T9706] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1750.778160][ T9706] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1750.787202][ T9706] genl_family_rcv_msg_doit+0x228/0x320 [ 1750.794052][ T9706] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1750.803830][ T9706] ? mutex_lock_io_nested+0x1150/0x1150 [ 1750.811433][ T9706] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1750.819982][ T9706] ? __radix_tree_lookup+0x211/0x2a0 [ 1750.827256][ T9706] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1750.835636][ T9706] ? genl_get_cmd+0x3cf/0x480 [ 1750.841535][ T9706] genl_rcv_msg+0x328/0x580 [ 1750.847735][ T9706] ? genl_get_cmd+0x480/0x480 [ 1750.855726][ T9706] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1750.866686][ T9706] ? lock_release+0x720/0x720 [ 1750.874755][ T9706] netlink_rcv_skb+0x153/0x420 [ 1750.881939][ T9706] ? genl_get_cmd+0x480/0x480 [ 1750.888650][ T9706] ? netlink_ack+0xa60/0xa60 [ 1750.895080][ T9706] ? netlink_deliver_tap+0x1b1/0xc30 [ 1750.902363][ T9706] genl_rcv+0x24/0x40 [ 1750.908722][ T9706] netlink_unicast+0x533/0x7d0 [ 1750.915955][ T9706] ? netlink_attachskb+0x880/0x880 [ 1750.923487][ T9706] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1750.932735][ T9706] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1750.941299][ T9706] ? __phys_addr_symbol+0x2c/0x70 [ 1750.948889][ T9706] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1750.959452][ T9706] ? __check_object_size+0x16e/0x3f0 [ 1750.966912][ T9706] netlink_sendmsg+0x86d/0xda0 [ 1750.973863][ T9706] ? netlink_unicast+0x7d0/0x7d0 [ 1750.981163][ T9706] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1750.990292][ T9706] ? netlink_unicast+0x7d0/0x7d0 [ 1750.997716][ T9706] sock_sendmsg+0xcf/0x120 [ 1751.004798][ T9706] ____sys_sendmsg+0x6e8/0x810 [ 1751.014366][ T9706] ? kernel_sendmsg+0x50/0x50 [ 1751.020377][ T9706] ? do_recvmmsg+0x6d0/0x6d0 [ 1751.026389][ T9706] ? lock_chain_count+0x20/0x20 [ 1751.032882][ T9706] ? lock_chain_count+0x20/0x20 [ 1751.040721][ T9706] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1751.048817][ T9706] ___sys_sendmsg+0xf3/0x170 [ 1751.054596][ T9706] ? sendmsg_copy_msghdr+0x160/0x160 [ 1751.062637][ T9706] ? __fget_files+0x21b/0x3e0 [ 1751.068663][ T9706] ? lock_downgrade+0x6e0/0x6e0 [ 1751.075127][ T9706] ? __fget_files+0x23d/0x3e0 [ 1751.080992][ T9706] ? __fget_light+0xea/0x280 [ 1751.087712][ T9706] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1751.097656][ T9706] __sys_sendmsg+0xe5/0x1b0 [ 1751.103669][ T9706] ? __sys_sendmsg_sock+0x30/0x30 [ 1751.110034][ T9706] ? lock_downgrade+0x6e0/0x6e0 [ 1751.116608][ T9706] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1751.126911][ T9706] __do_fast_syscall_32+0x65/0xf0 [ 1751.134027][ T9706] do_fast_syscall_32+0x2f/0x70 [ 1751.141832][ T9706] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.153272][ T9706] RIP: 0023:0xf6f11549 [ 1751.159122][ T9706] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1751.193656][ T9706] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1751.205883][ T9706] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1751.217344][ T9706] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1751.229975][ T9706] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1751.239710][ T9706] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.250993][ T9706] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.262488][ T9706] 20:45:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x9c, 0x0, &(0x7f0000000340)=[@decrefs, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="852a62770100000200000000000000000000000002000000852a6277000100000100000000000000000000852a68770a0100"/72], &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/211, 0xd3, 0x0, 0x30}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}, @exit_looper, @increfs], 0x77, 0x0, &(0x7f0000000400)="39f724ea5e43960a151870f59638c432304dc253f38fb5297d9eddcb0c701c27ea61b722ba3ad062a5f2d98707e035d757b3fba5647f27d8e4814da5da8ff57fd7c0182746495ef0429dc28d621ecf08d8dd96b4a071a0626953c439e68a4374cdb8a0d6006bbdcd1be5f7c2cddb689ef89a833acf819a"}) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e989772cf08486f478ce35de102592780630c400000040000000000c7000000"], 0x0, 0x0, &(0x7f00000001c0)}) 20:45:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x25, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 44) [ 1751.307874][ T9712] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. 20:45:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000050000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1751.356019][ T9713] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1751.383698][ T9717] FAULT_INJECTION: forcing a failure. [ 1751.383698][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.384580][ T9716] binder: 9714:9716 unknown command 1922537486 [ 1751.400017][ T9717] CPU: 1 PID: 9717 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1751.400055][ T9717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1751.400070][ T9717] Call Trace: [ 1751.400081][ T9717] [ 1751.400094][ T9717] dump_stack_lvl+0xcd/0x134 [ 1751.400129][ T9717] should_fail.cold+0x5/0xa [ 1751.411366][ T9716] binder: 9714:9716 ioctl c0306201 20000040 returned -22 [ 1751.422830][ T9717] ? crypto_create_tfm_node+0x7f/0x330 [ 1751.422874][ T9717] should_failslab+0x5/0x10 [ 1751.422905][ T9717] __kmalloc_node+0x75/0x390 [ 1751.422940][ T9717] crypto_create_tfm_node+0x7f/0x330 [ 1751.422978][ T9717] crypto_alloc_tfm_node+0x107/0x260 20:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xc0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1751.423020][ T9717] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1751.511734][ T9717] tipc_crypto_key_init+0x82/0x110 [ 1751.519160][ T9717] ? tipc_ehdr_validate+0x240/0x240 [ 1751.525881][ T9717] ? crypto_mod_put+0x8c/0x100 [ 1751.532295][ T9717] tipc_nl_node_set_key+0xa5d/0xf70 [ 1751.539501][ T9717] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1751.547129][ T9717] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1751.555755][ T9717] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1751.563671][ T9717] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1751.572330][ T9717] genl_family_rcv_msg_doit+0x228/0x320 [ 1751.579359][ T9717] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1751.589091][ T9717] ? mutex_lock_io_nested+0x1150/0x1150 [ 1751.597827][ T9717] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1751.605676][ T9717] ? __radix_tree_lookup+0x211/0x2a0 [ 1751.612423][ T9717] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1751.619856][ T9717] ? genl_get_cmd+0x3cf/0x480 [ 1751.625935][ T9717] genl_rcv_msg+0x328/0x580 [ 1751.631868][ T9717] ? genl_get_cmd+0x480/0x480 [ 1751.638558][ T9717] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1751.647474][ T9717] ? lock_release+0x720/0x720 [ 1751.654408][ T9717] netlink_rcv_skb+0x153/0x420 [ 1751.660379][ T9717] ? genl_get_cmd+0x480/0x480 [ 1751.666623][ T9717] ? netlink_ack+0xa60/0xa60 [ 1751.673918][ T9717] ? netlink_deliver_tap+0x1b1/0xc30 [ 1751.681107][ T9717] genl_rcv+0x24/0x40 [ 1751.686981][ T9717] netlink_unicast+0x533/0x7d0 [ 1751.692417][ T9717] ? netlink_attachskb+0x880/0x880 [ 1751.698665][ T9717] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1751.706493][ T9717] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1751.714416][ T9717] ? __phys_addr_symbol+0x2c/0x70 [ 1751.721298][ T9717] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1751.728527][ T9717] ? __check_object_size+0x187/0x3f0 [ 1751.735500][ T9717] netlink_sendmsg+0x86d/0xda0 [ 1751.741384][ T9717] ? netlink_unicast+0x7d0/0x7d0 [ 1751.747746][ T9717] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1751.756375][ T9717] ? netlink_unicast+0x7d0/0x7d0 [ 1751.762837][ T9717] sock_sendmsg+0xcf/0x120 [ 1751.768517][ T9717] ____sys_sendmsg+0x6e8/0x810 [ 1751.774648][ T9717] ? kernel_sendmsg+0x50/0x50 [ 1751.779316][ T9717] ? do_recvmmsg+0x6d0/0x6d0 [ 1751.784492][ T9717] ? lock_chain_count+0x20/0x20 [ 1751.789846][ T9717] ? lock_chain_count+0x20/0x20 [ 1751.795479][ T9717] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1751.801867][ T9717] ___sys_sendmsg+0xf3/0x170 [ 1751.807409][ T9717] ? sendmsg_copy_msghdr+0x160/0x160 [ 1751.813787][ T9717] ? __fget_files+0x21b/0x3e0 [ 1751.820397][ T9717] ? lock_downgrade+0x6e0/0x6e0 [ 1751.826733][ T9717] ? __fget_files+0x23d/0x3e0 [ 1751.832791][ T9717] ? __fget_light+0xea/0x280 [ 1751.838883][ T9717] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1751.847993][ T9717] __sys_sendmsg+0xe5/0x1b0 [ 1751.854567][ T9717] ? __sys_sendmsg_sock+0x30/0x30 [ 1751.861407][ T9717] ? lock_downgrade+0x6e0/0x6e0 [ 1751.867679][ T9717] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1751.876451][ T9717] __do_fast_syscall_32+0x65/0xf0 [ 1751.882828][ T9717] do_fast_syscall_32+0x2f/0x70 [ 1751.889029][ T9717] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1751.896768][ T9717] RIP: 0023:0xf6f11549 [ 1751.901918][ T9717] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1751.928234][ T9717] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1751.939062][ T9717] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1751.948790][ T9717] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1751.958923][ T9717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1751.968661][ T9717] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1751.977931][ T9717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1751.987298][ T9717] 20:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xec0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 45) 20:45:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000060000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:15 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) [ 1752.104305][ T9729] FAULT_INJECTION: forcing a failure. [ 1752.104305][ T9729] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.122946][ T9729] CPU: 2 PID: 9729 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 20:45:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000070000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1752.133596][ T9729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1752.151326][ T9729] Call Trace: [ 1752.154659][ T9729] [ 1752.157780][ T9729] dump_stack_lvl+0xcd/0x134 [ 1752.163831][ T9729] should_fail.cold+0x5/0xa 20:45:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x33fe0, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1752.170281][ T9729] ? crypto_create_tfm_node+0x7f/0x330 [ 1752.178701][ T9729] should_failslab+0x5/0x10 [ 1752.184675][ T9729] __kmalloc_node+0x75/0x390 [ 1752.190965][ T9729] crypto_create_tfm_node+0x7f/0x330 [ 1752.196872][ T9729] crypto_alloc_tfm_node+0x107/0x260 [ 1752.202811][ T9729] cryptd_alloc_aead+0x101/0x200 [ 1752.207871][ T9729] ? cryptd_alloc_ahash+0x200/0x200 [ 1752.213952][ T9729] ? exc_int3+0xb/0x80 [ 1752.218636][ T9729] simd_aead_init+0x67/0x1b0 [ 1752.224048][ T9729] ? simd_aead_exit+0x40/0x40 [ 1752.229929][ T9729] crypto_aead_init_tfm+0x138/0x1a0 [ 1752.236251][ T9729] crypto_create_tfm_node+0x10d/0x330 [ 1752.244662][ T9729] crypto_alloc_tfm_node+0x107/0x260 [ 1752.253473][ T9729] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1752.263029][ T9729] tipc_crypto_key_init+0x82/0x110 [ 1752.271111][ T9729] ? tipc_ehdr_validate+0x240/0x240 [ 1752.279230][ T9729] ? crypto_mod_put+0x8c/0x100 [ 1752.285696][ T9729] tipc_nl_node_set_key+0xa5d/0xf70 [ 1752.293612][ T9729] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1752.303560][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.312236][ T9729] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1752.323236][ T9729] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1752.335525][ T9729] genl_family_rcv_msg_doit+0x228/0x320 [ 1752.344117][ T9729] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1752.356690][ T9729] ? mutex_lock_io_nested+0x1150/0x1150 [ 1752.363250][ T9729] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1752.371385][ T9729] ? __radix_tree_lookup+0x211/0x2a0 [ 1752.377898][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.385655][ T9729] ? genl_get_cmd+0x3cf/0x480 [ 1752.392429][ T9729] genl_rcv_msg+0x328/0x580 [ 1752.398460][ T9729] ? genl_get_cmd+0x480/0x480 [ 1752.404384][ T9729] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1752.412833][ T9729] ? lock_release+0x720/0x720 [ 1752.419649][ T9729] netlink_rcv_skb+0x153/0x420 [ 1752.426075][ T9729] ? genl_get_cmd+0x480/0x480 [ 1752.433407][ T9729] ? netlink_ack+0xa60/0xa60 [ 1752.439625][ T9729] ? netlink_deliver_tap+0x1b1/0xc30 [ 1752.447236][ T9729] genl_rcv+0x24/0x40 [ 1752.452932][ T9729] netlink_unicast+0x533/0x7d0 [ 1752.460063][ T9729] ? netlink_attachskb+0x880/0x880 [ 1752.467280][ T9729] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1752.475568][ T9729] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1752.483929][ T9729] ? __phys_addr_symbol+0x2c/0x70 [ 1752.492800][ T9729] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1752.501632][ T9729] ? __check_object_size+0x16e/0x3f0 [ 1752.509857][ T9729] netlink_sendmsg+0x86d/0xda0 [ 1752.516338][ T9729] ? netlink_unicast+0x7d0/0x7d0 [ 1752.523348][ T9729] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1752.531296][ T9729] ? netlink_unicast+0x7d0/0x7d0 [ 1752.538393][ T9729] sock_sendmsg+0xcf/0x120 [ 1752.546866][ T9729] ____sys_sendmsg+0x6e8/0x810 [ 1752.553508][ T9729] ? kernel_sendmsg+0x50/0x50 [ 1752.560274][ T9729] ? do_recvmmsg+0x6d0/0x6d0 [ 1752.566599][ T9729] ? lock_chain_count+0x20/0x20 [ 1752.573241][ T9729] ? lock_chain_count+0x20/0x20 [ 1752.579996][ T9729] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1752.587786][ T9729] ___sys_sendmsg+0xf3/0x170 [ 1752.593918][ T9729] ? sendmsg_copy_msghdr+0x160/0x160 [ 1752.600331][ T9729] ? __fget_files+0x21b/0x3e0 [ 1752.606592][ T9729] ? lock_downgrade+0x6e0/0x6e0 [ 1752.612297][ T9729] ? __fget_files+0x23d/0x3e0 [ 1752.618472][ T9729] ? __fget_light+0xea/0x280 [ 1752.623747][ T9729] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1752.631914][ T9729] __sys_sendmsg+0xe5/0x1b0 [ 1752.637329][ T9729] ? __sys_sendmsg_sock+0x30/0x30 [ 1752.643305][ T9729] ? lock_downgrade+0x6e0/0x6e0 [ 1752.650247][ T9729] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1752.658364][ T9729] __do_fast_syscall_32+0x65/0xf0 [ 1752.664561][ T9729] do_fast_syscall_32+0x2f/0x70 [ 1752.671189][ T9729] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1752.678760][ T9729] RIP: 0023:0xf6f11549 [ 1752.683695][ T9729] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1752.707000][ T9729] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1752.716626][ T9729] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1752.726302][ T9729] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1752.737950][ T9729] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1752.747649][ T9729] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1752.757992][ T9729] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1752.767779][ T9729] 20:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x20000124, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 46) 20:45:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000080000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:16 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = getpgid(0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}}, r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) fcntl$setsig(r2, 0xa, 0x2d) 20:45:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d2861657329000000000000000000090000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x7ffff000, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1752.891999][ T9749] FAULT_INJECTION: forcing a failure. [ 1752.891999][ T9749] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.910025][ T9749] CPU: 3 PID: 9749 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1752.920925][ T9749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1752.931896][ T9749] Call Trace: [ 1752.935495][ T9749] [ 1752.939113][ T9749] dump_stack_lvl+0xcd/0x134 [ 1752.945181][ T9749] should_fail.cold+0x5/0xa [ 1752.950298][ T9749] ? crypto_create_tfm_node+0x7f/0x330 [ 1752.956823][ T9749] should_failslab+0x5/0x10 [ 1752.962439][ T9749] __kmalloc_node+0x75/0x390 [ 1752.968259][ T9749] crypto_create_tfm_node+0x7f/0x330 [ 1752.975376][ T9749] crypto_spawn_tfm2+0x60/0xb0 [ 1752.980910][ T9749] ? cryptd_hash_init_tfm+0x120/0x120 [ 1752.987001][ T9749] cryptd_aead_init_tfm+0x3c/0x140 [ 1752.992356][ T9749] ? cryptd_hash_init_tfm+0x120/0x120 [ 1752.998874][ T9749] crypto_aead_init_tfm+0x138/0x1a0 [ 1753.005817][ T9749] crypto_create_tfm_node+0x10d/0x330 [ 1753.012533][ T9749] crypto_alloc_tfm_node+0x107/0x260 [ 1753.019659][ T9749] cryptd_alloc_aead+0x101/0x200 [ 1753.025358][ T9749] ? cryptd_alloc_ahash+0x200/0x200 [ 1753.031696][ T9749] ? __kmalloc_node+0x62/0x390 [ 1753.037795][ T9749] simd_aead_init+0x67/0x1b0 [ 1753.043996][ T9749] ? simd_aead_exit+0x40/0x40 [ 1753.050312][ T9749] crypto_aead_init_tfm+0x138/0x1a0 [ 1753.056483][ T9749] crypto_create_tfm_node+0x10d/0x330 [ 1753.064153][ T9749] crypto_alloc_tfm_node+0x107/0x260 [ 1753.072158][ T9749] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1753.079673][ T9749] tipc_crypto_key_init+0x82/0x110 20:45:16 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, &(0x7f00000001c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000080)=[@increfs_done], 0x1c, 0x0, &(0x7f00000000c0)="f5c52a029dd6a83ba5ffe2b6af94f69ac98b50cd6169a82ec5897b22"}) [ 1753.086677][ T9749] ? tipc_ehdr_validate+0x240/0x240 [ 1753.093011][ T9749] ? crypto_mod_put+0x8c/0x100 [ 1753.098884][ T9749] tipc_nl_node_set_key+0xa5d/0xf70 [ 1753.105911][ T9749] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1753.113866][ T9749] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1753.121653][ T9749] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1753.130552][ T9749] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1753.139993][ T9749] genl_family_rcv_msg_doit+0x228/0x320 [ 1753.147379][ T9749] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1753.157712][ T9749] ? mutex_lock_io_nested+0x1150/0x1150 [ 1753.164511][ T9749] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1753.171881][ T9749] ? __radix_tree_lookup+0x211/0x2a0 [ 1753.178140][ T9749] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1753.186035][ T9749] ? genl_get_cmd+0x3cf/0x480 [ 1753.192007][ T9749] genl_rcv_msg+0x328/0x580 [ 1753.197788][ T9749] ? genl_get_cmd+0x480/0x480 [ 1753.203999][ T9749] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1753.212511][ T9749] ? lock_release+0x720/0x720 [ 1753.218261][ T9749] netlink_rcv_skb+0x153/0x420 [ 1753.224322][ T9749] ? genl_get_cmd+0x480/0x480 [ 1753.230256][ T9749] ? netlink_ack+0xa60/0xa60 [ 1753.235420][ T9749] ? netlink_deliver_tap+0x1b1/0xc30 [ 1753.242350][ T9749] genl_rcv+0x24/0x40 [ 1753.247342][ T9749] netlink_unicast+0x533/0x7d0 [ 1753.253211][ T9749] ? netlink_attachskb+0x880/0x880 [ 1753.260129][ T9749] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1753.268471][ T9749] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1753.276966][ T9749] ? __phys_addr_symbol+0x2c/0x70 [ 1753.283858][ T9749] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1753.291534][ T9749] ? __check_object_size+0x16e/0x3f0 [ 1753.298645][ T9749] netlink_sendmsg+0x86d/0xda0 [ 1753.304134][ T9749] ? netlink_unicast+0x7d0/0x7d0 [ 1753.310387][ T9749] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1753.318317][ T9749] ? netlink_unicast+0x7d0/0x7d0 [ 1753.324869][ T9749] sock_sendmsg+0xcf/0x120 [ 1753.330702][ T9749] ____sys_sendmsg+0x6e8/0x810 [ 1753.336864][ T9749] ? kernel_sendmsg+0x50/0x50 [ 1753.343209][ T9749] ? do_recvmmsg+0x6d0/0x6d0 [ 1753.349602][ T9749] ? lock_chain_count+0x20/0x20 [ 1753.356212][ T9749] ? lock_chain_count+0x20/0x20 [ 1753.362437][ T9749] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1753.369226][ T9749] ___sys_sendmsg+0xf3/0x170 [ 1753.375038][ T9749] ? sendmsg_copy_msghdr+0x160/0x160 [ 1753.380746][ T9749] ? __fget_files+0x21b/0x3e0 [ 1753.387353][ T9749] ? lock_downgrade+0x6e0/0x6e0 [ 1753.394101][ T9749] ? __fget_files+0x23d/0x3e0 [ 1753.399907][ T9749] ? __fget_light+0xea/0x280 [ 1753.405917][ T9749] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1753.415081][ T9749] __sys_sendmsg+0xe5/0x1b0 [ 1753.420247][ T9749] ? __sys_sendmsg_sock+0x30/0x30 [ 1753.426287][ T9749] ? lock_downgrade+0x6e0/0x6e0 [ 1753.431940][ T9749] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1753.438761][ T9749] __do_fast_syscall_32+0x65/0xf0 [ 1753.445293][ T9749] do_fast_syscall_32+0x2f/0x70 [ 1753.451376][ T9749] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1753.459468][ T9749] RIP: 0023:0xf6f11549 [ 1753.464699][ T9749] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1753.488958][ T9749] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1753.499856][ T9749] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1753.509658][ T9749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1753.519594][ T9749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1753.528440][ T9749] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1753.538485][ T9749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1753.548688][ T9749] 20:45:17 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 47) 20:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0xfffffdef, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) 20:45:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000e0000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1753.636199][ T9768] FAULT_INJECTION: forcing a failure. 20:45:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x2, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1753.636199][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 1753.650426][ T9768] CPU: 0 PID: 9768 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1753.658750][ T9768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1753.669671][ T9768] Call Trace: [ 1753.673658][ T9768] [ 1753.677197][ T9768] dump_stack_lvl+0xcd/0x134 [ 1753.683063][ T9768] should_fail.cold+0x5/0xa [ 1753.688558][ T9768] ? crypto_create_tfm_node+0x7f/0x330 [ 1753.695345][ T9768] should_failslab+0x5/0x10 [ 1753.700716][ T9768] __kmalloc_node+0x75/0x390 [ 1753.705924][ T9768] crypto_create_tfm_node+0x7f/0x330 [ 1753.711964][ T9768] crypto_spawn_tfm2+0x60/0xb0 [ 1753.717120][ T9768] ? cryptd_hash_init_tfm+0x120/0x120 [ 1753.722977][ T9768] cryptd_aead_init_tfm+0x3c/0x140 [ 1753.728234][ T9768] ? cryptd_hash_init_tfm+0x120/0x120 [ 1753.733691][ T9768] crypto_aead_init_tfm+0x138/0x1a0 [ 1753.739967][ T9768] crypto_create_tfm_node+0x10d/0x330 [ 1753.746634][ T9768] crypto_alloc_tfm_node+0x107/0x260 [ 1753.753017][ T9768] cryptd_alloc_aead+0x101/0x200 [ 1753.759227][ T9768] ? cryptd_alloc_ahash+0x200/0x200 [ 1753.765833][ T9768] ? __kmalloc_node+0x62/0x390 [ 1753.771901][ T9768] simd_aead_init+0x67/0x1b0 [ 1753.777869][ T9768] ? simd_aead_exit+0x40/0x40 [ 1753.783763][ T9768] crypto_aead_init_tfm+0x138/0x1a0 [ 1753.790383][ T9768] crypto_create_tfm_node+0x10d/0x330 [ 1753.796169][ T9768] crypto_alloc_tfm_node+0x107/0x260 [ 1753.802365][ T9768] tipc_aead_init.constprop.0+0x11c/0x8f0 [ 1753.809547][ T9768] tipc_crypto_key_init+0x82/0x110 [ 1753.815977][ T9768] ? tipc_ehdr_validate+0x240/0x240 [ 1753.821557][ T9768] ? crypto_mod_put+0x8c/0x100 [ 1753.826957][ T9768] tipc_nl_node_set_key+0xa5d/0xf70 [ 1753.832865][ T9768] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1753.839612][ T9768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1753.846896][ T9768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1753.856184][ T9768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1753.864444][ T9768] genl_family_rcv_msg_doit+0x228/0x320 [ 1753.870902][ T9768] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1753.878793][ T9768] ? mutex_lock_io_nested+0x1150/0x1150 [ 1753.884959][ T9768] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1753.892675][ T9768] ? __radix_tree_lookup+0x211/0x2a0 [ 1753.899545][ T9768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1753.907733][ T9768] ? genl_get_cmd+0x3cf/0x480 [ 1753.913785][ T9768] genl_rcv_msg+0x328/0x580 [ 1753.919800][ T9768] ? genl_get_cmd+0x480/0x480 [ 1753.925602][ T9768] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1753.933816][ T9768] ? lock_release+0x720/0x720 [ 1753.939298][ T9768] ? check_path.constprop.0+0x50/0x50 [ 1753.944808][ T9768] netlink_rcv_skb+0x153/0x420 [ 1753.949857][ T9768] ? genl_get_cmd+0x480/0x480 [ 1753.955236][ T9768] ? netlink_ack+0xa60/0xa60 [ 1753.960734][ T9768] ? netlink_deliver_tap+0x1b1/0xc30 [ 1753.966880][ T9768] genl_rcv+0x24/0x40 [ 1753.971101][ T9768] netlink_unicast+0x533/0x7d0 [ 1753.976621][ T9768] ? netlink_attachskb+0x880/0x880 [ 1753.982533][ T9768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1753.989411][ T9768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1753.996666][ T9768] ? __phys_addr_symbol+0x2c/0x70 [ 1754.002452][ T9768] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1754.008967][ T9768] ? __check_object_size+0x16e/0x3f0 [ 1754.015486][ T9768] netlink_sendmsg+0x86d/0xda0 [ 1754.021159][ T9768] ? netlink_unicast+0x7d0/0x7d0 [ 1754.027654][ T9768] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.035342][ T9768] ? netlink_unicast+0x7d0/0x7d0 [ 1754.041264][ T9768] sock_sendmsg+0xcf/0x120 [ 1754.046954][ T9768] ____sys_sendmsg+0x6e8/0x810 [ 1754.052860][ T9768] ? kernel_sendmsg+0x50/0x50 [ 1754.058629][ T9768] ? do_recvmmsg+0x6d0/0x6d0 [ 1754.064101][ T9768] ? perf_trace_lock+0xeb/0x4d0 [ 1754.070142][ T9768] ? lock_chain_count+0x20/0x20 [ 1754.076241][ T9768] ? check_path.constprop.0+0x50/0x50 [ 1754.082920][ T9768] ___sys_sendmsg+0xf3/0x170 [ 1754.088568][ T9768] ? sendmsg_copy_msghdr+0x160/0x160 [ 1754.095036][ T9768] ? __fget_files+0x21b/0x3e0 [ 1754.100552][ T9768] ? lock_downgrade+0x6e0/0x6e0 [ 1754.106939][ T9768] ? __fget_files+0x23d/0x3e0 [ 1754.112974][ T9768] ? __fget_light+0xea/0x280 [ 1754.119079][ T9768] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1754.127008][ T9768] __sys_sendmsg+0xe5/0x1b0 [ 1754.132715][ T9768] ? __sys_sendmsg_sock+0x30/0x30 [ 1754.138915][ T9768] ? lock_downgrade+0x6e0/0x6e0 [ 1754.144832][ T9768] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1754.153203][ T9768] __do_fast_syscall_32+0x65/0xf0 [ 1754.160640][ T9768] do_fast_syscall_32+0x2f/0x70 [ 1754.167193][ T9768] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.175244][ T9768] RIP: 0023:0xf6f11549 [ 1754.180307][ T9768] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1754.204970][ T9768] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1754.216425][ T9768] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1754.227226][ T9768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.237945][ T9768] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1754.248210][ T9768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1754.258391][ T9768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.268254][ T9768] 20:45:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000000f0000000000000000000000000000150000fb"], 0x58}}, 0x0) 20:45:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) (fail_nth: 48) 20:45:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000000c0)={0x64, r1, 0x3, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "056e096507ba4af4b08900825ebf12ff0f72fd43958ed49e4a15ba3719512f610d2f8526"}}]}]}, 0x64}}, 0x0) [ 1754.374845][ T9777] FAULT_INJECTION: forcing a failure. 20:45:18 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={[0x9, 0x200]}, 0x8, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup3(r2, r3, 0x0) r4 = syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xfff, 0x2, &(0x7f0000000340)=[{&(0x7f00000002c0)="148d6535e8f648193db2a8d3d3bf79acfb1d2059f60d42d96f7ff9deafaff6c13addc9", 0x23, 0x1c}, {&(0x7f0000000300)="e91a0b3d3b22644f1c1f4e3b2e93685064456f97", 0x14}], 0x20000, &(0x7f0000000380)={[{@nr_blocks={'nr_blocks', 0x3d, [0x31, 0x38, 0x33, 0x31]}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/'}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000740)={0xdc, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x5, 0x2, 0x2}, @flat=@weak_handle={0x77682a85, 0x100}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000080)={0x0, 0x1c, 0x34}}, 0x40}, @increfs_done={0x40106308, 0x1}, @dead_binder_done, @enter_looper, @register_looper, @free_buffer, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/210, 0xd2, 0x2, 0xa}, @flat=@handle={0x73682a85, 0x0, 0x1}}, &(0x7f0000000540)={0x0, 0x18, 0x40}}}, @request_death={0x400c630e, 0x6}], 0x92, 0x0, &(0x7f0000000680)="f409d051495c37694f5910d33bc2b0cc16c18168228cc96e926ad48875c2b66cfbe7c37d74281450c488ab98a3ad427c3ad2bd2f8a65b9e8e2d6cd741a136051ac3c25bc1a109a9ce53efb5faebab518b5a857d97ab69f8270d91ecab625f90fd0f1496b1ed8f0905f211023ff1bf1653af7634313c077aaf6a5f7d46a857eee110276181fc9b1b0aeb3cdd7d04943134982"}) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40100000000000000000000000b464a89c5178cc02f39f269488d3b1c4587d83202bb16925bb6038fb0f4983aab1a334ba8abcc60122f453f7447578077ce66b51a40481f4d11b2e7824e0f4fd74e6867c037e072ff22be389635b86642ab13997090db2439db34881373cfdb823da93a854d736274ef794c77eb0811a848587d8"], 0x0, 0x0, &(0x7f00000001c0)}) [ 1754.374845][ T9777] name failslab, interval 1, probability 0, space 0, times 0 20:45:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f00000081c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000440006803d00040067636d28616573290000000000000000003f0000000000000000000000000000150000fb"], 0x58}}, 0x0) [ 1754.392273][ T9777] CPU: 0 PID: 9777 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1754.405276][ T9777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1754.417943][ T9777] Call Trace: [ 1754.421882][ T9777] [ 1754.426212][ T9777] dump_stack_lvl+0xcd/0x134 [ 1754.433007][ T9777] should_fail.cold+0x5/0xa [ 1754.439536][ T9777] should_failslab+0x5/0x10 [ 1754.447221][ T9777] __kmalloc_track_caller+0x79/0x320 [ 1754.454558][ T9777] ? tipc_aead_init.constprop.0+0x418/0x8f0 [ 1754.464018][ T9777] ? rcu_read_lock_sched_held+0x3a/0x70 [ 1754.471947][ T9777] kmemdup+0x23/0x50 [ 1754.477463][ T9777] tipc_aead_init.constprop.0+0x418/0x8f0 [ 1754.484868][ T9777] tipc_crypto_key_init+0x82/0x110 [ 1754.492239][ T9777] ? tipc_ehdr_validate+0x240/0x240 [ 1754.499616][ T9777] ? crypto_mod_put+0x8c/0x100 [ 1754.506424][ T9777] tipc_nl_node_set_key+0xa5d/0xf70 [ 1754.512958][ T9777] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1754.520822][ T9777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.528593][ T9777] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1754.536582][ T9787] loop2: detected capacity change from 0 to 7 [ 1754.537949][ T9777] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1754.555384][ T9777] genl_family_rcv_msg_doit+0x228/0x320 [ 1754.562372][ T9777] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1754.572124][ T9777] ? mutex_lock_io_nested+0x1150/0x1150 [ 1754.579338][ T9777] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1754.587716][ T9777] ? __radix_tree_lookup+0x211/0x2a0 [ 1754.595431][ T9777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.604567][ T9777] ? genl_get_cmd+0x3cf/0x480 [ 1754.611448][ T9777] genl_rcv_msg+0x328/0x580 [ 1754.617559][ T9777] ? genl_get_cmd+0x480/0x480 [ 1754.623821][ T9777] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1754.632129][ T9777] ? lock_release+0x720/0x720 [ 1754.639452][ T9777] netlink_rcv_skb+0x153/0x420 [ 1754.647019][ T9777] ? genl_get_cmd+0x480/0x480 [ 1754.653825][ T9777] ? netlink_ack+0xa60/0xa60 [ 1754.659925][ T9777] ? netlink_deliver_tap+0x1b1/0xc30 [ 1754.667475][ T9777] genl_rcv+0x24/0x40 [ 1754.672737][ T9777] netlink_unicast+0x533/0x7d0 [ 1754.679339][ T9777] ? netlink_attachskb+0x880/0x880 [ 1754.686357][ T9777] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1754.694875][ T9777] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1754.703040][ T9777] ? __phys_addr_symbol+0x2c/0x70 [ 1754.710097][ T9777] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1754.717064][ T9777] ? __check_object_size+0x16e/0x3f0 [ 1754.724136][ T9777] netlink_sendmsg+0x86d/0xda0 [ 1754.730788][ T9777] ? netlink_unicast+0x7d0/0x7d0 [ 1754.737312][ T9777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1754.745980][ T9777] ? netlink_unicast+0x7d0/0x7d0 [ 1754.752574][ T9777] sock_sendmsg+0xcf/0x120 [ 1754.758700][ T9777] ____sys_sendmsg+0x6e8/0x810 [ 1754.765622][ T9777] ? kernel_sendmsg+0x50/0x50 [ 1754.772084][ T9777] ? do_recvmmsg+0x6d0/0x6d0 [ 1754.778278][ T9777] ? lock_chain_count+0x20/0x20 [ 1754.785097][ T9777] ? lock_chain_count+0x20/0x20 [ 1754.792796][ T9777] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1754.801881][ T9777] ___sys_sendmsg+0xf3/0x170 [ 1754.808615][ T9777] ? sendmsg_copy_msghdr+0x160/0x160 [ 1754.815827][ T9777] ? __fget_files+0x21b/0x3e0 [ 1754.821296][ T9777] ? lock_downgrade+0x6e0/0x6e0 [ 1754.826997][ T9777] ? __fget_files+0x23d/0x3e0 [ 1754.832827][ T9777] ? __fget_light+0xea/0x280 [ 1754.838846][ T9777] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1754.846759][ T9777] __sys_sendmsg+0xe5/0x1b0 [ 1754.852375][ T9777] ? __sys_sendmsg_sock+0x30/0x30 [ 1754.858859][ T9777] ? lock_downgrade+0x6e0/0x6e0 [ 1754.866307][ T9777] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1754.875129][ T9777] __do_fast_syscall_32+0x65/0xf0 [ 1754.882379][ T9777] do_fast_syscall_32+0x2f/0x70 [ 1754.888948][ T9777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1754.897024][ T9777] RIP: 0023:0xf6f11549 [ 1754.902058][ T9777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1754.928563][ T9777] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1754.939243][ T9777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1754.949936][ T9777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1754.959887][ T9777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1754.969669][ T9777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1754.980568][ T9777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1754.990559][ T9777] [ 1754.995860][ T9777] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 1755.012477][ T9777] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 1755.023110][ T9777] CPU: 0 PID: 9777 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0 [ 1755.032168][ T9777] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 1755.049972][ T9777] RIP: 0010:tipc_crypto_key_distr+0x218/0xa80 [ 1755.058152][ T9777] Code: 02 00 0f 85 66 08 00 00 48 8b 45 00 49 8d 4d 20 48 89 ca 48 89 4c 24 10 48 c1 ea 03 48 89 04 24 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b0 [ 1755.082768][ T9777] RSP: 0018:ffffc900251bf3d0 EFLAGS: 00010202 [ 1755.091712][ T9777] RAX: dffffc0000000000 RBX: ffff88801164e600 RCX: 0000000000000020 [ 1755.103362][ T9777] RDX: 0000000000000004 RSI: ffffffff88b3c577 RDI: ffff88801164e640 [ 1755.114607][ T9777] RBP: ffff888013ad5800 R08: 0000000000000000 R09: 0000000000000000 [ 1755.127360][ T9777] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1755.139602][ T9777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000048 [ 1755.151167][ T9777] FS: 0000000000000000(0000) GS:ffff88802ca00000(0063) knlGS:00000000f450bb40 [ 1755.163817][ T9777] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1755.172824][ T9777] CR2: 00000000f6fe64c8 CR3: 00000000527dd000 CR4: 0000000000152ef0 [ 1755.183514][ T9777] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1755.193913][ T9777] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1755.202627][ T9777] Call Trace: [ 1755.206708][ T9777] [ 1755.210539][ T9777] ? tipc_aead_init.constprop.0+0x533/0x8f0 [ 1755.218352][ T9777] ? tipc_crypto_msg_rcv+0x9d0/0x9d0 [ 1755.224985][ T9777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.233151][ T9777] ? tipc_crypto_key_init+0xc1/0x110 [ 1755.239968][ T9777] ? tipc_ehdr_validate+0x240/0x240 [ 1755.246650][ T9777] ? crypto_mod_put+0x8c/0x100 [ 1755.252642][ T9777] tipc_nl_node_set_key+0xa95/0xf70 [ 1755.259522][ T9777] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1755.268012][ T9777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.276118][ T9777] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b7/0x290 [ 1755.287201][ T9777] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x290 [ 1755.296894][ T9777] genl_family_rcv_msg_doit+0x228/0x320 [ 1755.304081][ T9777] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 1755.313734][ T9777] ? mutex_lock_io_nested+0x1150/0x1150 [ 1755.321193][ T9777] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 1755.328974][ T9777] ? __radix_tree_lookup+0x211/0x2a0 [ 1755.336009][ T9777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.344359][ T9777] ? genl_get_cmd+0x3cf/0x480 [ 1755.350230][ T9777] genl_rcv_msg+0x328/0x580 [ 1755.356648][ T9777] ? genl_get_cmd+0x480/0x480 [ 1755.362549][ T9777] ? tipc_nl_node_dump_monitor_peer+0x590/0x590 [ 1755.369963][ T9777] ? lock_release+0x720/0x720 [ 1755.376055][ T9777] netlink_rcv_skb+0x153/0x420 [ 1755.381829][ T9777] ? genl_get_cmd+0x480/0x480 [ 1755.387581][ T9777] ? netlink_ack+0xa60/0xa60 [ 1755.393973][ T9777] ? netlink_deliver_tap+0x1b1/0xc30 [ 1755.401025][ T9777] genl_rcv+0x24/0x40 [ 1755.406198][ T9777] netlink_unicast+0x533/0x7d0 [ 1755.412539][ T9777] ? netlink_attachskb+0x880/0x880 [ 1755.419242][ T9777] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.427788][ T9777] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.435908][ T9777] ? __phys_addr_symbol+0x2c/0x70 [ 1755.442330][ T9777] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 1755.449852][ T9777] ? __check_object_size+0x16e/0x3f0 [ 1755.456619][ T9777] netlink_sendmsg+0x86d/0xda0 [ 1755.465238][ T9777] ? netlink_unicast+0x7d0/0x7d0 [ 1755.472550][ T9777] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1755.481561][ T9777] ? netlink_unicast+0x7d0/0x7d0 [ 1755.487713][ T9777] sock_sendmsg+0xcf/0x120 [ 1755.494065][ T9777] ____sys_sendmsg+0x6e8/0x810 [ 1755.500234][ T9777] ? kernel_sendmsg+0x50/0x50 [ 1755.506218][ T9777] ? do_recvmmsg+0x6d0/0x6d0 [ 1755.512233][ T9777] ? lock_chain_count+0x20/0x20 [ 1755.518120][ T9777] ? lock_chain_count+0x20/0x20 [ 1755.524752][ T9777] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1755.532284][ T9777] ___sys_sendmsg+0xf3/0x170 [ 1755.538557][ T9777] ? sendmsg_copy_msghdr+0x160/0x160 [ 1755.545725][ T9777] ? __fget_files+0x21b/0x3e0 [ 1755.551856][ T9777] ? lock_downgrade+0x6e0/0x6e0 [ 1755.558294][ T9777] ? __fget_files+0x23d/0x3e0 [ 1755.564621][ T9777] ? __fget_light+0xea/0x280 [ 1755.570460][ T9777] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 1755.578605][ T9777] __sys_sendmsg+0xe5/0x1b0 [ 1755.584584][ T9777] ? __sys_sendmsg_sock+0x30/0x30 [ 1755.590917][ T9777] ? lock_downgrade+0x6e0/0x6e0 [ 1755.597643][ T9777] ? syscall_enter_from_user_mode_prepare+0x17/0x40 [ 1755.605911][ T9777] __do_fast_syscall_32+0x65/0xf0 [ 1755.613075][ T9777] do_fast_syscall_32+0x2f/0x70 [ 1755.620059][ T9777] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1755.628354][ T9777] RIP: 0023:0xf6f11549 [ 1755.633716][ T9777] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1755.659336][ T9777] RSP: 002b:00000000f450b5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 1755.670740][ T9777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020008400 [ 1755.682609][ T9777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1755.693517][ T9777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1755.703763][ T9777] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1755.714556][ T9777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1755.726452][ T9777] [ 1755.730789][ T9777] Modules linked in: [ 1755.736703][ T9777] ---[ end trace 6481d45e33cfc478 ]--- [ 1755.744218][ T9777] RIP: 0010:tipc_crypto_key_distr+0x218/0xa80 [ 1755.752070][ T9777] Code: 02 00 0f 85 66 08 00 00 48 8b 45 00 49 8d 4d 20 48 89 ca 48 89 4c 24 10 48 c1 ea 03 48 89 04 24 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 48 89 c8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 b0 [ 1755.782544][ T9777] RSP: 0018:ffffc900251bf3d0 EFLAGS: 00010202 [ 1755.791898][ T9777] RAX: dffffc0000000000 RBX: ffff88801164e600 RCX: 0000000000000020 [ 1755.802885][ T9777] RDX: 0000000000000004 RSI: ffffffff88b3c577 RDI: ffff88801164e640 [ 1755.814501][ T9777] RBP: ffff888013ad5800 R08: 0000000000000000 R09: 0000000000000000 [ 1755.828957][ T9777] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1755.839473][ T9777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000048 [ 1755.851328][ T9777] FS: 0000000000000000(0000) GS:ffff88802ca00000(0063) knlGS:00000000f450bb40 [ 1755.864258][ T9777] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1755.872508][ T9777] CR2: 00000000f6fe64c8 CR3: 00000000527dd000 CR4: 0000000000152ef0 [ 1755.881939][ T9777] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1755.892244][ T9777] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1755.902247][ T9777] Kernel panic - not syncing: Fatal exception [ 1755.911797][ T9777] Kernel Offset: disabled [ 1755.917211][ T9777] Rebooting in 86400 seconds.. VM DIAGNOSIS: 20:45:19 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8437e6c1 RDI=ffffffff905749c0 RBP=ffffffff90574980 RSP=ffffc900251bee00 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff8437e6b2 R11=000000000000001f R12=0000000000000000 R13=0000000000000020 R14=ffffffff90574980 R15=dffffc0000000000 RIP=ffffffff8437e6ea RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802ca00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6fe64c8 CR3=00000000527dd000 CR4=00152ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=795c9a42a11859a84163ef45dca9d814 XMM01=fa3af8c540b92899631bc63641872c53 XMM02=795c9a42a11859a84163ef45dca9d814 XMM03=00000000000000000000000000000000 XMM04=e8c5245875dc0fb575dc0fb500000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=1ffff920043acf68 RCX=0000000000000000 RDX=ffff88801958d700 RSI=ffffffff816c4892 RDI=0000000000000003 RBP=ffffc90021d67bf0 RSP=ffffc90021d67b20 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff816c48b9 R11=0000000000000000 R12=ffff88802cb3ab00 R13=0000000000000001 R14=0000000000000003 R15=ffffed1005967561 RIP=ffffffff816c4898 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002e121000 CR3=000000006d113000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=795c9a42a11859a84163ef45dca9d814 XMM01=fa3af8c540b92899631bc63641872c53 XMM02=795c9a42a11859a84163ef45dca9d814 XMM03=00000000000000000000000000000000 XMM04=e8c5245875dc0fb575dc0fb500000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000040000 RBX=ffff88802ca41e20 RCX=ffffc90022d58000 RDX=0000000000040000 RSI=ffffffff816c50f0 RDI=0000000000000003 RBP=0000000000000003 RSP=ffffc9002529f6e8 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff816c5116 R11=0000000000000000 R12=ffffed10059483c5 R13=0000000000000000 R14=ffff88802ca41e28 R15=0000000000000001 RIP=ffffffff816c50f2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f4411db0 CR3=0000000068fad000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000008000000100000014a XMM01=00007f03c0420a10000055ee92ff0860 XMM02=00000000001000000000000000100000 XMM03=00007f045cca9d6b0000000000000000 XMM04=0f02000a0202000a0000000000000000 XMM05=00000000000000000000000000000600 XMM06=14000000000000000000000000000000 XMM07=00000050000000000000000016009a82 XMM08=0041eb28babc1cf36a4480d6286bb56a XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=000000000013d3a6 RBX=ffff8880114bd700 RCX=ffffffff893aa43f RDX=ffffed10059a754b RSI=0000000000000001 RDI=ffffffff893d744f RBP=0000000000000003 RSP=ffffc9000045fdf8 R8 =0000000000000000 R9 =ffff88802cd3aa53 R10=ffffed10059a754a R11=0000000000000000 R12=ffffed1002297ae0 R13=0000000000000003 R14=ffffffff8d70dad0 R15=0000000000000000 RIP=ffffffff893d6f8b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f6f714c3 CR3=000000006b07b000 CR4=00152ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000020000 XMM01=00007f03c0420a10000055ee94338fa0 XMM02=00000000febc00000000000000000000 XMM03=00007f045cca9d6b0000000000000000 XMM04=0f02000a0202000a0000000000000000 XMM05=00000000000000000000000000000600 XMM06=14000000000000000000000000000000 XMM07=00000050000000000000000016009a82 XMM08=c8c44088548ddd5916cef75ccc2c98fb XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000