fffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb1a6a4717f0815c921be496f3828e5741094b4c714ad78c41d980a097d685fa16c7253c43719a6ea675043cfa7dc732f02c7c7cd461034ffa3fb1ce43e5d9cf67e8424d4716271afa72f104ec7096a37414ebf123fa6f452a5fbb284cb69d985cb0266bc8b93ee814f44ec41484ad0aa50d193ae8872708b0a05f4d3eeedc1c8cfbf40aaecad6d0191b6b042c42452d7231faa72eff2bb6e75efb", 0x9b}, {&(0x7f0000000100)="67f22dede56dddb356c652cc126f1a682426a8f564e3775f30bc10098b346edc63b7e70b8f419f222f60d1ea9d4a13eebc95f5f2ec9c489ed663d8c90a5bf11e128112dbb730fe7c8f9d85cf46fce3311e930d72ef91ea61efbdef7c7cb67f7c2e9a756abd63448dfe8f111e79ec44e3dcf7b965dd9b052f5c35b8e36e97de5bdb1a3161292cabfbe5717477316eda5cbb6c59af49502f0edf13796eeca81452d788cbbb3e2972902aac07d531ba280d4cb08b9a1c5c1ffa7367ede8187dde1242eedfc9dd775aa1160dd30ce494aa7f051bca04879fdd61d040911a6202a3ac4e2cf21ec6d6e93e28454b8ff1445e6021", 0xf1}, {&(0x7f00000003c0)="ddbba6ed63977f4141a5c67f8f938e6e745b1e336b210e2c50e4a77e5ad6943aa301bc33d43ab5e34a0b28a717994f7c323cb821b957693366c7a3d8764b4bb327faee9dcc2a162c21f8c697468e3887510106708a95281973e8ad5b28d9fb66ad1c4294f5150b8b924c82feb2a2f52662ab6e9554e37510139a5419262b92f426c2891f949e59a7e885009e0ae5f1a8f917fbe214063114dffed891814ac21931e625f4961be673c9b1335bccd9071911fa6abd4a41d4b414993bdb1ceba6cd7c91f718b36cd3e9d4882e25a947cbf5e1334ca1560682d27e0c006d6983f82a154fc1322d58e653ac7c6b2f791ce3ef41ca1178cf76b595565c7f6ade3e586e9b9b38ec8d2284fd5d3529373088a6053025d1ce085d0970462e155d2203a87a5f97558e799580c9549d9a4517b686bba66bbafa1be92f04a85e90d6b2bda668b61ac3df2969f8c980a5b57ff403463fbed6c5c46ee64582304d3a0bc4b9c0332e8001312771f42365d9da144d55c6e0d38ad0995a48e21efaadb5a7255b98590ada0a9e5165ec01458276b8d00d362135c6e5b87f6589f7f1fb74bd3300d8dd4541b5d245edd03c6fd11dea1393257a493062b4921ceb2c6face251eeda4cf6aafb5b5a7a39be506a9415697691566430c01ef5a8c48a4dd6186b0a1c62ada990e763a9d60ee9f16a5d67db889ae42156c04ba7a4a2d018c287d8269cd3cb2d4070d9f18c49e4a23e6baf57f3a9f997970d2b639895f7b5b8864276e7bb22c361501f4435f64621ee2440584b01cc85f1ba396c9c4ca1655dfe1ca060e1bb0e5b84cd8b3aac0391064b0adf02a4db6d3fa059eb2575f9e90ddf06d63eb7e524fa64c4285ced288727f7cdc99e5327348f4db36c52359d45080d5834ebe2906ae28fbda5d3102c2c2a2354cd4074d8ca95c2fbc3f6bb9953c8e85aed031bc15e1c2463b1e39691aaefb892ba4c6c872adf4bb23f686e0744251c2d45c30efad3978cc557ca9ea77d79f2ab95f4e300afa21991b03ef049d2eabead3b9509867c26bae0b293026b73d2d6b776f00e0ba7c08cca77b00822c9ef42efe8254ab416087bb5e1c38a1699caf5e2a500a4ecdc27ab2d233360fdf93b7946cc42997675288f26decf6c7fcb3ee6abebbeb3b004f7aef1754ab8c8c52dee92a9db432ce1d5b3ed66c4829f4ee1c92e96bc44d1fcd96cfc9c02f04259ee86b6e81d5a127708778ce70da973561f3716365ee4bc1649cb32cc86655e6eb53d54f0cc47cd87cce5db2c01d3fef2e2a3526feb729d37d59d8ad98e0314d48bbaf9068ae7dd8fe558a2252def841af97d684ff14a5b7f35e2e8d1982919c1f829c357740c9fb6aae07cd9b15c926c1eff307b9b8aeecd5d67251f9facbca22a2e99d0f18c3c0b89acb8e3162bf18f5461777e49cb2abc420b7360171cf95c6e4694ea77c8ec50e9765f0f648144929a0d2d027c4bc5fe476a3047feaeb78545ac46d17f4c9b96d88205a75cf1b1678e51e3bc5e98fda7364684cea25aba55e4a9f1c84e6b5d41ec5a58c78434a9332295ca1a43c06583a1205a9109949b61d6b9efcb698771116cb25e88e6e69380c59ddda99217f2aa8533db257c045f2bdd61aefef281a81d66691068c2cc874d93f596a0f298cdbf4205517879a3385cf0ff44b350a680f8bba328c58691941a209699fbab65541c2f3e43c79b26d992f9ff53a606d76e55e4f90a45bfc0b141b8c5f362aa9b402e035d4ccf0f4fa29a7a76341b5d2cf4d05d1b0df930ccd9e6c57ffcda45c956d2cd8570af9eaf7eba77af4f7a9a0a2a47e0a6bd57f6a9c6e9150101e057fff2cb9b9bb6c87e6bc669aec752f010761e5c8a0cc2fae6a62b3077f0423ab480fc3db069334397a6c49c263b8c78c5e415246217f918d00dcd8c2b9b20e1d659121eceb6d208d0a7fd9976127ef065f7d76dff57021e1c1f2d6557b85fef6f556498bd9ad591e9e3e0cefa0b692043098d1a39ab11aa92fbd09d12894d6cb1a3869fcc57de5b208b92b53c259e71e41f7aa2732f6c16fb19f219251e9600f722a25a65b83f2ab6c8eb82a0d67eb756bedd5c94bb2551700e7df8c90f36b28bc2edb82116c591aa1e2f667f0db5bfa978230d13df8a4ea20e41853ecce5208efb63ca6ee7f59bfc44a064a1bf8686c122583b2a6faa9d9e22c97837e0fe40c4f58a5f29c9785580106abf13d85975ecf7b59cac1875682510d8e569df43ee7bff437cc4b02c62a6a249555f11c134c7f18b85ea684c496e893518fd9eb9d644f0a0582fd5771035ca6a3cd3bf8697a9c2a9fb942dc6378a153998a6a314fa3b2af51fd82f9e01ccd3a573129d89de3c0bec3c1bc24231829a4b6f1fddc8c8b941b1c361be7ab4054c50b54703519bd70fe472fa241f638fc9beb44a063fe23249a21bc2cdc075aa967bc8d315eaff8868340f0cc44126114949b0207e8011ce496862906fe0a156d03a5a5a780d293433e05321327e885e326bc25c15ada85877376513655703f2da6b3284827f36c60ef41f6d96ad7b2d915fc0fa3bbb31ec163f887a6e3646c477b5c2788b870518334b6e59340e371631512384063b03112d26b8faf9e785b7c7ab525b9dfba11a70d0a198d1a95c2e7f890fd45bec07fd1dc3580a5a17ebf8ed43adc84d1854e06e3881feed2c6eb9fcb37f3ed5a0dd979b8e45974af544a3507ee860f99425715987802c9a2a84a7f7041c6454d83e5f38489ca64e05d9d7473672aaac558eacce6513db5ad64ac1d3d87c5068e428f5ea2db229cc2cef0b8d6334c6c8f6a4da0ab7a272c5ebdc95d8fbd28132055955ed00f1a9e1552a0af21743bc8a9ec31b5b63a20da11a739d266e4de3a7e4bfccbad3acab008d9f13f0e7a7e7fb8792c7d219aa947f7b521ce4f391511b83765869685ad8adc064441813009779f212efc972d3439fbfa75541707fd2af3e12c805eb6c841fc6b9564598d0313ac6e57c353a3a9884478993f94ce91e41bd899c7e3a3e898d6da6a1cee42ace5ae1ad2a5659eec8b5f8b60ec2657b8dc78edd496ace624a7643ad7e24bbc658974b8cd44c373a5d0cb31a557b36e8c7a3e70f24b5d54b3058fcd127f14d642e26889f2feabe3205f29774630d5f341064829a7f4d2695e9526b0b152c0fac3cd7008eea9fe5c1e0f004b705452509d8dbc331cecf2990d211c6b8b03a4c0e6f0a11416441291bb3eb13d8c45561372085525704cc1fc560875620bfeedbb6503543bcceb02dcdd1ca631d68d2a532ae26deb9db6aeedc7855f526e997acc7a63b1a0bdf8d79751e19d4d2ad8dc9337e178ac15b582b0343244116778f9ccaf7e0d87245a8590c9e03a724ebc108f5e5dfe21e5cb49a4e9ff0883a64fe2bd16b9e788497919ea8d436089a37008fde658a8ccdc369ded35dfffbbc2ec385de0614cca61194d9289758ae59dfcf483fcd949b5cbafb05323445916ae100ce9185c244027ff4566d1ddab52a51b00022c01a2d86bcf343c88d1dde9061a6ba288129b86309b8cf258215c02507c9ac4d81dcb5972979e47d0cd535a708832d85036c00348b5650562afc966dafb457b0624849707aadded06ab9c5ea1ffac80ce37613ff266ae0fa2037d217f3986a2c1e355d39a6fc63579afdba6faacc076cfba4cbb8c4930c61a164318bfee46a2df9ab9570f9df7e23567343dec4c5d085bd1ddba51dbffa38a55e97de3ce6dc7f72dba0a42c1855040c2ca2ba14d369eff16c71aaf1765f2fcd1a42a51e58907decee15d1ee00eb7656959a4cb24b002657589c7b97363d22721da650fd9e42578d442794acfc015e475d12049f77a07a7a937a1792f5359db77ccf25642ee9edd3434be181ba33dffa8a8056f935dacf7da1c757dd16e20c7d85d4ec53c72248ef0f0602ced81a199bc5c33f4ac28f04e4cc698ae361b44289bff08a233e6cf528ea7c24e960a280af27cdbe5ffd1885d6ebe7795b39e0e4c3012e29f77f2ed9706611934c4dffc94d8b43e7440344a6031ec348d88cbd43479eb5bfb4d0d5df47bed69a88ee23de73671ce2c54af2d9380aedfab123fb320f6a4c083325fcf10a0f75e0723d845bc0fb7e56cc189c2db5b6986e5559e626cf70490b8cb9061716cf264d14df52d884c3412b3dcb1f36b907faf45e67750a902a6848da7b7e7e3de21af7d3c2398047b4331ee09968393765b66d3d0509a061ee81fec5a76d86595db2d6cc2d43d48d3fb6332490ff558b4cc8e3721f6307160325b85788134059096f8bc0bce93f0b794102afd8a5285dbcb61796a700b172491fa20e93025c997f292385e993e8881b2ad28bf1d0f2b76dedfc1940cebf5a64511e6e5f1fd89f0372a46c9f016d02a1928fd0b2a7b00229c91a4b1b7281df0eb14bb0f050c683b9b6edc1bd09ca197c46bd43e156d84b48f361f0d8444eda0ad5cc961cfb5521817b68a790f365ebd5556b02fc32e0681e0e9b4a5238a492921271ef3745ba6312ef3e6bb9b1802489e0f4d7932502bbe187ebe02041f33db64e4010a7f819e24e77f3d3dc8bcc7ed3082c0daa013c9c188837b6cefbdedede937004bd19db15d70ae385930916cc04a996d22e975ef2ca07a34d2b5c11efd0e5d48bb40dec43a11db6e45e96b99db150d70357ae6b99f58507c2fdde5c5cb1ca3ea0f22f336d845162149805480e844ebf1aaf0d7cf01397bc18ba864a6457418e0174dfa335034e6fb74c20c94adbbb4b53492e9c7a675b50ba4eab7ff2d68de657f2fa97c0092b98f265350d47a24dfb0d40f43593ec439a4f7500938a0a0769fcafd67fc3c76dddc19259f375a7c834caafa2d14109fad6a18875b66719fe4dea31d5a24779b25be8491b8530d67a577433de49d9275ac7cb29fcf81fda4994c5ad736dc0917c0fd904ffb45a5998148a03813124d0482916cf0e9a36cadc3c520a9c0c4b11f8fa743b29bcd95d355f88a0ebce91ad465f3d6cbad9871610364fd846ae2d19171c839f04e1d430fc239fabebc6f33e957b1e5a6926e405f92b5382d6eb4db3ed59c9fb7e25118fd0aad8092b679824f18f671d38673690821466873567daa2ea63e95b8e148a1b8b651e00ca6beffee7c18e1a5436cc709412d3668a88a6eaf31c0ca48eb6f834d93cbefd1b58537621c23ff317a75766445c8f109d8eb5bc0fc883e25e88afb4dd925bcca18eecb1c4861d9052b457c7c63793e98842d5b4ad6775a3f57857faa9ceff92e2d7cc1093fd775bcbfa93e1212b47c5f961028f151b85d5f3167565978c761b86beb5b4f36ce81d53d9be2f262f308659a3b39f38f0b90a34fa6f8b35df3884eb042a5aad434caddfbc4fecce2497ce5b4ee180ecb118eeecdf62670be7ca75da0190b504f83cc492419723700dca98c4cd156a326958a926e7faec3206d554be7204d5eba327c5da5d04a4ffd567f2e4413fa30877227134056ce0265443fee52831e146378f456c7de56fef171a2ced0d0c0db4cb1f25d4f2e71d47986a81d2237d2bf1b51aea01ea68c273792eee3088dda5d9355a453b262ca5255e0b9c8d8da14d7828820a2dc2e0f043de073a70d7923a207bd33d599d8f13121981c28603a9300468b62022e84ee4e001c0fa29a2e0f7a88663ad68129de0dd2f6c3cfb8c4e4529649185687e217dce933c4d9a49862291b4ff4110c8818763f0ded3579aacae76da782fc09b146dd820110e27327dddb6968c68321093c9434358751735753b48b7db15e70bb9acfbd0953de29b930cc5ddfd3b79ec9b2f37fb104ccae99d5e93493867445d", 0x1000}, {&(0x7f0000000240)="841172600a84fdd060de5181b4ba3a04887652c176ef860245e3dc4abb1b7c16762d89ad124149feca", 0x29}, {&(0x7f0000000280)="41aee2938fc205f3e04ca289d326884bb8f7e0489b1a406d1fd76a85bbb198101279396d4b83", 0x26}, {&(0x7f00000013c0)="adce34415393ac72b6aeb98ce5400367308cb16184111fb7dd6b5662dfd1a65fd579fbaf952874260d2426e5800b4a2ded9d4c100d44d71b1c28219efedb527d1902bae8797b55c079e13c6c3f09cab1495e0ead46ef0e1833fe102a60dedc86fb4ba9af4451f5688f47bef7da66152d4e5a15ec7d6ea71895be3bd8b2f3e5f34311da2ef15863c6f2b4f58a0952d71ac58a57cd8cce2c5c71503972ec1bfc984f8679adfb5015371cc25e688169ef7d88d64e4d536c61b3e9e8b56209fc768b6431401d0dbe0ed0a0", 0xc9}], 0x6, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:46 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) bind(r3, &(0x7f0000000040)=@ethernet={0x306}, 0x80) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="214e017c6f767920"], 0xffffffffffffffc3) write$cgroup_subtree(r0, 0x0, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000300)) write$cgroup_int(r2, &(0x7f0000000200)=0xb00000000000000, 0x43432) 09:18:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x3a, 0x0) 09:18:46 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 350.571241][T11659] EXT4-fs (loop3): invalid first ino: 4038522105 09:18:46 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) munmap(&(0x7f00009fd000/0x600000)=nil, 0x600000) sendmsg$nl_crypto(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@upd={0xe8, 0x12, 0x2, 0x0, 0x0, {{'ecb-cast6-avx\x00'}}, [{0x8, 0x1, 0x4}]}, 0xfffffffffffffeea}}, 0x0) nanosleep(&(0x7f0000000000), 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0xcf, 0x0, 0x0, 0x2, 0x1, 0x1, 0xeff}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_PIE_ON(r6, 0x7005) 09:18:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @loopback, 0x2}, 0x1c) sched_setscheduler(r2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r5, 0x200004) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0x6, 0x2, 0x4, 0x180000001, 0x1, {0x77359400}, {0x1, 0x1, 0x7f, 0x8, 0x3f, 0x7f, "94a81655"}, 0x8, 0x4, @userptr=0x4, 0x8, 0x0, r9}) ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000040)={0x2, r10}) sendfile(r0, r5, 0x0, 0x80001d00c0d0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r11 = getpid() kcmp(r11, r2, 0x1, r0, r1) 09:18:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@sys_immutable='sys_immutable'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_gettime(r1, &(0x7f0000000000)) 09:18:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x3b, 0x0) 09:18:46 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="fb1a6a4717f0815c921be496f3828e5741094b4c714ad78c41d980a097d685fa16c7253c43719a6ea675043cfa7dc732f02c7c7cd461034ffa3fb1ce43e5d9cf67e8424d4716271afa72f104ec7096a37414ebf123fa6f452a5fbb284cb69d985cb0266bc8b93ee814f44ec41484ad0aa50d193ae8872708b0a05f4d3eeedc1c8cfbf40aaecad6d0191b6b042c42452d7231faa72eff2bb6e75efb", 0x9b}, {&(0x7f0000000100)="67f22dede56dddb356c652cc126f1a682426a8f564e3775f30bc10098b346edc63b7e70b8f419f222f60d1ea9d4a13eebc95f5f2ec9c489ed663d8c90a5bf11e128112dbb730fe7c8f9d85cf46fce3311e930d72ef91ea61efbdef7c7cb67f7c2e9a756abd63448dfe8f111e79ec44e3dcf7b965dd9b052f5c35b8e36e97de5bdb1a3161292cabfbe5717477316eda5cbb6c59af49502f0edf13796eeca81452d788cbbb3e2972902aac07d531ba280d4cb08b9a1c5c1ffa7367ede8187dde1242eedfc9dd775aa1160dd30ce494aa7f051bca04879fdd61d040911a6202a3ac4e2cf21ec6d6e93e28454b8ff1445e6021", 0xf1}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000240)="841172600a84fdd060de5181b4ba3a04887652c176ef860245e3dc4abb1b7c16762d89ad124149feca", 0x29}, {&(0x7f0000000280)="41aee2938fc205f3e04ca289d326884bb8f7e0489b1a406d1fd76a85bbb198101279396d4b83", 0x26}, {&(0x7f00000013c0)="adce34415393ac72b6aeb98ce5400367308cb16184111fb7dd6b5662dfd1a65fd579fbaf952874260d2426e5800b4a2ded9d4c100d44d71b1c28219efedb527d1902bae8797b55c079e13c6c3f09cab1495e0ead46ef0e1833fe102a60dedc86fb4ba9af4451f5688f47bef7da66152d4e5a15ec7d6ea71895be3bd8b2f3e5f34311da2ef15863c6f2b4f58a0952d71ac58a57cd8cce2c5c71503972ec1bfc984f8679adfb5015371cc25e688169ef7d88d64e4d536c61b3e9e8b56209fc768b6431401d0dbe0ed0a0", 0xc9}], 0x6, r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:47 executing program 4: r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000000)=[0x2], 0x2) r1 = syz_open_dev$evdev(&(0x7f0000001480)='/dev/input/event#\x00', 0xd4, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80084504, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, "c0e3fc01e01332d96bae1e380c4e75bcb2655bb4331cdf86c002251528b4f079"}) 09:18:47 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 350.979397][T11697] FAT-fs (loop3): Directory bread(block 2563) failed [ 350.993078][T11697] FAT-fs (loop3): Directory bread(block 2564) failed 09:18:47 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x3c, 0x0) [ 351.043470][T11697] FAT-fs (loop3): Directory bread(block 2565) failed [ 351.089930][T11697] FAT-fs (loop3): Directory bread(block 2566) failed [ 351.097958][T11697] FAT-fs (loop3): Directory bread(block 2567) failed [ 351.105115][T11697] FAT-fs (loop3): Directory bread(block 2568) failed [ 351.112024][T11697] FAT-fs (loop3): Directory bread(block 2569) failed [ 351.132864][T11697] FAT-fs (loop3): Directory bread(block 2570) failed [ 351.158133][T11697] FAT-fs (loop3): Directory bread(block 2571) failed 09:18:47 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:47 executing program 4: ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) pipe(&(0x7f0000000680)) socket$vsock_stream(0x28, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x0, "11fad144da6bd3f511b249f4fbbfd55758e7075578c8abf50cbbfb9edf10db6ebc252932e98c088b2f868b3f03cf7cc76a3d4ea96576a638d516411b0657bf38522d32635e8b54084ac81d32603b50b1a1654cab72e9ce902532eda186fce70e19d10b9a062654b1e1d8c5fba62ff97c10144d5d1ffb51815b5dc5b16f339eb035edc800fe15b234568af473b1ffa896529524dc60f8db2c6a12781435f00edbee7a118f2906ea52e90b6eed79d6b0f94974f8ced01efac986c13448b6db5bc016004d232d6baf5fd7e10fc97c4efd96a95ede24ce3200012c8f59abb2833c2455237b776ee9362439c627df5df895bd35897c221a1bba6d3bc4ad4fba18294242d615bc153a3af2c4ee0deee6d622e047f83c13b26a4d79c97ab96b6a354a1d5fc7a93109d0442dce372f9405894f7164230bd396d574c458fdbd9ec11fac1245c6f3d55fa7cbaeaf7f427b4ef88547416835671e928b78360836e2979ec1e84bb15addfa4cf9609663e23bd795289f5e603eb8b220832b5000b31d4839dc19a6a784f2923a5bde1bf175f441475b850b804450d6d723cb9e7b8d22524df646726528536b20abdc9bba5a0dcfee7e66469672213060800f140cb04bc8238dd03fd59217e7a2cbc14b8fce7a7519e7736f0483e2154e0140d013fe7ef2d6fcbe9eeb29e86eb5ae0c81db064b33bf2d4eddb91df50079a0ed4313a8b8b329783c"}) close(0xffffffffffffffff) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vcsu\x00', 0x24c00, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x2, 0xa, 0x80, 0x0, 0x5e}, {0x0, 0x237e0e5f, 0x2, 0x3a5c, 0x0, 0x6, 0x0, 0x3}, {0x0, 0x9, 0x3, 0xffffffff00000000}, 0x81, 0x6e6bba, 0x2, 0x0, 0x2, 0x3}, {{@in=@rand_addr=0x77, 0x4d4, 0xff}, 0xa, @in6=@dev={0xfe, 0x80, [], 0x27}, 0x3506, 0x4, 0x3, 0x7, 0xdd1, 0x1, 0x9}}, 0xe8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x84000, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000400)={0xffff, 0x800, 0xffff, 0x6, 0xa, "16b8abbea82b0e84695771fd19be322d9370ab"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 351.200063][T11697] FAT-fs (loop3): Directory bread(block 2572) failed 09:18:47 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r1) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@sys_immutable='sys_immutable'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_gettime(r1, &(0x7f0000000000)) 09:18:47 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x3d, 0x0) 09:18:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 351.680137][ T28] audit: type=1800 audit(1578820727.766:47): pid=11686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16767 res=0 09:18:47 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x3e, 0x0) 09:18:47 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:47 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f00000004c0), 0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x780044}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES16=r4, @ANYBLOB="200026bd7200fddbdf250700000008000600cd0000005600030014000200ffff0600edd84b000000000000000000000000004e220000050008000800000021dc2ac500a1d724c01c7bc3340230ad08e2e9764492d808e0ac26a9b949d59a7cfb8ef5eb5643b04121a6206b48380bf4654c275d2fda5387f5fc1def73c354efde19531804d7aa61a4a759feb7b38d655ca34c5dbb04a3766b75688386a94d41a5187e7a78b01c71897eae4c3aefd81835a70f6246ec776bc09c845bf4655a0d688411c076b9a7624cf8aa3457fe8415ec3a8490e5ee7b59b9c103418370a8f26b38116802b0620000000000"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000, 0x41c4}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000100)='/dev/kvm\x00'}, 0x30) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$RNDZAPENTCNT(r9, 0x5204, &(0x7f0000000380)=0x63c) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$KVM_PPC_GET_SMMU_INFO(r11, 0x8250aea6, &(0x7f0000000500)=""/70) fcntl$setownex(r7, 0xf, &(0x7f0000000180)={0x0, r0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 351.819656][T11745] FAT-fs (loop3): Directory bread(block 2563) failed [ 351.882735][T11745] FAT-fs (loop3): Directory bread(block 2564) failed [ 351.889766][T11745] FAT-fs (loop3): Directory bread(block 2565) failed [ 351.896653][T11745] FAT-fs (loop3): Directory bread(block 2566) failed [ 351.903585][T11745] FAT-fs (loop3): Directory bread(block 2567) failed [ 351.910389][T11745] FAT-fs (loop3): Directory bread(block 2568) failed [ 351.917709][T11745] FAT-fs (loop3): Directory bread(block 2569) failed [ 351.924560][T11745] FAT-fs (loop3): Directory bread(block 2570) failed 09:18:48 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 351.931282][T11745] FAT-fs (loop3): Directory bread(block 2571) failed [ 351.944190][T11745] FAT-fs (loop3): Directory bread(block 2572) failed 09:18:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x41, 0x0) 09:18:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@sys_immutable='sys_immutable'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_gettime(r1, &(0x7f0000000000)) 09:18:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 352.308493][T11776] FAT-fs (loop3): Directory bread(block 2563) failed [ 352.315558][T11776] FAT-fs (loop3): Directory bread(block 2564) failed [ 352.322401][T11776] FAT-fs (loop3): Directory bread(block 2565) failed [ 352.329795][T11776] FAT-fs (loop3): Directory bread(block 2566) failed [ 352.337374][T11776] FAT-fs (loop3): Directory bread(block 2567) failed [ 352.344618][T11776] FAT-fs (loop3): Directory bread(block 2568) failed [ 352.351675][T11776] FAT-fs (loop3): Directory bread(block 2569) failed 09:18:48 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7311000000009b12c31eae7594f93ca5d747ee7bdb6e4d5a2c08d5193a41fe8a38ed290010"], 0xff86) close(r2) socket$netlink(0x10, 0x3, 0x4) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4008ae52, &(0x7f0000000000)=0x106) [ 352.358873][T11776] FAT-fs (loop3): Directory bread(block 2570) failed [ 352.366431][T11776] FAT-fs (loop3): Directory bread(block 2571) failed [ 352.373595][T11776] FAT-fs (loop3): Directory bread(block 2572) failed 09:18:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x42, 0x0) 09:18:48 executing program 2: getpid() mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@sys_immutable='sys_immutable'}]}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x7, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timerfd_gettime(r1, &(0x7f0000000000)) 09:18:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x43, 0x0) 09:18:48 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f6a2af7e35fbf28ad6469723d2e2f66696c65312c8f707065726c69723d2e2e66696c6530"]) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r1, &(0x7f0000000040)='?', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x104, 0x2000000000011, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) 09:18:48 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{0x31, 0x4}, {0xb9, 0x4}, 0x20, 0x5}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000280)='%security(/GPL.cgroup\x00', &(0x7f00000013c0)="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", 0x1000) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r9, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2000000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x10000000) preadv(r6, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) syz_open_dev$sg(0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) 09:18:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x44, 0x0) 09:18:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 352.842997][T11818] FAT-fs (loop3): Directory bread(block 2563) failed [ 352.849760][T11818] FAT-fs (loop3): Directory bread(block 2564) failed 09:18:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x45, 0x0) [ 352.934855][T11818] FAT-fs (loop3): Directory bread(block 2565) failed [ 352.944208][T11818] FAT-fs (loop3): Directory bread(block 2566) failed [ 352.951093][T11818] FAT-fs (loop3): Directory bread(block 2567) failed [ 352.968865][T11818] FAT-fs (loop3): Directory bread(block 2568) failed 09:18:49 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 353.002293][T11818] FAT-fs (loop3): Directory bread(block 2569) failed [ 353.036506][T11818] FAT-fs (loop3): Directory bread(block 2570) failed [ 353.081983][T11837] overlayfs: unrecognized mount option "pperlir=..file0" or missing value [ 353.101002][T11818] FAT-fs (loop3): Directory bread(block 2571) failed [ 353.121366][ T28] audit: type=1804 audit(1578820729.206:48): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir062784191/syzkaller.PmX8oy/54/bus/file0" dev="sda1" ino=16814 res=1 [ 353.122310][T11818] FAT-fs (loop3): Directory bread(block 2572) failed 09:18:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x46, 0x0) 09:18:49 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000000c0)=""/167) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKMODE={0x0, 0x11, 0x2}]}, 0x40}}, 0x0) 09:18:49 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:49 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x8d81, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000100)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f0000000080)=0x3ff, 0x3) 09:18:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x47, 0x0) 09:18:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, 0xffffffffffffffff, 0x0) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f0000000000)={0x0, 0x6, 0x9}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000180)) gettid() setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) r4 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000240)={0xff9f, 0x9, 0x0, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x9, 0xfffffff7, 0x4, 0x80000}) r5 = syz_open_dev$vcsu(&(0x7f0000000340)='/dev/vcsu#\x00', 0x2, 0x400) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000000)={0xc, 0x0, 0x0, 0x0, r5}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r7) dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) accept$inet(r1, 0x0, &(0x7f00000003c0)) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, 0x0) syz_open_dev$video(0x0, 0x3f, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000e, 0x80011, r3, 0xffffc000) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5caad999, 0x0, 0x0, 0x362) r10 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(0xffffffffffffffff, r11, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x26}, 0x5}}, 0x7, 0x4}, &(0x7f00000001c0)=0x90) 09:18:49 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 353.586282][T11876] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 09:18:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x48, 0x0) 09:18:49 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x40000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2821020}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) ioctl(r0, 0xdcc, &(0x7f00000004c0)="8d7988307c2245ae353855ecad9228a7a0ad46a20629") r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0xd}, 0x8, 0x4, &(0x7f0000000380)="10af0fe368df7ef4270129215835c8fcc801397df30e97d182d43914568a2f5e76e0513d200d36dc3bf4b58cdf3008a123be3471d3", 0x35, 0x0, 0x200, 0x4d, 0xc83, 0xd024, &(0x7f00000003c0)="31b4ff695b2d86d0a1b2075e43139d6e3360edd5983c7c0da1aabd8bf317ebbd0b6a81cfda5b8909c0e1a28749c8fadafbdfb8c7fe1b373ccbcb0a11cab4e1c6cc509c1c00b9af4ba2a8aa1eb23c10408b4dcd425744553e26adff86d3fec5483a299c1b82e6a52f5cc8f3adfab4764ec1bdcc0cd1856560fd3dca13c0ee90f2a96bd068120a44b4f880ed13083d5cc4d4899ebeeec51019e430b2b9012b7f9e250ae93993985e0d2e1eae4b1f6a6faa387e2e204535364b83e35c68b03efcb3eed17042554dbdd59af29fa4488baa7f493623ebb210a1e06af19cdca73818a20204927ba6a112a62edff0393f210a52d5782e175a", [{0x9, 0x2, 0x8}, {0x5, 0x7fff}, {0x7, 0xffffffff, 0x1f}, {0x200, 0xffff, 0x9}, {0x1, 0x3, 0x2}, {0x174a, 0x1ff, 0x8000}, {0x7f, 0x401, 0x100}, {0x6, 0xa7b3, 0x7}, {0x3, 0x4, 0xfffff0eb}, {0x1, 0x0, 0xfffffbff}, {0xc0, 0x7, 0x1f}, {0x9, 0x5, 0x51}, {0x6c, 0x3, 0x1f}, {0xffffffe0, 0xfffffffa, 0xffff}, {0x7a, 0x4, 0x3}, {0x4, 0x20, 0x7}, {0x1, 0x9, 0x3}, {0x0, 0x8, 0x7}, {0x0, 0x2, 0x7fff}, {0x800, 0x3, 0x7}, {0x6, 0x0, 0xfffffff9}, {0x800, 0x4fe, 0x103}, {0xfffffffe, 0x16f, 0x2}, {0xffffffff, 0x8001, 0xff}, {0x7f, 0x0, 0x7}, {0xfffffff8, 0x2, 0x4}, {0x6, 0x6d, 0x8000}, {0x7, 0x0, 0x80000001}, {0x8, 0x3, 0x7fffffff}, {0x40, 0x0, 0x42}, {0xfffff001, 0x800, 0x8000}, {0x3, 0x2, 0x1}, {0x2, 0x2382, 0x80}, {0x7fffffff, 0xc4c, 0x6}, {0x17a3, 0x1ff, 0x707}, {0x5, 0x2, 0x800}, {0x2, 0x7ff, 0x8000}, {0xfffffff8, 0x0, 0x5}, {0xfd20, 0x2, 0x5}, {0x3, 0x7ff, 0x7f}, {0x0, 0x7ff, 0x7}, {0x20000, 0x2, 0x7}, {0x200, 0x7f, 0xff}, {0x0, 0x715f, 0xb08}, {0x7, 0x6, 0x6}, {0x8, 0x5, 0xfffffff9}, {0x6a3, 0xaf, 0x9}, {0x5, 0x5, 0x2}, {0x0, 0x0, 0x5}, {0x5fe8, 0xfffffffe, 0x8}, {0x6, 0x7f, 0x9}, {0x7, 0x5}, {0x3, 0x8, 0x80000000}, {0x1f, 0x6, 0x10000}, {0x81, 0x7}, {0x9, 0x20, 0x8}, {0x1f, 0xffffffff, 0x4}, {0x2, 0x1, 0xfffffffc}, {0x0, 0x10000, 0x20}, {0x9, 0x6, 0x140}, {0xc03, 0x6}, {0x8, 0x10000, 0x8000}, {0x7, 0x7, 0x100}, {0x0, 0x7fff, 0x6f}, {0x7ff, 0x3, 0x80}, {0x7ff, 0x7, 0x5}, {0x7, 0x7fff, 0x18f7}, {0x800, 0x0, 0x7}, {0x7, 0x1e, 0x7}, {0x5, 0x5, 0x9}, {0x3, 0x9, 0xe82}, {0x0, 0x80000001, 0x2fe4}, {0x3, 0x5, 0xe6b1}, {0x2, 0x1, 0x400}, {0x5a, 0x2, 0x233}, {0x318, 0x6, 0x6}, {0x9, 0xa683, 0x832}]}) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r3, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000940)) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000200)={0x1, @default, @netrom={'nr', 0x0}, 0x9, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0xb3a000, 0x1, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) lstat(&(0x7f0000000140)='./file0/file0\x00', 0x0) 09:18:49 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:50 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x49, 0x0) 09:18:50 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:50 executing program 2: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:50 executing program 1: nanosleep(&(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x7f, 0x488, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x80, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}, r0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) fcntl$lock(r1, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, r2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) quotactl(0x0, 0x0, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x9) ioctl$RTC_AIE_ON(r3, 0x7001) [ 354.286143][T11910] overlayfs: overlapping lowerdir path 09:18:50 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x4a, 0x0) 09:18:50 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x8d81, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000100)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f0000000080)=0x3ff, 0x3) 09:18:50 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x101100) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000200)={'ip6gre0\x00', {0x2, 0x4e20, @broadcast}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400283}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000280)={0x4, 0x3, 0x5, 0x49, [], [], [], 0x1f, 0x0, 0x1, 0x4, "9cdc839f8e57ffa60a70412fe69f1f8a"}) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x400) getsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f00000003c0)=0x6, &(0x7f0000000400)=0x4) r8 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) splice(r5, 0x0, r6, 0x0, 0x100000002, 0x0) 09:18:50 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:50 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, 0x0, 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:50 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x4b, 0x0) 09:18:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000030003d67c77f4400000000000000000058000100540001000b000100706f6c6963650000400002803c00010002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400060046ee6aa568356fbd7db5a96a99c2e667581ffb3cf030f57f1109caa676a4d214ac2ae2eb89869840363ef0cd4bcf983709062f4f118b396e4bac70db6cd9c0807d3ac66dd834df17d441"], 0x6c}}, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="2497f8848de324ee5a7f4b3c590c41bf3cfefc64aadd113fec8aaf96fdcccc32a9efea3b738fb93290748618ef6aaf84bc8ea2697f3b8a19d788210cd475b1b5381f162a", 0x44}], 0x1, &(0x7f0000000340)=[{0x80, 0x29, 0xfffffc01, "aa1bb97f53031bb2b2089d01bffdb1e637b10ca16fb4f84f8a3c1547b7611739a4a381492219ca299edf47bd4768a9cd0d0a8ebcc5730bbb08328d20b42fece119a14c14ebd4eb2181be66f4da3f6645f475e525d1d012e72f637939b0425b10256c02f74368c823f04c"}, {0x87, 0x9, 0x6, "656e6e123d2fd284f35afb0dd09c3f17c0ebec57bdad0b92cfb710e42fb4a434e038ff50cd363da7b224351236d7ffac5dde64a6f52c9e0d3c43ed359e5408f3b07cf076cf3da770a2f4246c3490e34ac6b16daf364ee5e54ba56ec734426c1f2bccf10e8234ac8e79f7a6c89471698f1ce3f2144c7aeeddb4411b3cf8ba6e07cf0908e4f1b1a3f8c7322cb02e705b17219b73"}, {0xd0, 0x117, 0x8, "20e3c3b364cd27b6a0157fc0cc2692fbe7f22b67341c15884b796d9619b97c2c7a5fad1f11784c2d9bfdaf1b77797e2d2434425f6feb4a50a3cef4c8b588bd5007efb9a585a822a51221caebcfe304d86cb7b6814a3816ad3af23b6bb54d3046793271d16b3c1ee0a5628c5eecf1829f59fe54facfca6be6601d1af069574ff513286eaa016769c4f7cbd51974e927891d96a938ec6356bd11808d4c391c236e274366606e06590c30ad7981aa5263982a5f88cacfea48d699b8a2"}, {0xa0, 0x11, 0x98, "f4fe0916629624b8e00f7ea99fffb28939aeb50533b958ca7a99c4f9f38816d8ac7712931eb37f54207ff0e34d2c7be9772bf81421863079acb523625baf7388e63c28a77ccc0e75d3b8ecb0f65d54b8632930ceb15154489ed05ca3e09f543340a230ac007d9340ba6aa3d9f2783dabd23ccb134d00077672d1a913324e96f1b5fbbe88731cb8a36f0310"}, {0x1010, 0x117, 0x40, "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"}], 0x12a8}, 0x40020) [ 354.914179][T11963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:18:51 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, 0x0, 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:51 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x4c, 0x0) [ 355.052714][T11979] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! 09:18:51 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 355.155363][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 09:18:51 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r1, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000180)="5e93908613fba3df4b1a115f6639e766d00a2c5f4af04dede7826192aad55f", 0x1f, 0xc000000, 0x0, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000100)) getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000), 0x2) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="2e0000001e000507ed00802a8c63000001006080000000000300f88000f01700d0bd000000000008000000000000", 0x2e}], 0x1}, 0x0) dup3(r2, r2, 0x80000) socket$kcm(0x2, 0x3, 0x2) 09:18:51 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x4d, 0x0) 09:18:51 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, 0x0, 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:51 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x8d81, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000100)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80, 0x0) setsockopt$inet_dccp_int(r3, 0x21, 0x3, &(0x7f0000000080)=0x3ff, 0x3) 09:18:51 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000640)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x4004743d, &(0x7f0000000940)=""/258) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0xbefe71dde3e27411, r0}) epoll_create(0xab7f) dup3(r2, r1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) 09:18:51 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:51 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x4e, 0x0) [ 355.630953][T12004] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.776667][T12023] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. 09:18:51 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x4f, 0x0) 09:18:52 executing program 1: openat$ashmem(0xffffffffffffff9c, 0x0, 0x400000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000640)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) ioctl$BLKFRASET(r0, 0x1264, 0x0) timer_create(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x60, @remote}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000780)}, 0x0) syz_mount_image$xfs(&(0x7f0000000680)='xfs\x00', &(0x7f0000000800)='./file0\x00', 0x5, 0x5, &(0x7f0000000c00)=[{&(0x7f0000000880)="487e78d91c2fb1c93b1bada1c911c80e2d675d391bfbe6cdf9f10f83065a2ff1d0f3e233e6953361cdb9111fe174e2114808426d0b416629fc55ba03444842aa1640581a6706927d7f24d0063fbfef52434e39cd8d8fc0fbbc363114c10da481187f4355a373edc92e65379505e15166094384c58f70c97260173fc22fc3e8dc6850297fdc32821b8de13ba306e3510e68d431ffe99a22926e2278e10f0cda629f170b096ab06a29ae52759dfa0a8fcc9b014aadb3fe38dfa0a4125f3ec56dc5339504baabfafad5dff5797df216f2a4c499ea7071258618d11bd46fe99185d43d52bbb389a872c24c2e8027ddc679", 0xef}, {&(0x7f0000000980)="853013f0caf558a8f1adcd36142200469225b3990113569e279aa68ee2d6030117bf6f3c89fddac3a1e594825063b94ba9e9741c7d9dc6d7ee41b18c3efe5e1572c4bb9daf49b2db7c14a5def580fea06e4977859acf7513159e08bd5c890d1d0890090a24507b1b608d1c44ddb6620025503de90922f7301361fbabcd6f0047", 0x80, 0xffffffffffffffe1}, {&(0x7f0000000a40)="517de589a6c032ab8c22f940fea02866fd4337a3b7a2fafb1204c879a3744f24013001e46f4bbb859d50ae6bd35502c60710c04d717af64851a15fb5970d352dc182e870d42b11ec60a4857ab84ce7a60993b6e357d25462b487bc7f97fdc9e06a1641f8631c57162acabc67a9c8298803e62689072ed168a7002ae878d23989bd3e9d", 0x83}, {&(0x7f0000000d80)="5a4c3b2f019c7138c9fa6bfd9fb8123dc84f0837ad6fc35907bc401c02288f1f2ae3c2cc945c49f7a1dfb657330bbf986afe88cfcc35dca183217b3b28a2025e1d809678ae54ff222c88d77bfa18fd8bf19a39e37090149273c8172fe938ca6692224b7fc6e7642ef0d6e2eeffd6b60706e0d4231ccec1cb2b441cc49a49a84ba8e55083affff4721544ef39b7b8a73b77ab65cb874ee693ab5d5dd3d9d761f9c0bd267be586d53f7767b8aa0039422bb78a4661a9f4f14e56eea29c", 0xbc, 0x3f}, {&(0x7f0000000b80)="43298ef5797ef8b148cd1e414c6d0f7c2722e354dddeb30533a8bd34ea3f2e073e06341e5d91f9fca85e3494e451f8ff2a130f74099eb984780625e403b2cbe1e89341ee62348bd3f89e74d82c10d4126cfbbbf3927aa5a3eead9eb1f31aa33200", 0x61, 0xd9ac}], 0x10000, &(0x7f0000000040)=ANY=[@ANYBLOB="6954e41d9ca4625cea9e2fdf7a631c1bbf61298ff6a8258b4cd24d17e96ac678eb3e31d25fb6720a9ce34ddcc2e20206a238587b173a859915fd79b01d6574e4d3b4bed43da7076a513ad3978a13cabd9d0d95d4f40ec726ccfd574156593f85b26d20196757784c6cac94884eae3ce81f8e9d9929f6190452034f4b7299c75543c2d8748bdeaf4bd510fdbb0556c0d231a62cd367d2d57e7c0862827c6aa5fae86baf9c3904b45a6a8feb61a206cf7aaba135977d54"]) 09:18:52 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:52 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:52 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x101, 0x100000000}, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x200000000}, 0x0, 0x0, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="92c828736fc83ee4b2d76c1b84630f6a24b17100ff888e5adeaf38c4f1aba7e30eb5e37b74a4a5a86159e515c4774b01c76228f61ba1da6b80813e8c60447aed28892823b47988e5652a932368ec28f1bd5e46d0f7519889b0f5c950ab99154a79e30dfef8c3b16b094e4389f66b74cff7e14d8e19eb085c9a204801d29d7bf66c0a443ba47e268459c20829dadfb127837f32db84d35ee06e5678ac1a7d2f8d40a876c7d5667559b52d4a0f38f9ef8824f464efa089a1395e34503646edbaae83e2cbba991220f336eb698293d2"], &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={r3, 0x8}, &(0x7f0000000080)=0x8) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0xffb6) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f1eaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf9091a7511bf746bec66ba", 0xfe6a, 0x2, 0x0, 0x27) 09:18:52 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x50, 0x0) 09:18:52 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:52 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x51, 0x0) 09:18:52 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff}) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="020000000100eb8000000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x1) syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10, 0x80000) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r1, r2, 0x0, 0x102000004) [ 356.308465][T12058] xfs: Unknown parameter 'iTb\/zca)%LMjx>1_r [ 356.308465][T12058] M8X{:yetӴ' 09:18:52 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)={0x1, 0x2, 0x4, 0x10, 0x3, {r2, r3/1000+30000}, {0x0, 0xc, 0x2, 0x4, 0x9, 0x6, "133c8bda"}, 0x7, 0x3, @offset=0xffffffff, 0xfff, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000130}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x3, 0x6, 0x0, 0x70bd27, 0x25dfdbfe, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40480c4}, 0x8000000) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x2) r7 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r7, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x8080fffffffe) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$caif_stream(0x25, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) close(r10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8001, 0x0, 0x401, 0xffffffff}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r9, 0x84, 0x70, &(0x7f0000000300)={r11, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x6, 0x2, 0x7, 0x100000000, 0x8, 0xffff, 0x3, 0x6, 0xda, 0x0, 0x80000001, 0x9, 0x1, 0xfed, 0x3]}, &(0x7f00000000c0)=0x100) 09:18:52 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:52 executing program 1: r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x1a02, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8476071") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[@ANYPTR], 0x8) fcntl$setstatus(r0, 0x4, 0x4000) unlink(&(0x7f0000000000)='./bus\x00') io_setup(0x2, &(0x7f0000000100)=0x0) io_submit(r7, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 09:18:52 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x52, 0x0) 09:18:52 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000014c0)='minix\x00', &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:52 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x53, 0x0) 09:18:52 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:52 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 356.951121][T12108] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! 09:18:53 executing program 3: sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="e723f2af289b2b0e7c55bfb2a7c30093b5a6e2b68e7dd9616c7d281ef0009426c7c9fa54b9ac3f997e37cf782fd3ec9a6251aaec29b29b7c2533a83b1e48d6ea70e9"], 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x8000000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PPPIOCDISCONN(r3, 0x7439) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', @ifru_flags}) 09:18:53 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x54, 0x0) [ 357.042316][T12108] File: /root/syzkaller-testdir704976952/syzkaller.Kw2wME/46/bus (deleted) PID: 12108 Comm: syz-executor.1 09:18:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000140)={0x0, r1}) r2 = socket(0x2, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000000c0)={0xce6f, 0x1c, [{0x9, 0x1}, {0x6, 0x1}, {0x3}, {0x7}, {0x4}, {0xe}, {0xd, 0x1}, {0x3, 0x1}, {0x2}, {0x7, 0x1}, {0xe}, {0x4, 0x1}, {0xd}, {0x6, 0x1}, {0xe}, {0x2, 0x1}, {0x6}, {0x7, 0x1}, {0xc}, {0x7, 0x1}, {0x1, 0x1}, {0x32, 0x1}, {0x9}, {0xc, 0x1}, {0x4, 0x1}, {0xc, 0x1}, {0xd, 0x1}, {0x6, 0x1}]}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r8}]]}}}]}, 0x38}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r8}, @IFLA_BOND_MODE={0x8, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 09:18:53 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x55, 0x0) 09:18:53 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:18:53 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, 0x0, 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 357.513539][T12153] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 357.659628][T12172] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 09:18:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000205010a0200027400f8", 0x16}], 0x0, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4}, &(0x7f00000000c0)=0x1c) getsockopt$inet6_tcp_int(r2, 0x6, 0x3c, &(0x7f0000000100), &(0x7f0000000140)=0x4) 09:18:53 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x56, 0x0) 09:18:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000006ffc), 0x26d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) move_pages(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) socket$inet(0x2, 0x6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @multicast1}], 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0xff37) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x101d0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x5452, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="d15c8a93ff7819759586028b9934df0250427bb1681e044f0180959f1c4ff5", @ANYRES32, @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) 09:18:53 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:18:53 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, 0x0, 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:53 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{0x0, 0x1f}, {0x6, 0x3}, 0x80000000, 0x1, 0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f086dd1fffffe100002b00633277fbac141412e0000001c699da073f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) 09:18:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x57, 0x0) 09:18:54 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, 0x0, 0x8, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) [ 358.214780][T12202] FAT-fs (loop1): bogus sectors per cluster 5 09:18:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830bdcb0c099840b}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 358.272513][T12202] FAT-fs (loop1): Can't find a valid FAT filesystem 09:18:54 executing program 0 (fault-call:2 fault-nth:0): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x58, 0x0) 09:18:54 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x5, &(0x7f0000027000)={0x0, 0x0, 0x100000001, 0x5}) fchdir(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000017c0)='statm\x00') readlinkat(r1, &(0x7f00000000c0)='./file0/bus\x00', &(0x7f0000000200)=""/106, 0x6a) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000003) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="10004000006e2200"], 0x8) connect(r4, &(0x7f00007a8000)=@generic={0x2, "95cfb8c57ebde371503a38bd8e3f6ba9901899ff170a070502000000269a0b966b9b9d32893ce7c312649ce2996cd4d2fb7a95ff986185874a2d57029a01f46a000073c5477efe9e01548612afd6b167be500d748038f499a492ef8fe4e6265300"}, 0xfffffffffffffeb1) dup3(r4, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140), 0x7fff) 09:18:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830bdcb0c099840b}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:54 executing program 4: perf_event_open(&(0x7f0000000400)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002e000503d25a80648c63940d0124fc60100002400a600200053582c137153e370400018003001700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000140)={0x7fffffff, 0x7, 0x401}) [ 358.583086][T12236] FAULT_INJECTION: forcing a failure. [ 358.583086][T12236] name failslab, interval 1, probability 0, space 0, times 0 [ 358.622583][T12236] CPU: 1 PID: 12236 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 358.632518][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.642583][T12236] Call Trace: [ 358.645900][T12236] dump_stack+0x197/0x210 [ 358.650259][T12236] should_fail.cold+0xa/0x10 [ 358.654901][T12236] ? setup_fault_attr+0x220/0x220 [ 358.659948][T12236] ? ___might_sleep+0x163/0x2c0 [ 358.664822][T12236] __should_failslab+0x121/0x190 [ 358.669779][T12236] should_failslab+0x9/0x14 [ 358.674301][T12236] __kmalloc+0x2e0/0x770 09:18:54 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830bdcb0c099840b}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 358.678560][T12236] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.684817][T12236] ? fput_many+0x12c/0x1a0 [ 358.689254][T12236] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 358.695576][T12236] ? strnlen_user+0x1ed/0x2e0 [ 358.700271][T12236] ? __x64_sys_memfd_create+0x13c/0x470 [ 358.705836][T12236] __x64_sys_memfd_create+0x13c/0x470 [ 358.711231][T12236] ? memfd_fcntl+0x18a0/0x18a0 [ 358.716012][T12236] ? do_syscall_64+0x26/0x790 [ 358.720707][T12236] ? lockdep_hardirqs_on+0x421/0x5e0 [ 358.726079][T12236] ? trace_hardirqs_on+0x67/0x240 [ 358.731124][T12236] do_syscall_64+0xfa/0x790 [ 358.735646][T12236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.741547][T12236] RIP: 0033:0x45af49 [ 358.745451][T12236] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.765196][T12236] RSP: 002b:00007f6a415eca68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 358.773725][T12236] RAX: ffffffffffffffda RBX: 00007f6a415ecc90 RCX: 000000000045af49 09:18:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x59, 0x0) [ 358.781713][T12236] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 358.789724][T12236] RBP: 000000000075bfc8 R08: 0000000000000060 R09: 0000000000000001 [ 358.797842][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a415ed6d4 [ 358.805830][T12236] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:18:54 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x1, &(0x7f0000001640)=[{&(0x7f0000001540)="1c60154ecd32d1ec3b5f754ffdc146a8b8bf4f535c1f936e8bb988e846a2ccef1f89454a5834b06784de44feee19bc413cde28255808ada998ec99672ea4aaaecb631493b11362f3b1833934f2a1e36cd2c32bd4446a027598d8f2dad5f7dda13af2d94da5d0663a0aebff3995c75c7e3fe4a85d8746eb0f5620b1972ec238af1cc224b592dc02f430cb3ba14f2688c29c563932766d09cbd6c5c030f1335ff95ea790252d237fa47b0f6cc14889e3ec5b2cd70afd5271917c91db", 0xbb, 0xffffffffffffff81}], 0x60, 0x0) 09:18:55 executing program 0 (fault-call:2 fault-nth:1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:55 executing program 1: r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f00000000c0)={0x3, 0x5, 0x4, 0x40, 0x1, {0x77359400}, {0x2, 0x0, 0x5, 0x3, 0x2, 0x7, "2a1df2db"}, 0x0, 0x1, @userptr=0x7f000000000000, 0x262f8f0f, 0x0, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000280)={0x0, 0x80000, 0xffffffffffffffff}) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvme-fabrics\x00', 0x100, 0x0) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/mISDNtimer\x00', 0x80, 0x0) sendmsg$unix(r3, &(0x7f0000002940)={&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002840)=[{&(0x7f00000001c0)="6eca3d3acff512b68320f1e5f58ea72c4922ebfa1ef968abba071f80d6a6b9dd0e6ba8c7a3d2b21285a5226dab38365d7e72103a05068546a5d788a7dd175e4f104cf68a2c", 0x45}, {&(0x7f0000000400)="9d988c145bd70a553a842d2c428316545da1f7daa34a3604caa0350d4127ebd368d15ec394375a626775c9779d5cfdf6a5bb71c84209f1168ef46de981d59af769e7a3250c04d6b1464efb8c3d630be64d5b", 0x52}, {&(0x7f0000000540)="8cc75e88af5a471c5ff62ad32a4c635961ecebe62602b6dea08843c220bf9b207916703012fb0ad1c157838ab54da2b1bbb490b6eafa50b01d2c9a6dd2e1a7f8c64f4479bd88a2", 0x47}, {&(0x7f00000005c0)="81626d185499184f872fe9bb93224abeee268b769b8d5fa2b7dec469bd380f87b74dbc9e39fc44f8cfbfaf9b5ecd67665b42e71c6e3ac605807030b87d3fb15bdcfab9b1b112f683e0777242c488ff4e1d78aff51eb286c8c152a17d4d9a6a4ad55775bbe5f68cd0517d41d4850df6c4f01bde48de202e8c885295bc4f733342ba2e471d0a882614ffe7f76f5d302fa5c875051b3128d120a6e4caf7f7f9f3f6f3362bae13ddff9a7659319c80e0fd6d75", 0xb1}, {&(0x7f0000000680)="0e507cd26b67d6b41018563bbc219eb94b5b1c6e2f9cc592aa605988e2134f33e2639c6687dcb5988aa6ea2c8229b51ac46349b82ab57f7749b7d48f3dfe8c777c8c22a01b26f86c5b58684ab7b3d334e7e4af19c829336e92be2a76b1612f828af8d585ba433b4d4ae21254e1286689f374d43169e6f98d559c1024ff4c568e023c1238052695554866f305b7e47b728f9858b8e13999dc8518d334ddecf60aaee60229314d76e3a7febf035a7ee7f4e8c38df410711afe1a1e002147fcee4e47a61ed13e1cba7ca37b1fac47100cc33d6dc75ad6", 0xd5}, {&(0x7f0000000780)="da49dbdffdc14dc8f4b14104226b8fbe1330e2422a6e9873c66a5f2f9f18f504fdfe7f399ccabfd38b2b3c4eaac350bcc934d24f0b0ec67131e55bd10cf09502f7942fab995e18795d96922038cfd1d2d3d14b2df1b47213c719befecefca52d36e6a4e1d13e9a7e5ccd545f461f2369f81e51cbf924a1b2838063d3e6692184aabf634f9813628b7b74ab0da17884", 0x8f}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0x1000}], 0x8, &(0x7f0000002900)=[@rights={{0x18, 0x1, 0x1, [r6, r7]}}, @rights={{0x14, 0x1, 0x1, [r8]}}], 0x30, 0x40008c8}, 0xc020) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x28200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x2de, 0x0, 0x0, 0xffffffffffffff5e) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 09:18:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830bdcb0c099840b}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 359.069613][T12263] Unknown ioctl 1074835060 09:18:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5a, 0x0) 09:18:55 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001000)=[{&(0x7f0000000000)="12083526761cab24c98d8f49eea77241bdbd335e4319dfbfbc06eca780dd4f1c07", 0x21}], 0x1, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/216) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@sha1={0x1, "6d03b39968580993aacab0338073c47133bcc196"}, 0x15, 0x1) inotify_init() ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) 09:18:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830bdcb0c099840b}, 0x1) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 359.203533][T12271] FAULT_INJECTION: forcing a failure. [ 359.203533][T12271] name failslab, interval 1, probability 0, space 0, times 0 09:18:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5b, 0x0) [ 359.318255][T12271] CPU: 0 PID: 12271 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 359.328282][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.338366][T12271] Call Trace: [ 359.341677][T12271] dump_stack+0x197/0x210 [ 359.346052][T12271] should_fail.cold+0xa/0x10 [ 359.350665][T12271] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.356758][T12271] ? setup_fault_attr+0x220/0x220 [ 359.361817][T12271] ? ___might_sleep+0x163/0x2c0 [ 359.366689][T12271] __should_failslab+0x121/0x190 [ 359.371644][T12271] ? shmem_destroy_inode+0x80/0x80 [ 359.376788][T12271] should_failslab+0x9/0x14 [ 359.381308][T12271] kmem_cache_alloc+0x2aa/0x710 [ 359.386170][T12271] ? __alloc_fd+0x487/0x620 [ 359.390704][T12271] ? shmem_destroy_inode+0x80/0x80 [ 359.395833][T12271] shmem_alloc_inode+0x1c/0x50 [ 359.400632][T12271] alloc_inode+0x68/0x1e0 [ 359.404992][T12271] new_inode_pseudo+0x19/0xf0 [ 359.412216][T12271] new_inode+0x1f/0x40 09:18:55 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830bdcb0c099840b}, 0x1) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 359.416306][T12271] shmem_get_inode+0x84/0x7e0 [ 359.421006][T12271] __shmem_file_setup.part.0+0x7e/0x2b0 [ 359.426570][T12271] shmem_file_setup+0x66/0x90 [ 359.431287][T12271] __x64_sys_memfd_create+0x2a2/0x470 [ 359.436675][T12271] ? memfd_fcntl+0x18a0/0x18a0 [ 359.441442][T12271] ? do_syscall_64+0x26/0x790 [ 359.446141][T12271] ? lockdep_hardirqs_on+0x421/0x5e0 [ 359.451436][T12271] ? trace_hardirqs_on+0x67/0x240 [ 359.456475][T12271] do_syscall_64+0xfa/0x790 [ 359.461083][T12271] entry_SYSCALL_64_after_hwframe+0x49/0xbe 09:18:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x240a}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x1, 0x6, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x830bdcb0c099840b}, 0x1) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 359.467048][T12271] RIP: 0033:0x45af49 [ 359.470956][T12271] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.490673][T12271] RSP: 002b:00007f6a4160da68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 359.499103][T12271] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 000000000045af49 [ 359.507093][T12271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 359.515078][T12271] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 359.523055][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a4160e6d4 [ 359.531035][T12271] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:18:55 executing program 0 (fault-call:2 fault-nth:2): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:55 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5c, 0x0) [ 359.912370][T12320] FAULT_INJECTION: forcing a failure. [ 359.912370][T12320] name failslab, interval 1, probability 0, space 0, times 0 [ 359.954418][T12320] CPU: 0 PID: 12320 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 359.964353][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.974431][T12320] Call Trace: [ 359.975180][T12285] kvm: pic: non byte read [ 359.977734][T12320] dump_stack+0x197/0x210 [ 359.977804][T12320] should_fail.cold+0xa/0x10 [ 359.991238][T12320] ? setup_fault_attr+0x220/0x220 [ 359.996286][T12320] ? ___might_sleep+0x163/0x2c0 [ 360.001153][T12320] __should_failslab+0x121/0x190 [ 360.006133][T12320] should_failslab+0x9/0x14 [ 360.010637][T12320] kmem_cache_alloc+0x2aa/0x710 [ 360.015488][T12320] ? current_time+0x6b/0x110 [ 360.020139][T12320] ? ktime_get_coarse_real_ts64+0xeb/0x2a0 [ 360.025958][T12320] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 360.032210][T12320] ? timestamp_truncate+0x20f/0x2f0 [ 360.037481][T12320] __d_alloc+0x2e/0x8c0 [ 360.041655][T12320] d_alloc_pseudo+0x1e/0x70 [ 360.046476][T12320] alloc_file_pseudo+0xe2/0x280 [ 360.051361][T12320] ? alloc_file+0x4d0/0x4d0 [ 360.055878][T12320] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 360.065697][T12320] ? __kasan_check_write+0x14/0x20 [ 360.070836][T12320] __shmem_file_setup.part.0+0x108/0x2b0 [ 360.076499][T12320] shmem_file_setup+0x66/0x90 [ 360.081198][T12320] __x64_sys_memfd_create+0x2a2/0x470 [ 360.086587][T12320] ? memfd_fcntl+0x18a0/0x18a0 [ 360.091355][T12320] ? do_syscall_64+0x26/0x790 [ 360.096038][T12320] ? lockdep_hardirqs_on+0x421/0x5e0 [ 360.101337][T12320] ? trace_hardirqs_on+0x67/0x240 [ 360.106367][T12320] do_syscall_64+0xfa/0x790 [ 360.110870][T12320] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.116759][T12320] RIP: 0033:0x45af49 [ 360.120653][T12320] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.141041][T12320] RSP: 002b:00007f6a4160da68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 360.149452][T12320] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 000000000045af49 [ 360.157410][T12320] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 360.165366][T12320] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 360.173328][T12320] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a4160e6d4 [ 360.181284][T12320] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:18:56 executing program 1: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fsetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000300)='/dev/radio#\x00', 0xc, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000001c0)=0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000500)={0x0, 0xe, 0x2009, "5fbba7a1cacf27d4f2ef00ef166813fb27064f46ec9464ef52b4dd48e2c2db5eedfb31312ca577bdfb67765c951cdc3900", 0x1c, "c03822d79ac18cd5a01e007556c1f74b29bc27cfd107180800000000000000ee349065c45d3a283e2846d239e56aa6f8cf4552a67703437b26b87cfa", 0xaec7c72228e19454}) accept4$rose(r2, &(0x7f00000000c0)=@short={0xb, @remote, @bcast, 0x1, @bcast}, &(0x7f0000000340)=0x1c, 0x80000) recvfrom$netrom(r2, &(0x7f0000001a00)=""/4096, 0x1000, 0x0, &(0x7f0000000480)={{0x3, @default, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) ftruncate(r3, 0x600004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040), 0x0) ftruncate(r4, 0x3ff) r5 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x200, 0x0, 0x0, 0x1, 0x42a, 0xfffffff7, 0x6, 0x4, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000380)={r6, @in={{0x2, 0x4e23, @multicast1}}}, 0x84) 09:18:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:56 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:18:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5d, 0x0) 09:18:56 executing program 0 (fault-call:2 fault-nth:3): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5e, 0x0) [ 360.504389][T12343] FAULT_INJECTION: forcing a failure. [ 360.504389][T12343] name failslab, interval 1, probability 0, space 0, times 0 09:18:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:56 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 360.619013][T12343] CPU: 0 PID: 12343 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 360.628955][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.639023][T12343] Call Trace: [ 360.642342][T12343] dump_stack+0x197/0x210 [ 360.646700][T12343] should_fail.cold+0xa/0x10 [ 360.651321][T12343] ? setup_fault_attr+0x220/0x220 [ 360.656368][T12343] ? ___might_sleep+0x163/0x2c0 [ 360.661334][T12343] __should_failslab+0x121/0x190 [ 360.666294][T12343] should_failslab+0x9/0x14 [ 360.670814][T12343] kmem_cache_alloc+0x2aa/0x710 [ 360.675690][T12343] ? rwlock_bug.part.0+0x90/0x90 [ 360.680647][T12343] ? lock_downgrade+0x920/0x920 [ 360.685522][T12343] __alloc_file+0x27/0x340 [ 360.689961][T12343] alloc_empty_file+0x72/0x170 [ 360.694754][T12343] alloc_file+0x5e/0x4d0 [ 360.699015][T12343] alloc_file_pseudo+0x189/0x280 [ 360.703974][T12343] ? alloc_file+0x4d0/0x4d0 [ 360.708496][T12343] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 09:18:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x5f, 0x0) [ 360.714756][T12343] ? __kasan_check_write+0x14/0x20 [ 360.719886][T12343] __shmem_file_setup.part.0+0x108/0x2b0 [ 360.725544][T12343] shmem_file_setup+0x66/0x90 [ 360.730239][T12343] __x64_sys_memfd_create+0x2a2/0x470 [ 360.735626][T12343] ? memfd_fcntl+0x18a0/0x18a0 [ 360.740406][T12343] ? do_syscall_64+0x26/0x790 [ 360.745099][T12343] ? lockdep_hardirqs_on+0x421/0x5e0 [ 360.750405][T12343] ? trace_hardirqs_on+0x67/0x240 [ 360.755453][T12343] do_syscall_64+0xfa/0x790 [ 360.759979][T12343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.765885][T12343] RIP: 0033:0x45af49 [ 360.770492][T12343] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.790521][T12343] RSP: 002b:00007f6a4160da68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 360.799060][T12343] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 000000000045af49 [ 360.807050][T12343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 09:18:56 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 360.815039][T12343] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 360.823033][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a4160e6d4 [ 360.831021][T12343] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:18:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 360.936556][ T28] audit: type=1800 audit(1578820737.026:49): pid=12373 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16853 res=0 09:18:57 executing program 0 (fault-call:2 fault-nth:4): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:57 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x60, 0x0) 09:18:57 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) writev(r0, &(0x7f0000000500)=[{&(0x7f00000001c0)="bb", 0x1}], 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="2d13368a655ad4c3feaf02cde4b694d9becbad4e471fbf2ebb5e42e473bc94ae144c6ac91a7386a2863742b8d055b5d4f246807574fb6079e919ec7b73329fbb952f27a3e7352d05fdf28a0837fda7dd3bfd2015cb08fe03b47359d4fa7d47213fb94526273b2c3228f46d5022931f4e425b344912ab1b261802fbd1277028214f853c", 0x83}, {&(0x7f0000001040)="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", 0xf5c}], 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000200)={0x7, 0x8, 0x4, 0x70000, 0x80000001, {r4, r5/1000+10000}, {0x0, 0x2, 0x48, 0x6, 0x7, 0x1, "feee1bec"}, 0x82, 0x4, @fd=r7, 0x0, 0x0, r1}) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r10}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000003c0)={0x9, 0x108, 0xfa00, {r10, 0x6, "a75701", "6c9ebb5c9a5b9c423f2bcb05893e57535fda89b0ab4716f3a95c3373372601ead730dacd515b6341def12c6d1f34954bb5ecf5896bf59da9773025ad5dd83221f8d77bf2abca4deaa51190e4c5263571604454f49e6a5527e8eb62d4d5248338974ed4cbb78be31141bb62d4a72a9de0911abe5f9ec2e3dc80cab6926ced4a0c4f70ea0d8a4992547e251b9583b75a579b8100656bbccf1ead5e938344642a0d2a88d43b388141b6d4b1e8d0b0c619366b96c2347e3ee15e17e82c57b964ac1985a07553fb20e4061c90e798a4547113fc3c4ea37e7a9e95776c5f051e46442782e06f7d35fb1ab57a807f7113734ffeae433ea120875eb2a196c2564a2cc8a7"}}, 0x110) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r12, 0x127e, &(0x7f0000000280)) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 09:18:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:57 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:18:57 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x61, 0x0) [ 361.254255][T12398] FAULT_INJECTION: forcing a failure. [ 361.254255][T12398] name failslab, interval 1, probability 0, space 0, times 0 [ 361.357357][T12398] CPU: 1 PID: 12398 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 361.368703][T12398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.378793][T12398] Call Trace: [ 361.382104][T12398] dump_stack+0x197/0x210 [ 361.386457][T12398] should_fail.cold+0xa/0x10 [ 361.391068][T12398] ? memcg_kmem_put_cache+0xad/0x1a0 [ 361.396373][T12398] ? setup_fault_attr+0x220/0x220 [ 361.401426][T12398] ? ___might_sleep+0x163/0x2c0 [ 361.406300][T12398] __should_failslab+0x121/0x190 [ 361.411264][T12398] should_failslab+0x9/0x14 [ 361.415782][T12398] kmem_cache_alloc+0x2aa/0x710 [ 361.420649][T12398] ? kmem_cache_alloc+0x364/0x710 [ 361.425767][T12398] security_file_alloc+0x39/0x170 [ 361.430926][T12398] __alloc_file+0xde/0x340 [ 361.435363][T12398] alloc_empty_file+0x72/0x170 [ 361.440151][T12398] alloc_file+0x5e/0x4d0 [ 361.444422][T12398] alloc_file_pseudo+0x189/0x280 [ 361.449380][T12398] ? alloc_file+0x4d0/0x4d0 [ 361.453902][T12398] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 361.460160][T12398] ? __kasan_check_write+0x14/0x20 [ 361.465290][T12398] __shmem_file_setup.part.0+0x108/0x2b0 [ 361.470948][T12398] shmem_file_setup+0x66/0x90 [ 361.475654][T12398] __x64_sys_memfd_create+0x2a2/0x470 [ 361.481047][T12398] ? memfd_fcntl+0x18a0/0x18a0 [ 361.485830][T12398] ? do_syscall_64+0x26/0x790 [ 361.490519][T12398] ? lockdep_hardirqs_on+0x421/0x5e0 [ 361.495818][T12398] ? trace_hardirqs_on+0x67/0x240 [ 361.500863][T12398] do_syscall_64+0xfa/0x790 [ 361.505384][T12398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.511283][T12398] RIP: 0033:0x45af49 [ 361.515186][T12398] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.534820][T12398] RSP: 002b:00007f6a4160da68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 361.543248][T12398] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 000000000045af49 09:18:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:57 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x62, 0x0) 09:18:57 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:57 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x63, 0x0) [ 361.551236][T12398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 361.559218][T12398] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 361.567207][T12398] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a4160e6d4 [ 361.575192][T12398] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:18:57 executing program 2 (fault-call:2 fault-nth:0): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) [ 361.954880][T12453] FAULT_INJECTION: forcing a failure. [ 361.954880][T12453] name failslab, interval 1, probability 0, space 0, times 0 [ 362.014448][T12453] CPU: 1 PID: 12453 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 362.024564][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.034754][T12453] Call Trace: [ 362.038061][T12453] dump_stack+0x197/0x210 [ 362.042410][T12453] should_fail.cold+0xa/0x10 [ 362.047019][T12453] ? setup_fault_attr+0x220/0x220 [ 362.052065][T12453] ? ___might_sleep+0x163/0x2c0 [ 362.056936][T12453] __should_failslab+0x121/0x190 09:18:58 executing program 0 (fault-call:2 fault-nth:5): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x64, 0x0) 09:18:58 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004000000"], 0x3c}}, 0x0) 09:18:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x65, 0x0) [ 362.061891][T12453] should_failslab+0x9/0x14 [ 362.066439][T12453] __kmalloc+0x2e0/0x770 [ 362.070702][T12453] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.076958][T12453] ? fput_many+0x12c/0x1a0 [ 362.081388][T12453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 362.087771][T12453] ? strnlen_user+0x1ed/0x2e0 [ 362.092461][T12453] ? __x64_sys_memfd_create+0x13c/0x470 [ 362.098029][T12453] __x64_sys_memfd_create+0x13c/0x470 [ 362.103413][T12453] ? memfd_fcntl+0x18a0/0x18a0 [ 362.108215][T12453] ? do_syscall_64+0x26/0x790 [ 362.112912][T12453] ? lockdep_hardirqs_on+0x421/0x5e0 [ 362.118247][T12453] ? trace_hardirqs_on+0x67/0x240 [ 362.123294][T12453] do_syscall_64+0xfa/0x790 [ 362.127822][T12453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.133739][T12453] RIP: 0033:0x45af49 [ 362.137649][T12453] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:18:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x66, 0x0) 09:18:58 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 362.158653][T12453] RSP: 002b:00007f18444e3a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 362.167213][T12453] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 000000000045af49 [ 362.175200][T12453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 362.183183][T12453] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 362.191170][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18444e46d4 [ 362.199165][T12453] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:18:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 362.238748][T12473] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:18:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x67, 0x0) 09:18:58 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 362.556728][T12502] FAULT_INJECTION: forcing a failure. [ 362.556728][T12502] name failslab, interval 1, probability 0, space 0, times 0 [ 362.618354][T12502] CPU: 0 PID: 12502 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 362.628294][T12502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.638358][T12502] Call Trace: [ 362.641660][T12502] dump_stack+0x197/0x210 [ 362.646002][T12502] should_fail.cold+0xa/0x10 [ 362.650602][T12502] ? setup_fault_attr+0x220/0x220 [ 362.655636][T12502] ? ___might_sleep+0x163/0x2c0 [ 362.660513][T12502] __should_failslab+0x121/0x190 [ 362.665467][T12502] should_failslab+0x9/0x14 [ 362.669972][T12502] __kmalloc+0x2e0/0x770 [ 362.674222][T12502] ? mark_held_locks+0xf0/0xf0 [ 362.679051][T12502] ? stack_trace_save+0xac/0xe0 [ 362.683987][T12502] ? tomoyo_realpath_from_path+0xc5/0x660 [ 362.689719][T12502] tomoyo_realpath_from_path+0xc5/0x660 [ 362.695273][T12502] ? tomoyo_path_perm+0x1cb/0x430 [ 362.700312][T12502] tomoyo_path_perm+0x230/0x430 [ 362.705168][T12502] ? tomoyo_path_perm+0x1cb/0x430 [ 362.710207][T12502] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 362.716435][T12502] ? rcu_read_lock_held+0x9c/0xb0 [ 362.721490][T12502] ? rcu_read_lock_any_held+0xcd/0xf0 [ 362.726867][T12502] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 362.732178][T12502] tomoyo_path_truncate+0x1d/0x30 [ 362.737212][T12502] security_path_truncate+0xf2/0x150 [ 362.742515][T12502] do_sys_ftruncate+0x3d9/0x550 [ 362.747377][T12502] __x64_sys_ftruncate+0x59/0x80 [ 362.752324][T12502] do_syscall_64+0xfa/0x790 [ 362.756837][T12502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.762738][T12502] RIP: 0033:0x45af17 [ 362.766646][T12502] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.786379][T12502] RSP: 002b:00007f6a4160da68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 362.794804][T12502] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 000000000045af17 [ 362.802790][T12502] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 362.810978][T12502] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 09:18:58 executing program 2 (fault-call:2 fault-nth:1): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) [ 362.819068][T12502] R10: 0000000000000000 R11: 0000000000000217 R12: 00007f6a4160e6d4 [ 362.827048][T12502] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 362.980803][T12510] FAULT_INJECTION: forcing a failure. [ 362.980803][T12510] name failslab, interval 1, probability 0, space 0, times 0 [ 362.993965][T12510] CPU: 0 PID: 12510 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 363.003868][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.013934][T12510] Call Trace: [ 363.017255][T12510] dump_stack+0x197/0x210 [ 363.021600][T12510] should_fail.cold+0xa/0x10 [ 363.026193][T12510] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.032280][T12510] ? setup_fault_attr+0x220/0x220 [ 363.037320][T12510] ? ___might_sleep+0x163/0x2c0 [ 363.042197][T12510] __should_failslab+0x121/0x190 [ 363.047140][T12510] ? shmem_destroy_inode+0x80/0x80 [ 363.052260][T12510] should_failslab+0x9/0x14 [ 363.056776][T12510] kmem_cache_alloc+0x2aa/0x710 [ 363.061634][T12510] ? __alloc_fd+0x487/0x620 [ 363.066333][T12510] ? shmem_destroy_inode+0x80/0x80 [ 363.071462][T12510] shmem_alloc_inode+0x1c/0x50 [ 363.076243][T12510] alloc_inode+0x68/0x1e0 [ 363.080722][T12510] new_inode_pseudo+0x19/0xf0 [ 363.085413][T12510] new_inode+0x1f/0x40 [ 363.089496][T12510] shmem_get_inode+0x84/0x7e0 [ 363.094189][T12510] __shmem_file_setup.part.0+0x7e/0x2b0 [ 363.099750][T12510] shmem_file_setup+0x66/0x90 [ 363.104444][T12510] __x64_sys_memfd_create+0x2a2/0x470 [ 363.109832][T12510] ? memfd_fcntl+0x18a0/0x18a0 [ 363.114606][T12510] ? do_syscall_64+0x26/0x790 [ 363.119323][T12510] ? lockdep_hardirqs_on+0x421/0x5e0 [ 363.124627][T12510] ? trace_hardirqs_on+0x67/0x240 [ 363.129669][T12510] do_syscall_64+0xfa/0x790 [ 363.134207][T12510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.140101][T12510] RIP: 0033:0x45af49 [ 363.144005][T12510] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.150162][T12502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.163756][T12510] RSP: 002b:00007f18444e3a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 363.163771][T12510] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 000000000045af49 [ 363.163779][T12510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 363.163786][T12510] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 363.163793][T12510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18444e46d4 [ 363.163800][T12510] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 363.266437][T12473] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:18:59 executing program 0 (fault-call:2 fault-nth:6): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:59 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x68, 0x0) [ 363.306493][T12473] bond2 (uninitialized): Released all slaves [ 363.422674][T12526] FAULT_INJECTION: forcing a failure. [ 363.422674][T12526] name failslab, interval 1, probability 0, space 0, times 0 [ 363.452161][T12526] CPU: 1 PID: 12526 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 363.462130][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.472806][T12526] Call Trace: [ 363.476110][T12526] dump_stack+0x197/0x210 [ 363.480474][T12526] should_fail.cold+0xa/0x10 [ 363.485085][T12526] ? setup_fault_attr+0x220/0x220 [ 363.490127][T12526] ? ___might_sleep+0x163/0x2c0 [ 363.495003][T12526] __should_failslab+0x121/0x190 [ 363.499958][T12526] should_failslab+0x9/0x14 [ 363.504478][T12526] __kmalloc+0x2e0/0x770 [ 363.508734][T12526] ? mark_held_locks+0xf0/0xf0 [ 363.513512][T12526] ? stack_trace_save+0xac/0xe0 [ 363.518395][T12526] ? tomoyo_realpath_from_path+0xc5/0x660 [ 363.524116][T12526] tomoyo_realpath_from_path+0xc5/0x660 [ 363.529684][T12526] ? tomoyo_path_perm+0x1cb/0x430 [ 363.534692][T12526] tomoyo_path_perm+0x230/0x430 [ 363.539555][T12526] ? tomoyo_path_perm+0x1cb/0x430 [ 363.544566][T12526] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 363.550622][T12526] ? rcu_read_lock_held+0x9c/0xb0 [ 363.555746][T12526] ? rcu_read_lock_any_held+0xcd/0xf0 [ 363.561155][T12526] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 363.566435][T12526] tomoyo_path_truncate+0x1d/0x30 [ 363.571446][T12526] security_path_truncate+0xf2/0x150 [ 363.576722][T12526] do_sys_ftruncate+0x3d9/0x550 [ 363.581625][T12526] __x64_sys_ftruncate+0x59/0x80 [ 363.586549][T12526] do_syscall_64+0xfa/0x790 [ 363.591034][T12526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.596907][T12526] RIP: 0033:0x45af17 [ 363.600788][T12526] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.620372][T12526] RSP: 002b:00007f6a4160da68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 363.629197][T12526] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 000000000045af17 [ 363.637156][T12526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 363.645107][T12526] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 363.653070][T12526] R10: 0000000000000000 R11: 0000000000000217 R12: 00007f6a4160e6d4 [ 363.661079][T12526] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 363.673724][T12526] ERROR: Out of memory at tomoyo_realpath_from_path. 09:18:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'vxcan1\x00', &(0x7f0000001340)=ANY=[@ANYBLOB="3f000000040000001f00000000100000db9d5644a7907b7277210f6d52b0d2c7dbc13a0a38fafa3913af354941fd4192e7ee9d79a6bc2b4d6527fa0e1bcc43059faa30775b8204c16dd442c0e688162c7512289dae5d66313817ed6214f005e9b469ab6d50ac740109c77bd41fd09f47cd722a88c5546120e2d007ed200f97e34f2f18a674262d45dedc43082b6755b3ec2a0209c8f29df5b2817c162819ef0bebf5657addc3cb0ab4de801307a56f40d5b1fe00f11cc1e30ca0197b5642fe0a898573de6b97144dcf3d6575bad8598b8644d135a4c1b562c033215fb909bc650e1913314d8407a2bc3a5b771ae317164b63bcdc6fd4e0d0a81586000328b9f0b6c47e2642c242710fb30707bd3fda445a745d1b349a7fffd3af604de8d52cc213578251f391dd0b13537f1254c2c906fc06440eca15ab5023a1536ffa1d828dc973b8d0029383e655fb5c056f07ef105fae2b1e0957f792c9b4c77478342d91765135161090e778f253269b19822059827af901a1054d5d300e350b6ea6ead7e263c1e6b1a129d0fcfdfd00b7731fbb732a542d0a27cec80b6dd3a4d78335e93bb6495fd1d772b65d08188a81b0f9730aa198953ed73c9c59464530822e20c09121335cdd44464c9a890950d2f39d6c794da8a586978649e318ceb3d221f966696755edd26d9f159eb297a5c1c2daa4bb393d5a6da6ffd290b4a0379f7cb59501b89c6916192e8d3795f2ee6048ef7e29077eee2a4d302ab68bb196463345130d15a374db16126078b1c0b3da1312c1a9ab20bae7c942c833f8a9272f54caf642b86bfb441e5178023fe5524eb1c582cea11eaa000000000000c61ac28f68c7e1e2855afd24ce99a33386d9aaf6bf082ecc96dda78c035e9a01c0794ceb49fc1abd8431fc9b3e610c66587608af39d2c57fdc68a2ddef8ff8f60c19ccfa78be65a3a2afb00ee83c9c4e2eb92deeb0abfc6354f8bd3708aacd4a6a2c7a8799aedcb50fe942b2d94563d51b65012176ee32bba9f8b13e65291ca1762a5f69d6ec9b91f31ccbb3dd64252720f91a27d4e5916c711de0706352971ac9c0bfb1cdc59a21b31a1d39b1b3b010c7a7dd0fbc8b4700b98d85d7fc3a2d511149305e5379049de5ea863f9b00671b016b6e9fbecc57df4b48369079d2939a1179bd967820dbbcdc6d3fef6cfe038f6fc40b466b155afe94dad024eff98d893fe97b08a27c464dc74248d288ff820625835a9dd4c23c3efdbaf47d24a14803806fafd7b8d260b11e8a6e859717b11a14153b15f246025fcb4f46a8ec620260d553948b3d03457d50dffc25c3448a54fb7c20bc0bc923f4fc89b8f41f22b7471bd86d91c2ab07a8a0b2f063c2a7ee5b7f26fc31796589a4affafef4e583af9be01c28d5b7b0ee8f0f095499e0890bebf85851f4a15b9ada0f61271aa22e9e7e254a17f0befe449a7ce9d2f9ccf87d4f110f9cdacc42f45226c15bb0a54a71b924d76732b6f1f25ad50af9f5414ad6fdcf4eac7a5d96d2cc2496c337a1e33ccdcbccc6ac426c820c887e1835cfd38c68052834accc1db6d6a617842b3fd23c973b345918174a143ec1fdb2a4c60e40c1dc6dcdf668aaf3feb1278f80779f316a87cc83c53bf28f78fd3e8a349d6bb69fb0e1d8dfb3d8d006dd9d5309b75b82c198617d816b0553b04dcb0f5a41436a060c34fe6e5a106e9820efa1e8b324045a0d0ba44503e0f6ebf5c362506fbe0b8883edbaf2ebbfd0d54144e5773d6d9dad64aef3930e21f18c0249fcbe6d316ff997fbd9ac07b34c2cf11c6fac10e93945bdbed82d5d44388969075833336f29173d8aedb9a06e0c2cd6183701b3fae62efa0d72f1d38979fdfdf40bc5dc1fd20a67018c761cf8a4cba039df155a426c4deb010956730ed437f540383a62004d13b9665eb9c90e1f6071aea6392fe9fa604d9794a5caad8d1a283e324eebff84095dd6550d333483c5f2720e7a4ba41dfd4c236e8783ee82f039df78a0c9a7fe85e38b6968afc1312a79645a8c9f0c0a746c08c12328e96949d97137648374f2fbe2731e5aefaaf5c0af515a7e1e4d8ad51b663392482a355d92ae78e1d12e2da7d653586c874cb37eea78ca87d4c95bdf4bc02cb8acdf3df4768a4766e6ed44567fc45f111d7ca689a3b46310d3a947613f995aa5fb4e5c388ff37c45ffa5747648033c290d596afccef45b53af532b34efaa1caf64a716addfc77cfaa8a1556654f73fec565c2e28f7fbe8f0498cbab3278fd743260a88b4d5f4d3c09e662e65a63df6abb10ee9e3981d5bda68007f725dd0571cb70da99c4943a77231ad390c70ea7260e7bfffb4db84eed7995cb8a8e1c4090cff258f58d0ec674fc422a1ed4bf99ecb1d55baa687fc171a840574c952aa38acd531ceb9a9919a295f2c74109da0b48d40dec00f615e9c7737bf0c2e2f3c8c35a403e9b6bd61f5218d5f0e6643e95d9b3d3c29e684212eef810399b4735918945e17c5b0bc75ac67f28a690cc1239fdf907de61a92ca94ffc269aedcb8fd46cb17712df454b20ea5543eaf54963d08b5b56ae67c2730db2f6904ff8182ed49400903445fbf3045ca12bbdcaf22aa9c076f357c58f1c43eba67464eb914488b4d0d48e83172f4ba5622b98552af013bdef7733779d044a1e4a9d7acec237e6a53f0e99853ebf1508e499217bcfd4a8af78bc43a7fb481445a6c17dc3419e2db45ea60bcfda8e64acbf76b671fa96e3b2504a3f02f92af01c29230708def554f12daf28db0e7bf37791ad1192e30b06401bbf4913f6750cbca135a8dc2a831467f3bcef8e84e94ac8876bbc969048549bf6a27c9dc28cbdc40c5ab5d5a8ab170e189c02d62c6fdc1f8977f887c40ddc2c8568f423e1517014c74fdffd5148246c8c9f9c7bf8cc92f1773b4649150d65735760c31dc45af312df2de13cbbbcad050e0eac7782a9f11ad5e97abd6d5db5ad18cbd812fd789b719936e9a276f4e6249e7ac2af3e3392b25a7ab9cce7e7459a8cab4d18be5d6048e006a1bc5ec0aa6372d54abc66d4d8aa1891d4df4f060a878ac5ae66647464500e174c6076619faef9ea2711947317cecfcc17e312c58cf31a11889b4f891d79357b21f8fae80b1622f8d57c624656f9f29c09616cae5010020c3d526cd429a9f7a9a4376ff88cc1b0f6491db820fc2fc784c66fdad1a922d3e3a83d36d3c6c45e42e64aa2e0d9148e4f98099c8901ba0636798a954287c8d364467b45ede1746fe0c49da26788997f92449ecd0b0406179e90e9c76c91087a68909291e294066d67fe293cddc0cfb3960c2ef3d3ad1be8d014556b418660e8d09d14c9a598f93b0f74b1f2fee6fb8e9516d3ea584f1aaa4fc7b5b4a0f2df3c6cdc7bcbd7738ed8f568855cbc4407119f7a8253ef47c58ccafbeb203f4bf5ca114d0d3f7487cf4a6899fd0e23aa0b17bf1baa5968d1057bbbd23e9b1032069241bfa63de86ebe3334a7a9279b7a6dd7a8949fba8b2e7fa4ddd04ce90ea5fa9d56706280ac6491877d6adb9953538f1eab917c0171ed0e331925640c1897f58e049e3455cc7692e14548180e0885f7d8efa372cbab70763b14c4d0d18693295ecd5281249ca53add1d3f587ffa33b567fc3f54e7395583217173a7a8b8a7a448c8b63b13c9b7a53bb06acb6cebc494b559f7257bdcab1b622a0e8e718169c7623023cebbb197b976aea5ccf0724f9f0ceba6b98495c51271239738bfcf2b6c5482b8f8355a7d066a8a4d190de91d7f7ed8e8d5385ec8faca2f3e7d82c23fab67d4bd3edd56f216f37df7b7a7dd3459f47698dfb7309f6da8b525f74ab3c0b2d6ffd20922f4ea6a4c656e59337144c07154e0ede9d0aab938fcf19f907d36070914b152ed2ad40e76469a2f0d837228dfd812d74759568d336c4cb9d1a3daee44cd01f5e075c1fb258f899bc59bb781efa52632b77d8b365f09285add9b0ba009517ae30bd924b5f16d0dbfc8ecacb6223439b4d78b86a7d6e67eac06d00a35b1a55e9c3910d35d2cc5a8d3a0258a689a91d66e5c1ff98f2a0210459d061e98786d972df942a1095e5864a16f4a95f816fa49b057cd6badefe0294b0f884b13034356ec97760a24f335c149a038589b0e9921860339608494fb6404759ee187d80f6b7ab7cc553662b8587b4b5381f3317403b1128a62eae707c362f92e3e2d2a819b52755039ca6d1d6718f621af5f47edd3bc61620f84aa041b22fa2640713d5dc0acc56d5f73ae91825e4be48447a683a7154234e050d97231ba5e49794c3a1ce5424bdf1890e5cd595add8baef29d50775b5eb17b4da707ce14bc07a249c39f5b542b163bce6b06b25fe657f8d348adf1357e3a58c983c1a9e6be6ee73a1c92a6ba614c1d1e1531b217ff6a5f28e14311601e162f16764229a4ec382b087d38d63c3ac2a2ead4621a1e5e130de7781bd052d969c8ec1e133946280273f4b5798b6e4cfcf848cb2f48a935333db31f42a84e25fcf92b9666ed79f257dca163b4c4454fcade9c350fc6d0f03a23a6e1cf34e74762e7c7506146c9fcb51ae4236532bf62ba33d9899cc4b3e548cd3b18d13b1fe84a62aafe045626d8119df3e200e60916de786a0ef72d190c0795cf4a163308fb9e5829a2ed1f05107b8ffc1c53c2846c444bd3ded129d98792937db2d2fcac82db3cc1461bc4a40eae3e85e26f699a50392bb7a31550f195f0d823aeb48d3524c5cf64cb6c9642dd1c5f01f80a00ee604248cf101df0a76a2097b7122f69ee03b7c9408a61eb93bbca48a3e5e34901d5d00144960fedff4093ca0abd937b8da9c60901e40ccce7b959c31748f30eec3bfe1fba491bd2f222c4b89638ef3e62f9d394df2f49cb4f893f78ef686deed16f095a25e14f4a8d9f7cc077334a232055494a08ae554553e70ed2ac0478fd2e29f86c362fc502b61492ad31ee7d258a7cde6823c9b2d7d43c305bd08e7fcdd285e26f55d0bf4e065f30bc9c9d0396f93277531d6572fba2b7fd9f7ddeb580ead550d4bad1fb585a68927ec1601014d50edf2f32db92342307c5cfcdff4e2571fcbca599eead24bad5adfd8663b62bcb0c6fcdd5cbbe384b17e67205717f5142a284497df64dcae2275163f585af1f431340a3124151d84ef0e36cc1d40771b5bd2c58bf1de3bcc91f6abcd5f45d4ea7c3511db84c542499f6e2ed9d9a08f79693d5847418a66cb34fa23d0bb53a388d1684b7a38be30281610a0ec528dfa99faf06f1ba10e151cab9d8686a3279cdfcf78e1fc0780ae436c5ba853db019765df308242e7ab873a376f4f65ac7d4dbd697e2d47a59590b3ab8889762ab69db728775172353126c0d0769e37b1326bde3cf8f1e05ccce29406e3bd210516148e6b41113982d2c53fbeceb94714d039cd85dbd28352c28c5551f8386922692df779f42b8b8dfa046296bd500d89f2a6e1dbc5f6793ae44d40ccc63a1df9759bf32a984c9dccce8d74452bda5cc2ba4885ce0faadec5b0542db6db74d705958238b975f1471e37b3b6fe194512fa4c0a3f490e9fd9ecad287bb675df0af456df79ee0ef08c0ddad55ba9acf069c42174e2c5c634a4fe0bee939cf9eb43515c62898cf5f53d7c17c9a7cb1f8c120f492bdbd5778578c1bfc751d84f28c4e4d7b8ba3dd08c2b5c0560a34ca8fb532d12b9720140c1a083b37a02cfd3a0c3f5dc6b107c4b7ad1d962c5b3e0f712ed051d9ccd5562c54367d1e61e54c80595bd8f2082cfd29a4ff45074bc8bd2eb3155a7481ae2ffe19c1ed62804afabf8798fa4a31c6c0b9f347fa3eded9f7bcb5650f4c2d5c55f766827ba7748259c7a58f485d0cf4001bb53842ec5b233d890"]}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000002c0)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) syz_open_procfs(r1, &(0x7f0000000240)='fd\x00') setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x28080, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000380), 0x4) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept$ax25(r4, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @bcast, @netrom, @null, @bcast, @null]}, &(0x7f0000000200)=0x48) connect$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="92fc758e0846f332b74da47a49db22ee72e18912c01a0faeb66e305399c58f5634b4a0e82f056e8f998719379a95cfbb29dcb56fdb1b2cf9ca520f248fdb251464b2a89bc58ff761ce58cd9388ca1e5cc70e7f186755960e6a87df83ffb6a32fc4fa79d04e9267b06e277a50504b825ddc532a8ab778de11538c2a3c947c6836569c5a6d6ec32231a82cee349648904d5c67210ddee0101b9cc9de603cf264846209d0e8562b23473c597bcaedf765db2762d27eeb6d38ad39aa59ad67eddd676045c7c43850ba6f040b6de7447cfe8f3e760638"], 0x2de) 09:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat(r1, &(0x7f0000000080)='./file0\x00', 0x1, 0x100) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:59 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x69, 0x0) 09:18:59 executing program 2 (fault-call:2 fault-nth:2): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:59 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:18:59 executing program 0 (fault-call:2 fault-nth:7): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:18:59 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:00 executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:00 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x6a, 0x0) [ 363.888993][T12540] FAULT_INJECTION: forcing a failure. [ 363.888993][T12540] name failslab, interval 1, probability 0, space 0, times 0 [ 363.914457][T12542] FAULT_INJECTION: forcing a failure. [ 363.914457][T12542] name failslab, interval 1, probability 0, space 0, times 0 [ 364.004370][T12540] CPU: 0 PID: 12540 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 364.015564][T12540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.025634][T12540] Call Trace: [ 364.028948][T12540] dump_stack+0x197/0x210 [ 364.033337][T12540] should_fail.cold+0xa/0x10 [ 364.037958][T12540] ? setup_fault_attr+0x220/0x220 [ 364.043003][T12540] ? ___might_sleep+0x163/0x2c0 [ 364.047873][T12540] __should_failslab+0x121/0x190 09:19:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 364.052827][T12540] should_failslab+0x9/0x14 [ 364.057347][T12540] kmem_cache_alloc+0x2aa/0x710 [ 364.062214][T12540] ? current_time+0x6b/0x110 [ 364.066818][T12540] ? ktime_get_coarse_real_ts64+0xeb/0x2a0 [ 364.072641][T12540] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.078902][T12540] ? timestamp_truncate+0x20f/0x2f0 [ 364.084123][T12540] __d_alloc+0x2e/0x8c0 [ 364.088297][T12540] d_alloc_pseudo+0x1e/0x70 [ 364.092817][T12540] alloc_file_pseudo+0xe2/0x280 [ 364.097712][T12540] ? alloc_file+0x4d0/0x4d0 [ 364.102236][T12540] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 364.108512][T12540] ? __kasan_check_write+0x14/0x20 [ 364.113646][T12540] __shmem_file_setup.part.0+0x108/0x2b0 [ 364.119299][T12540] shmem_file_setup+0x66/0x90 [ 364.123997][T12540] __x64_sys_memfd_create+0x2a2/0x470 [ 364.129379][T12540] ? memfd_fcntl+0x18a0/0x18a0 [ 364.134176][T12540] ? do_syscall_64+0x26/0x790 [ 364.138965][T12540] ? lockdep_hardirqs_on+0x421/0x5e0 [ 364.144276][T12540] ? trace_hardirqs_on+0x67/0x240 [ 364.149318][T12540] do_syscall_64+0xfa/0x790 09:19:00 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:00 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x6b, 0x0) [ 364.153840][T12540] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.159758][T12540] RIP: 0033:0x45af49 [ 364.163799][T12540] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.183421][T12540] RSP: 002b:00007f18444e3a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 364.191855][T12540] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 000000000045af49 [ 364.199951][T12540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 364.207936][T12540] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 364.215921][T12540] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18444e46d4 [ 364.223926][T12540] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 364.233548][T12542] CPU: 1 PID: 12542 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 364.243567][T12542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.253926][T12542] Call Trace: [ 364.257233][T12542] dump_stack+0x197/0x210 [ 364.261614][T12542] should_fail.cold+0xa/0x10 [ 364.266225][T12542] ? setup_fault_attr+0x220/0x220 [ 364.271268][T12542] ? ___might_sleep+0x163/0x2c0 [ 364.276142][T12542] __should_failslab+0x121/0x190 [ 364.281105][T12542] should_failslab+0x9/0x14 [ 364.285640][T12542] __kmalloc+0x2e0/0x770 [ 364.289951][T12542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.296371][T12542] ? simple_dname+0xd1/0x1f0 [ 364.300980][T12542] ? tomoyo_encode2.part.0+0xf5/0x400 [ 364.306371][T12542] tomoyo_encode2.part.0+0xf5/0x400 [ 364.311592][T12542] tomoyo_encode+0x2b/0x50 [ 364.316130][T12542] tomoyo_realpath_from_path+0x19c/0x660 [ 364.321772][T12542] ? tomoyo_path_perm+0x1cb/0x430 [ 364.326816][T12542] tomoyo_path_perm+0x230/0x430 [ 364.331677][T12542] ? tomoyo_path_perm+0x1cb/0x430 [ 364.336727][T12542] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 364.342846][T12542] ? rcu_read_lock_held+0x9c/0xb0 [ 364.348247][T12542] ? rcu_read_lock_any_held+0xcd/0xf0 [ 364.353648][T12542] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 364.358956][T12542] tomoyo_path_truncate+0x1d/0x30 [ 364.364003][T12542] security_path_truncate+0xf2/0x150 [ 364.369316][T12542] do_sys_ftruncate+0x3d9/0x550 [ 364.374301][T12542] __x64_sys_ftruncate+0x59/0x80 [ 364.379281][T12542] do_syscall_64+0xfa/0x790 [ 364.383802][T12542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.389696][T12542] RIP: 0033:0x45af17 [ 364.393599][T12542] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.413483][T12542] RSP: 002b:00007f6a4160da68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 364.421908][T12542] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 000000000045af17 [ 364.429975][T12542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 364.437955][T12542] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 364.445938][T12542] R10: 0000000000000000 R11: 0000000000000217 R12: 00007f6a4160e6d4 09:19:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept4(r1, &(0x7f0000000340)=@nl=@proc, &(0x7f00000003c0)=0x80, 0x800) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r5, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r8, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r8, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffea9, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRESHEX, @ANYRES32, @ANYPTR=&(0x7f0000001880)=ANY=[@ANYPTR64=&(0x7f0000000f00)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="23b03834ac3d0b23cc", @ANYRES16=r5, @ANYBLOB="c11d95e8162257aca85768af8a8e55823a564988acbfb014ebff6dea9e0657d7863ea1ab72b7283cd0310c761640232da60bff41026f0fc791df1476bc1d38d312c78a31b71e2ca750f7e7375a17302a0e627eeb2e127c669af0321b030e752312c88d49b64b91e7fc83a053d19952824365c33349a59be3bef558acc0cae5856de98825efc3a0e1ba540ec26d8cc85a136619e0d481e7cf33623bfa428caa9f0cbe6a6950eb42a5730fbd2127655698e537cf64458d8416c8a58c2266ee5ddd523dd877bbb6d97ab4239bc502846f7cc687a4a699f41a64cc567072724e19315c13185d449ff7fcef"], @ANYRESHEX, @ANYRESOCT, @ANYPTR64=&(0x7f0000001800)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES64=r7, @ANYPTR, @ANYRESDEC, @ANYRESHEX=r8], @ANYRESHEX=0x0], @ANYPTR, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES64]], 0x2}, 0x1, 0x0, 0x0, 0x20040106}, 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) setsockopt$inet6_buf(r13, 0x29, 0x23, &(0x7f00000002c0)="73bd429118b0d59ba7a3d1cba8076b68ca50711aee3f0bfbd343982eb7bc0cbc042118bd9851e996a5e00d54deae1a0e00673ceb80ecefc65252665f58847b6271a8c5c7961acc0f456f5e2627e9b9f7a4030ad9402fb450437e3a6f734feadcec9e3a97bbc6de5c1f32d7", 0x6b) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r11, 0x8bbac3b84d207214, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x86}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xda5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x65}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x2, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x4924849, 0x0) r14 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r14, &(0x7f0000000140), 0x4924924924925a4, 0x0) 09:19:00 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x6c, 0x0) 09:19:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:00 executing program 2 (fault-call:2 fault-nth:3): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:00 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 364.453917][T12542] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 364.484359][T12542] ERROR: Out of memory at tomoyo_realpath_from_path. 09:19:00 executing program 0 (fault-call:2 fault-nth:8): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:00 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x6d, 0x0) 09:19:00 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x6, 0x4}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000240)=""/240, 0x3b, 0xf0, 0x1}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:00 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 364.756547][T12600] FAULT_INJECTION: forcing a failure. [ 364.756547][T12600] name failslab, interval 1, probability 0, space 0, times 0 [ 364.842917][T12600] CPU: 0 PID: 12600 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 364.852849][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.862918][T12600] Call Trace: [ 364.866224][T12600] dump_stack+0x197/0x210 [ 364.870572][T12600] should_fail.cold+0xa/0x10 [ 364.875180][T12600] ? setup_fault_attr+0x220/0x220 [ 364.880219][T12600] ? ___might_sleep+0x163/0x2c0 [ 364.885102][T12600] __should_failslab+0x121/0x190 [ 364.890053][T12600] should_failslab+0x9/0x14 [ 364.894573][T12600] kmem_cache_alloc+0x2aa/0x710 [ 364.899436][T12600] ? rwlock_bug.part.0+0x90/0x90 [ 364.904390][T12600] ? lock_downgrade+0x920/0x920 [ 364.909258][T12600] __alloc_file+0x27/0x340 [ 364.913706][T12600] alloc_empty_file+0x72/0x170 [ 364.918487][T12600] alloc_file+0x5e/0x4d0 [ 364.922756][T12600] alloc_file_pseudo+0x189/0x280 [ 364.928315][T12600] ? alloc_file+0x4d0/0x4d0 [ 364.932833][T12600] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 364.939090][T12600] ? __kasan_check_write+0x14/0x20 [ 364.944219][T12600] __shmem_file_setup.part.0+0x108/0x2b0 [ 364.949877][T12600] shmem_file_setup+0x66/0x90 [ 364.954573][T12600] __x64_sys_memfd_create+0x2a2/0x470 [ 364.959960][T12600] ? memfd_fcntl+0x18a0/0x18a0 [ 364.964736][T12600] ? do_syscall_64+0x26/0x790 [ 364.969428][T12600] ? lockdep_hardirqs_on+0x421/0x5e0 [ 364.974730][T12600] ? trace_hardirqs_on+0x67/0x240 [ 364.979774][T12600] do_syscall_64+0xfa/0x790 [ 364.984300][T12600] entry_SYSCALL_64_after_hwframe+0x49/0xbe 09:19:01 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:01 executing program 1: perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x0, 0x1, {0x0, 0x26, 0x7, 0x18, 0x0, 0x200, 0x4, 0x15c, 0xffffffffffffffff}}) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0x5, 0x0, 0x0, 0x0) 09:19:01 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x6e, 0x0) [ 364.990201][T12600] RIP: 0033:0x45af49 [ 364.994103][T12600] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.013717][T12600] RSP: 002b:00007f18444e3a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 365.022144][T12600] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 000000000045af49 [ 365.030130][T12600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 365.034004][T12610] FAULT_INJECTION: forcing a failure. [ 365.034004][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 365.038103][T12600] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 365.038114][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18444e46d4 [ 365.038122][T12600] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 365.108076][T12610] CPU: 0 PID: 12610 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 365.118016][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.128085][T12610] Call Trace: [ 365.131393][T12610] dump_stack+0x197/0x210 [ 365.135745][T12610] should_fail.cold+0xa/0x10 [ 365.140360][T12610] ? setup_fault_attr+0x220/0x220 [ 365.145411][T12610] ? ___might_sleep+0x163/0x2c0 [ 365.150277][T12610] __should_failslab+0x121/0x190 [ 365.155229][T12610] should_failslab+0x9/0x14 [ 365.159744][T12610] kmem_cache_alloc+0x2aa/0x710 [ 365.164607][T12610] ? stack_trace_consume_entry+0x190/0x190 [ 365.170438][T12610] __alloc_file+0x27/0x340 [ 365.175013][T12610] alloc_empty_file+0x72/0x170 [ 365.179799][T12610] path_openat+0xef/0x34d0 [ 365.184233][T12610] ? do_sys_open+0xfc/0x190 [ 365.188758][T12610] ? mark_lock+0xc2/0x1220 [ 365.193181][T12610] ? __kasan_check_read+0x11/0x20 [ 365.198212][T12610] ? path_lookupat.isra.0+0x8c0/0x8c0 [ 365.203597][T12610] ? __alloc_fd+0x487/0x620 [ 365.208117][T12610] do_filp_open+0x192/0x260 [ 365.212634][T12610] ? may_open_dev+0x100/0x100 [ 365.217327][T12610] ? lock_downgrade+0x920/0x920 [ 365.222188][T12610] ? rwlock_bug.part.0+0x90/0x90 [ 365.227926][T12610] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 365.234184][T12610] ? do_raw_spin_unlock+0x181/0x270 [ 365.239405][T12610] ? _raw_spin_unlock+0x28/0x40 [ 365.244290][T12610] do_sys_openat2+0x633/0x840 [ 365.248991][T12610] ? file_open_root+0x5f0/0x5f0 [ 365.253962][T12610] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.260247][T12610] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 365.266417][T12610] do_sys_open+0xfc/0x190 [ 365.270763][T12610] ? filp_open+0x80/0x80 [ 365.275023][T12610] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 365.280495][T12610] ? do_syscall_64+0x26/0x790 [ 365.285188][T12610] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.291270][T12610] ? do_syscall_64+0x26/0x790 [ 365.295971][T12610] __x64_sys_open+0x7e/0xc0 [ 365.300489][T12610] do_syscall_64+0xfa/0x790 [ 365.305010][T12610] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.310907][T12610] RIP: 0033:0x414ce1 [ 365.314813][T12610] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 365.334542][T12610] RSP: 002b:00007f6a4160da60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 365.342974][T12610] RAX: ffffffffffffffda RBX: 00007f6a4160dc90 RCX: 0000000000414ce1 [ 365.350968][T12610] RDX: 00007f6a4160db0a RSI: 0000000000000002 RDI: 00007f6a4160db00 09:19:01 executing program 3: r0 = socket(0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:01 executing program 2 (fault-call:2 fault-nth:4): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:01 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x6f, 0x0) [ 365.358951][T12610] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 365.366936][T12610] R10: 0000000000000075 R11: 0000000000000293 R12: 00007f6a4160e6d4 [ 365.374922][T12610] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 365.603127][T12654] FAULT_INJECTION: forcing a failure. [ 365.603127][T12654] name failslab, interval 1, probability 0, space 0, times 0 [ 365.651596][T12654] CPU: 1 PID: 12654 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 365.661526][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.671592][T12654] Call Trace: [ 365.674903][T12654] dump_stack+0x197/0x210 [ 365.679251][T12654] should_fail.cold+0xa/0x10 [ 365.683855][T12654] ? memcg_kmem_put_cache+0xad/0x1a0 [ 365.689195][T12654] ? setup_fault_attr+0x220/0x220 [ 365.694239][T12654] ? ___might_sleep+0x163/0x2c0 09:19:01 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:01 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_FPEMU(0xa, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400178) 09:19:01 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x70, 0x0) 09:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) socket(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 365.699107][T12654] __should_failslab+0x121/0x190 [ 365.704064][T12654] should_failslab+0x9/0x14 [ 365.708579][T12654] kmem_cache_alloc+0x2aa/0x710 [ 365.713567][T12654] ? kmem_cache_alloc+0x364/0x710 [ 365.718608][T12654] security_file_alloc+0x39/0x170 [ 365.723709][T12654] __alloc_file+0xde/0x340 [ 365.728164][T12654] alloc_empty_file+0x72/0x170 [ 365.732944][T12654] alloc_file+0x5e/0x4d0 [ 365.737214][T12654] alloc_file_pseudo+0x189/0x280 [ 365.742191][T12654] ? alloc_file+0x4d0/0x4d0 [ 365.746710][T12654] ? lockdep_annotate_inode_mutex_key+0x5b/0x70 [ 365.754008][T12654] ? __kasan_check_write+0x14/0x20 [ 365.759155][T12654] __shmem_file_setup.part.0+0x108/0x2b0 [ 365.764800][T12654] shmem_file_setup+0x66/0x90 [ 365.769491][T12654] __x64_sys_memfd_create+0x2a2/0x470 [ 365.774876][T12654] ? memfd_fcntl+0x18a0/0x18a0 [ 365.779654][T12654] ? do_syscall_64+0x26/0x790 [ 365.784425][T12654] ? lockdep_hardirqs_on+0x421/0x5e0 [ 365.789718][T12654] ? trace_hardirqs_on+0x67/0x240 [ 365.794759][T12654] do_syscall_64+0xfa/0x790 09:19:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 365.799277][T12654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.805170][T12654] RIP: 0033:0x45af49 [ 365.809070][T12654] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.828682][T12654] RSP: 002b:00007f18444e3a68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 365.837102][T12654] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 000000000045af49 09:19:01 executing program 3: r0 = socket(0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 365.845082][T12654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000004bfff2 [ 365.853060][T12654] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 365.861041][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f18444e46d4 [ 365.869023][T12654] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:19:02 executing program 3: r0 = socket(0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:02 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x71, 0x0) 09:19:02 executing program 2 (fault-call:2 fault-nth:5): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:02 executing program 3: socket(0x1, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:02 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r3, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r4 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000840)={{0x0, r5, r6, r7, r6, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000440)) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) write$FUSE_ENTRY(r2, &(0x7f0000000240)={0x90, 0xfffffffffffffff5, 0x7, {0x6, 0x2, 0x2, 0x200, 0x7fff, 0x2, {0x2, 0x9, 0x3, 0x80, 0x8, 0x256, 0x4, 0x0, 0x7c5, 0x7fffffff, 0x81, r7, r10, 0xd, 0x27}}}, 0x90) r11 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8b23, &(0x7f0000000000)='\x002\x9b\x1d6\xd9') getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x3ff}, &(0x7f0000000080)=0xffffffffffffff31) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r11, 0x84, 0x6, &(0x7f00000000c0)={r12, @in6={{0xa, 0x4e22, 0x80000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}, &(0x7f0000000180)=0x84) r13 = semget(0x0, 0x0, 0x146) semctl$IPC_INFO(r13, 0x4, 0x3, &(0x7f0000000340)=""/227) ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000000000f2ff0100000000000000f9a7000000000000000000000000000006000000000000000200e3ff00000000e00a00"/72]) r14 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_tcp_int(r14, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r14, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r14, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r14, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r14, 0x8982, &(0x7f0000000300)={0x2, 'bond_slave_1\x00', {0x4}, 0xe5e2}) 09:19:02 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x72, 0x0) 09:19:02 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2, 0x0, 0x0, 0x60, 0x0) 09:19:02 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x73, 0x0) 09:19:02 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3, 0x0, 0x0, 0x60, 0x0) 09:19:02 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x74, 0x0) [ 366.598336][T12726] FAULT_INJECTION: forcing a failure. [ 366.598336][T12726] name failslab, interval 1, probability 0, space 0, times 0 [ 366.642520][T12726] CPU: 0 PID: 12726 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 366.652451][T12726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.662517][T12726] Call Trace: [ 366.665819][T12726] dump_stack+0x197/0x210 [ 366.670200][T12726] should_fail.cold+0xa/0x10 [ 366.674810][T12726] ? setup_fault_attr+0x220/0x220 [ 366.679852][T12726] ? ___might_sleep+0x163/0x2c0 [ 366.684726][T12726] __should_failslab+0x121/0x190 [ 366.689681][T12726] should_failslab+0x9/0x14 [ 366.694206][T12726] __kmalloc+0x2e0/0x770 [ 366.698458][T12726] ? mark_held_locks+0xf0/0xf0 [ 366.703237][T12726] ? stack_trace_save+0xac/0xe0 [ 366.708103][T12726] ? tomoyo_realpath_from_path+0xc5/0x660 [ 366.713838][T12726] tomoyo_realpath_from_path+0xc5/0x660 [ 366.719393][T12726] ? tomoyo_path_perm+0x1cb/0x430 [ 366.724434][T12726] tomoyo_path_perm+0x230/0x430 [ 366.729293][T12726] ? tomoyo_path_perm+0x1cb/0x430 [ 366.734331][T12726] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 366.740424][T12726] ? rcu_read_lock_held+0x9c/0xb0 [ 366.745478][T12726] ? rcu_read_lock_any_held+0xcd/0xf0 [ 366.750860][T12726] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 366.756163][T12726] tomoyo_path_truncate+0x1d/0x30 [ 366.761198][T12726] security_path_truncate+0xf2/0x150 [ 366.766501][T12726] do_sys_ftruncate+0x3d9/0x550 [ 366.771369][T12726] __x64_sys_ftruncate+0x59/0x80 [ 366.776458][T12726] do_syscall_64+0xfa/0x790 [ 366.780984][T12726] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.786885][T12726] RIP: 0033:0x45af17 [ 366.790791][T12726] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.810410][T12726] RSP: 002b:00007f18444e3a68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 366.818840][T12726] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 000000000045af17 [ 366.826960][T12726] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 366.834954][T12726] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 09:19:02 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x75, 0x0) [ 366.842978][T12726] R10: 0000000000000000 R11: 0000000000000217 R12: 00007f18444e46d4 [ 366.850962][T12726] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:19:03 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x76, 0x0) [ 367.021971][T12726] ERROR: Out of memory at tomoyo_realpath_from_path. 09:19:03 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x77, 0x0) 09:19:03 executing program 2 (fault-call:2 fault-nth:6): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) [ 367.407935][T12775] FAULT_INJECTION: forcing a failure. [ 367.407935][T12775] name failslab, interval 1, probability 0, space 0, times 0 [ 367.430051][T12775] CPU: 1 PID: 12775 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 367.439990][T12775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.450058][T12775] Call Trace: [ 367.453368][T12775] dump_stack+0x197/0x210 [ 367.457725][T12775] should_fail.cold+0xa/0x10 [ 367.462332][T12775] ? setup_fault_attr+0x220/0x220 [ 367.467374][T12775] ? ___might_sleep+0x163/0x2c0 [ 367.472246][T12775] __should_failslab+0x121/0x190 [ 367.477202][T12775] should_failslab+0x9/0x14 [ 367.481721][T12775] __kmalloc+0x2e0/0x770 [ 367.485976][T12775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.492228][T12775] ? simple_dname+0xd1/0x1f0 [ 367.496925][T12775] ? tomoyo_encode2.part.0+0xf5/0x400 [ 367.502321][T12775] tomoyo_encode2.part.0+0xf5/0x400 [ 367.507530][T12775] tomoyo_encode+0x2b/0x50 [ 367.511958][T12775] tomoyo_realpath_from_path+0x19c/0x660 [ 367.517592][T12775] ? tomoyo_path_perm+0x1cb/0x430 [ 367.522626][T12775] tomoyo_path_perm+0x230/0x430 [ 367.527736][T12775] ? tomoyo_path_perm+0x1cb/0x430 [ 367.532765][T12775] ? tomoyo_check_open_permission+0x3e0/0x3e0 [ 367.538846][T12775] ? rcu_read_lock_held+0x9c/0xb0 [ 367.543894][T12775] ? rcu_read_lock_any_held+0xcd/0xf0 [ 367.549269][T12775] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 367.554564][T12775] tomoyo_path_truncate+0x1d/0x30 [ 367.559588][T12775] security_path_truncate+0xf2/0x150 [ 367.564873][T12775] do_sys_ftruncate+0x3d9/0x550 [ 367.569729][T12775] __x64_sys_ftruncate+0x59/0x80 [ 367.574669][T12775] do_syscall_64+0xfa/0x790 [ 367.579175][T12775] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.585066][T12775] RIP: 0033:0x45af17 [ 367.588963][T12775] Code: 24 29 d7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 dc e4 ff ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 b8 4d 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.608565][T12775] RSP: 002b:00007f18444e3a68 EFLAGS: 00000217 ORIG_RAX: 000000000000004d [ 367.616975][T12775] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 000000000045af17 [ 367.626087][T12775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 367.634038][T12775] RBP: 000000000075bf20 R08: 0000000000000060 R09: 0000000000000001 [ 367.641991][T12775] R10: 0000000000000000 R11: 0000000000000217 R12: 00007f18444e46d4 [ 367.649962][T12775] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 367.664510][T12775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.833197][ T169] tipc: TX() has been purged, node left! [ 371.509587][T12804] IPVS: ftp: loaded support on port[0] = 21 [ 372.141430][T12804] chnl_net:caif_netlink_parms(): no params data found [ 372.366793][T12804] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.374309][T12804] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.381988][T12804] device bridge_slave_0 entered promiscuous mode [ 372.391118][T12804] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.398325][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.406274][T12804] device bridge_slave_1 entered promiscuous mode [ 372.426767][T12804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.439392][T12804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.463651][T12804] team0: Port device team_slave_0 added [ 372.471226][T12804] team0: Port device team_slave_1 added [ 372.535743][T12804] device hsr_slave_0 entered promiscuous mode [ 372.573636][T12804] device hsr_slave_1 entered promiscuous mode [ 372.632634][T12804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.640236][T12804] Cannot create hsr debugfs directory [ 372.763086][T12815] IPVS: ftp: loaded support on port[0] = 21 [ 372.837075][T12804] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.844410][T12804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.851715][T12804] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.858843][T12804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.950499][T12815] chnl_net:caif_netlink_parms(): no params data found [ 372.995823][T12804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.005566][T12815] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.013232][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.021013][T12815] device bridge_slave_0 entered promiscuous mode [ 373.031598][T12815] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.038858][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.047457][T12815] device bridge_slave_1 entered promiscuous mode [ 373.076309][T12815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.089594][T12815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.193199][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.203801][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.211908][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.222035][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 373.238060][T12815] team0: Port device team_slave_0 added [ 373.253561][T12815] team0: Port device team_slave_1 added [ 373.261049][T12804] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.315903][T12815] device hsr_slave_0 entered promiscuous mode [ 373.352900][T12815] device hsr_slave_1 entered promiscuous mode [ 373.392521][T12815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.400098][T12815] Cannot create hsr debugfs directory [ 373.410340][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.419242][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.427812][ T2990] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.434929][ T2990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.536924][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.547651][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.556144][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.563238][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.571628][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.580818][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.627399][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.636179][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.648374][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.665428][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.677332][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.699957][T12804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.710825][T12804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.733003][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.741550][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.751017][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.759791][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.768436][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 373.879479][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 373.887615][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 373.908367][T12804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.990162][T12815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.111807][T12815] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.132575][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 374.140297][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 374.149265][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 374.158197][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 374.179749][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 374.189598][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 374.198214][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.205355][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.213148][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 374.221678][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 374.230221][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.237316][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.259149][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 374.267206][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 374.290290][T12804] device veth0_vlan entered promiscuous mode [ 374.297430][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 374.313329][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 374.321591][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 374.343465][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 374.351475][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 374.359673][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 374.368786][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 374.377509][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 374.386246][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 374.398632][T12804] device veth1_vlan entered promiscuous mode [ 374.419729][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 374.428556][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 374.437088][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 374.445872][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 374.455315][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 374.464368][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 374.485658][T12815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:19:10 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 374.585937][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 374.596254][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.618708][ T2975] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.636100][T12815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.805599][ T169] device bridge_slave_1 left promiscuous mode [ 374.812555][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.855873][ T169] device bridge_slave_0 left promiscuous mode [ 374.862080][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.915252][ T169] device veth1_vlan left promiscuous mode [ 374.921470][ T169] device veth0_vlan left promiscuous mode [ 377.591224][ T169] bond2 (unregistering): Released all slaves [ 377.644393][ T169] bond1 (unregistering): Released all slaves [ 377.784730][ T169] device hsr_slave_0 left promiscuous mode [ 377.822815][ T169] device hsr_slave_1 left promiscuous mode [ 377.896975][ T169] @ (unregistering): Port device team_slave_1 removed [ 377.908959][ T169] @ (unregistering): Port device team_slave_0 removed [ 377.924443][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.981799][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.110208][ T169] bond0 (unregistering): Released all slaves [ 378.282752][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.291358][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.320213][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.329145][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.340214][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.348690][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.359010][T12815] device veth0_vlan entered promiscuous mode [ 378.381884][T12815] device veth1_vlan entered promiscuous mode 09:19:14 executing program 3: socket(0x1, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:14 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x78, 0x0) 09:19:14 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4, 0x0, 0x0, 0x60, 0x0) 09:19:14 executing program 2 (fault-call:2 fault-nth:7): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:14 executing program 1: r0 = socket(0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:14 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:14 executing program 4: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 378.600057][T12852] FAULT_INJECTION: forcing a failure. [ 378.600057][T12852] name failslab, interval 1, probability 0, space 0, times 0 09:19:14 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x79, 0x0) [ 378.673172][T12852] CPU: 0 PID: 12852 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 378.683109][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.693179][T12852] Call Trace: [ 378.696494][T12852] dump_stack+0x197/0x210 [ 378.700846][T12852] should_fail.cold+0xa/0x10 [ 378.705455][T12852] ? setup_fault_attr+0x220/0x220 [ 378.710586][T12852] ? ___might_sleep+0x163/0x2c0 [ 378.715457][T12852] __should_failslab+0x121/0x190 [ 378.720415][T12852] should_failslab+0x9/0x14 [ 378.724938][T12852] kmem_cache_alloc+0x2aa/0x710 [ 378.729813][T12852] getname_flags+0xd6/0x5b0 [ 378.734332][T12852] getname+0x1a/0x20 [ 378.738239][T12852] do_sys_openat2+0x4a6/0x840 [ 378.742934][T12852] ? file_open_root+0x5f0/0x5f0 [ 378.747792][T12852] ? lock_downgrade+0x920/0x920 [ 378.752649][T12852] do_sys_open+0xfc/0x190 [ 378.756987][T12852] ? filp_open+0x80/0x80 [ 378.761276][T12852] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 378.767532][T12852] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 378.773009][T12852] ? do_syscall_64+0x26/0x790 [ 378.777698][T12852] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.783780][T12852] ? do_syscall_64+0x26/0x790 [ 378.788485][T12852] __x64_sys_open+0x7e/0xc0 [ 378.793003][T12852] do_syscall_64+0xfa/0x790 [ 378.797518][T12852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 378.803416][T12852] RIP: 0033:0x414ce1 [ 378.807320][T12852] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 378.826939][T12852] RSP: 002b:00007f18444e3a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 378.835369][T12852] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 0000000000414ce1 [ 378.843359][T12852] RDX: 00007f18444e3b0a RSI: 0000000000000002 RDI: 00007f18444e3b00 [ 378.851344][T12852] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 378.859329][T12852] R10: 0000000000000075 R11: 0000000000000293 R12: 00007f18444e46d4 09:19:14 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:14 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x5, 0x0, 0x0, 0x60, 0x0) 09:19:14 executing program 3: socket(0x1, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 378.867315][T12852] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:19:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlockall(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) fcntl$setlease(r0, 0x400, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1f7dcecda3c3010158ec951e", 0xc}], 0x1, &(0x7f00000000c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}], 0x18}, 0xa0215ea4646162dd) 09:19:15 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:15 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:15 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x7a, 0x0) 09:19:15 executing program 2 (fault-call:2 fault-nth:8): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) [ 379.294080][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 09:19:15 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x7b, 0x0) 09:19:15 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6, 0x0, 0x0, 0x60, 0x0) [ 379.335516][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready 09:19:15 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:15 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:15 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x7c, 0x0) [ 379.606461][T12922] FAULT_INJECTION: forcing a failure. [ 379.606461][T12922] name failslab, interval 1, probability 0, space 0, times 0 [ 379.686424][T12922] CPU: 1 PID: 12922 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 379.696361][T12922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.706429][T12922] Call Trace: [ 379.709745][T12922] dump_stack+0x197/0x210 [ 379.714099][T12922] should_fail.cold+0xa/0x10 [ 379.718709][T12922] ? setup_fault_attr+0x220/0x220 [ 379.723751][T12922] ? ___might_sleep+0x163/0x2c0 [ 379.728619][T12922] __should_failslab+0x121/0x190 [ 379.733746][T12922] should_failslab+0x9/0x14 [ 379.738260][T12922] kmem_cache_alloc+0x2aa/0x710 [ 379.743126][T12922] ? stack_trace_consume_entry+0x190/0x190 [ 379.748957][T12922] __alloc_file+0x27/0x340 [ 379.753392][T12922] alloc_empty_file+0x72/0x170 [ 379.758168][T12922] path_openat+0xef/0x34d0 [ 379.762769][T12922] ? do_sys_open+0xfc/0x190 [ 379.767286][T12922] ? mark_lock+0xc2/0x1220 [ 379.771723][T12922] ? __kasan_check_read+0x11/0x20 [ 379.776764][T12922] ? path_lookupat.isra.0+0x8c0/0x8c0 [ 379.782157][T12922] ? __alloc_fd+0x487/0x620 [ 379.786679][T12922] do_filp_open+0x192/0x260 [ 379.791202][T12922] ? may_open_dev+0x100/0x100 [ 379.795896][T12922] ? lock_downgrade+0x920/0x920 [ 379.800760][T12922] ? rwlock_bug.part.0+0x90/0x90 [ 379.805712][T12922] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 379.811966][T12922] ? do_raw_spin_unlock+0x181/0x270 [ 379.817177][T12922] ? _raw_spin_unlock+0x28/0x40 [ 379.822053][T12922] do_sys_openat2+0x633/0x840 [ 379.826743][T12922] ? file_open_root+0x5f0/0x5f0 [ 379.831612][T12922] ? lock_downgrade+0x920/0x920 09:19:15 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 379.836497][T12922] do_sys_open+0xfc/0x190 [ 379.840838][T12922] ? filp_open+0x80/0x80 [ 379.845087][T12922] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 379.851378][T12922] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 379.856874][T12922] ? do_syscall_64+0x26/0x790 [ 379.861593][T12922] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.867655][T12922] ? do_syscall_64+0x26/0x790 [ 379.872346][T12922] __x64_sys_open+0x7e/0xc0 [ 379.876872][T12922] do_syscall_64+0xfa/0x790 [ 379.881394][T12922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.887292][T12922] RIP: 0033:0x414ce1 [ 379.891200][T12922] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 379.910826][T12922] RSP: 002b:00007f18444e3a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 379.919248][T12922] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 0000000000414ce1 [ 379.927230][T12922] RDX: 00007f18444e3b0a RSI: 0000000000000002 RDI: 00007f18444e3b00 09:19:16 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mlockall(0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) fcntl$setlease(r0, 0x400, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8000, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1f7dcecda3c3010158ec951e", 0xc}], 0x1, &(0x7f00000000c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}], 0x18}, 0xa0215ea4646162dd) [ 379.935334][T12922] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 379.943307][T12922] R10: 0000000000000075 R11: 0000000000000293 R12: 00007f18444e46d4 [ 379.951399][T12922] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:19:16 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7, 0x0, 0x0, 0x60, 0x0) 09:19:16 executing program 2 (fault-call:2 fault-nth:9): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:16 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:16 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x7d, 0x0) 09:19:16 executing program 4: r0 = socket(0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 380.426125][T12964] FAULT_INJECTION: forcing a failure. [ 380.426125][T12964] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 380.439373][T12964] CPU: 0 PID: 12964 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 380.449297][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.459367][T12964] Call Trace: [ 380.462682][T12964] dump_stack+0x197/0x210 [ 380.467036][T12964] should_fail.cold+0xa/0x10 [ 380.471701][T12964] ? setup_fault_attr+0x220/0x220 [ 380.476751][T12964] ? __kasan_check_read+0x11/0x20 [ 380.481807][T12964] ? __lock_acquire+0x16f2/0x4a00 [ 380.486962][T12964] should_fail_alloc_page+0x50/0x60 [ 380.492183][T12964] __alloc_pages_nodemask+0x1a1/0x910 [ 380.497623][T12964] ? fs_reclaim_release+0xf/0x30 [ 380.502583][T12964] ? __alloc_pages_slowpath+0x2900/0x2900 [ 380.508318][T12964] ? fs_reclaim_release+0xf/0x30 [ 380.513279][T12964] ? shmem_setattr+0x4c7/0xc80 [ 380.518157][T12964] ? setup_fault_attr+0x220/0x220 [ 380.523207][T12964] cache_grow_begin+0x90/0xc60 [ 380.527997][T12964] ? trace_hardirqs_off+0x62/0x240 [ 380.533128][T12964] kmem_cache_alloc+0x64e/0x710 [ 380.538006][T12964] getname_flags+0xd6/0x5b0 [ 380.542529][T12964] getname+0x1a/0x20 [ 380.546437][T12964] do_sys_openat2+0x4a6/0x840 [ 380.551151][T12964] ? file_open_root+0x5f0/0x5f0 [ 380.556030][T12964] ? lock_downgrade+0x920/0x920 [ 380.561011][T12964] do_sys_open+0xfc/0x190 [ 380.565362][T12964] ? filp_open+0x80/0x80 [ 380.569641][T12964] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.575924][T12964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.581585][T12964] ? do_syscall_64+0x26/0x790 [ 380.586343][T12964] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.592645][T12964] ? do_syscall_64+0x26/0x790 [ 380.597903][T12964] __x64_sys_open+0x7e/0xc0 [ 380.602530][T12964] do_syscall_64+0xfa/0x790 [ 380.607061][T12964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.612982][T12964] RIP: 0033:0x414ce1 09:19:16 executing program 4: r0 = socket(0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:16 executing program 1: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:16 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x7e, 0x0) 09:19:16 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 380.616906][T12964] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 380.637141][T12964] RSP: 002b:00007f18444e3a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 380.645634][T12964] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 0000000000414ce1 [ 380.653630][T12964] RDX: 00007f18444e3b0a RSI: 0000000000000002 RDI: 00007f18444e3b00 [ 380.661623][T12964] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 380.669785][T12964] R10: 0000000000000075 R11: 0000000000000293 R12: 00007f18444e46d4 [ 380.677779][T12964] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:19:16 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:16 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x82, 0x0) 09:19:16 executing program 4: r0 = socket(0x1, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:17 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8, 0x0, 0x0, 0x60, 0x0) 09:19:17 executing program 2 (fault-call:2 fault-nth:10): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:17 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:17 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) dup(0xffffffffffffffff) syz_open_dev$video(0x0, 0x0, 0x0) 09:19:17 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x83, 0x0) 09:19:17 executing program 4: socket(0x1, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 381.248934][T13035] FAULT_INJECTION: forcing a failure. [ 381.248934][T13035] name failslab, interval 1, probability 0, space 0, times 0 [ 381.342799][T13035] CPU: 1 PID: 13035 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 381.352749][T13035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.363527][T13035] Call Trace: [ 381.366844][T13035] dump_stack+0x197/0x210 [ 381.371509][T13035] should_fail.cold+0xa/0x10 [ 381.376327][T13035] ? setup_fault_attr+0x220/0x220 [ 381.381389][T13035] ? ___might_sleep+0x163/0x2c0 [ 381.386457][T13035] __should_failslab+0x121/0x190 [ 381.392027][T13035] should_failslab+0x9/0x14 [ 381.396945][T13035] kmem_cache_alloc+0x2aa/0x710 [ 381.402044][T13035] ? stack_trace_consume_entry+0x190/0x190 [ 381.408427][T13035] __alloc_file+0x27/0x340 [ 381.412881][T13035] alloc_empty_file+0x72/0x170 [ 381.417675][T13035] path_openat+0xef/0x34d0 [ 381.422120][T13035] ? do_sys_open+0xfc/0x190 [ 381.426841][T13035] ? mark_lock+0xc2/0x1220 [ 381.431288][T13035] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 381.437083][T13035] ? path_lookupat.isra.0+0x8c0/0x8c0 [ 381.442488][T13035] ? __alloc_fd+0x487/0x620 [ 381.447201][T13035] do_filp_open+0x192/0x260 [ 381.451837][T13035] ? may_open_dev+0x100/0x100 [ 381.456716][T13035] ? lock_downgrade+0x920/0x920 [ 381.461604][T13035] ? rwlock_bug.part.0+0x90/0x90 [ 381.466611][T13035] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.472997][T13035] ? do_raw_spin_unlock+0x181/0x270 [ 381.478224][T13035] ? _raw_spin_unlock+0x28/0x40 [ 381.483123][T13035] do_sys_openat2+0x633/0x840 [ 381.487855][T13035] ? file_open_root+0x5f0/0x5f0 09:19:17 executing program 4: socket(0x1, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:17 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x84, 0x0) 09:19:17 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 381.493005][T13035] ? lock_downgrade+0x920/0x920 [ 381.498100][T13035] do_sys_open+0xfc/0x190 [ 381.502455][T13035] ? filp_open+0x80/0x80 [ 381.506775][T13035] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 381.513192][T13035] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 381.518936][T13035] ? do_syscall_64+0x26/0x790 [ 381.523646][T13035] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.529744][T13035] ? do_syscall_64+0x26/0x790 [ 381.534454][T13035] __x64_sys_open+0x7e/0xc0 [ 381.539075][T13035] do_syscall_64+0xfa/0x790 [ 381.543622][T13035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.549530][T13035] RIP: 0033:0x414ce1 [ 381.553593][T13035] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 381.573808][T13035] RSP: 002b:00007f18444e3a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 381.582426][T13035] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 0000000000414ce1 [ 381.590691][T13035] RDX: 00007f18444e3b0a RSI: 0000000000000002 RDI: 00007f18444e3b00 [ 381.598825][T13035] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 381.606930][T13035] R10: 0000000000000075 R11: 0000000000000293 R12: 00007f18444e46d4 [ 381.615320][T13035] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 09:19:17 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f0000000200)="66b95802000066b80000000066f30f1ec60f3066b9d60900000f32ba4200b83d00efbad104b00bee0f009c7f39f021b3da250f00170fc719e18cda7300", 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000220000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0f08b9800000c00f3235000800000f30660f765000c4e2cd3ef666b8b0008ed066b8b2008ed866b86c000f00d80f013a0f2177b93e0b0000b803000000ba000000000f30", 0x44}], 0x1, 0x22, &(0x7f0000000140)=[@cr4={0x1, 0x2002}, @flags], 0x2) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c, 0x0, 0x0, 0x0, 0x0, 0xba32, 0x4], 0x0, 0x104000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0x0, 0x0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_AUDIO(r5, 0x80345621, &(0x7f0000000180)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 09:19:17 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x85, 0x0) 09:19:17 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xa, 0x0, 0x0, 0x60, 0x0) 09:19:17 executing program 2 (fault-call:2 fault-nth:11): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:17 executing program 4: socket(0x1, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:17 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 382.045786][T13080] FAULT_INJECTION: forcing a failure. [ 382.045786][T13080] name failslab, interval 1, probability 0, space 0, times 0 09:19:18 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x86, 0x0) [ 382.169074][T13080] CPU: 0 PID: 13080 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 382.182286][T13080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.193517][T13080] Call Trace: [ 382.196930][T13080] dump_stack+0x197/0x210 [ 382.201306][T13080] should_fail.cold+0xa/0x10 [ 382.206204][T13080] ? setup_fault_attr+0x220/0x220 [ 382.211259][T13080] ? ___might_sleep+0x163/0x2c0 [ 382.216319][T13080] __should_failslab+0x121/0x190 [ 382.221365][T13080] should_failslab+0x9/0x14 [ 382.226326][T13080] __kmalloc+0x2e0/0x770 [ 382.230682][T13080] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.238856][T13080] ? d_absolute_path+0x11b/0x170 [ 382.243913][T13080] ? __d_path+0x140/0x140 [ 382.248408][T13080] ? tomoyo_encode2.part.0+0xf5/0x400 [ 382.253842][T13080] tomoyo_encode2.part.0+0xf5/0x400 [ 382.259095][T13080] tomoyo_encode+0x2b/0x50 [ 382.263539][T13080] tomoyo_realpath_from_path+0x19c/0x660 [ 382.269194][T13080] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 382.275556][T13080] tomoyo_check_open_permission+0x2a3/0x3e0 [ 382.281887][T13080] ? __check_heap_object+0x66/0xb3 [ 382.287211][T13080] ? tomoyo_path_number_perm+0x520/0x520 [ 382.293255][T13080] ? __kasan_check_read+0x11/0x20 [ 382.298620][T13080] ? mark_lock+0xc2/0x1220 [ 382.303347][T13080] ? lock_downgrade+0x920/0x920 [ 382.308360][T13080] ? rwlock_bug.part.0+0x90/0x90 [ 382.313623][T13080] tomoyo_file_open+0xa9/0xd0 [ 382.318432][T13080] security_file_open+0x71/0x300 [ 382.323392][T13080] do_dentry_open+0x365/0x1350 [ 382.328260][T13080] ? __kasan_check_read+0x11/0x20 [ 382.333616][T13080] ? chown_common+0x5c0/0x5c0 [ 382.338407][T13080] ? inode_permission+0xb4/0x520 [ 382.343553][T13080] vfs_open+0xa0/0xd0 [ 382.347553][T13080] path_openat+0x12fd/0x34d0 [ 382.352304][T13080] ? path_lookupat.isra.0+0x8c0/0x8c0 [ 382.357865][T13080] ? __alloc_fd+0x487/0x620 [ 382.362619][T13080] do_filp_open+0x192/0x260 [ 382.367144][T13080] ? may_open_dev+0x100/0x100 [ 382.371973][T13080] ? do_raw_spin_unlock+0x181/0x270 [ 382.377199][T13080] ? _raw_spin_unlock+0x28/0x40 [ 382.382171][T13080] do_sys_openat2+0x633/0x840 [ 382.386869][T13080] ? file_open_root+0x5f0/0x5f0 [ 382.391748][T13080] ? lock_downgrade+0x920/0x920 [ 382.396918][T13080] do_sys_open+0xfc/0x190 [ 382.401269][T13080] ? filp_open+0x80/0x80 [ 382.405534][T13080] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 382.412417][T13080] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 382.417989][T13080] ? do_syscall_64+0x26/0x790 [ 382.423265][T13080] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.429663][T13080] ? do_syscall_64+0x26/0x790 [ 382.434466][T13080] __x64_sys_open+0x7e/0xc0 [ 382.439203][T13080] do_syscall_64+0xfa/0x790 [ 382.443873][T13080] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.450022][T13080] RIP: 0033:0x414ce1 09:19:18 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:18 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 382.453940][T13080] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 382.474300][T13080] RSP: 002b:00007f18444e3a60 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 382.483037][T13080] RAX: ffffffffffffffda RBX: 00007f18444e3c90 RCX: 0000000000414ce1 [ 382.491226][T13080] RDX: 00007f18444e3b0a RSI: 0000000000000002 RDI: 00007f18444e3b00 [ 382.499322][T13080] RBP: 000000000075bf20 R08: 0000000000000000 R09: 000000000000000a [ 382.507715][T13080] R10: 0000000000000075 R11: 0000000000000293 R12: 00007f18444e46d4 [ 382.515975][T13080] R13: 00000000004cbe67 R14: 00000000004e6b00 R15: 0000000000000003 [ 382.533988][T13080] ERROR: Out of memory at tomoyo_realpath_from_path. 09:19:18 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:18 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000100)={0x24000001, 0x23, 0xa}) close(r3) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x29, 0x7, 0x0) r6 = socket(0x100000000011, 0x2, 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x9, 0xe0140) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r7, 0x80184151, &(0x7f0000000340)={0x0, &(0x7f0000000280)="7366ed5431fa6a3010f12471a602cc32aee729f67266833aaae0dc1dc2ec38d229fba395ca6e3f32a4a53883fff869d2c1029585907ff5159b631c6c211a0cafc956d3b7ecd3d4c29649ca136945d42ddf1ad8", 0x53}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bind(r6, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000), &(0x7f00000001c0)=0xfffffffffffffff4) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SNDRV_PCM_IOCTL_DELAY(r10, 0x80084121, &(0x7f0000000080)) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r12, @ANYRES32, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x800) splice(r2, 0x0, r3, 0x0, 0x100000000, 0x0) 09:19:18 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:18 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x87, 0x0) 09:19:18 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x10, 0x0, 0x0, 0x60, 0x0) 09:19:19 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x60, 0x0) 09:19:19 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x88, 0x0) 09:19:19 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x48, 0x0, 0x0, 0x60, 0x0) 09:19:19 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x89, 0x0) 09:19:19 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2, 0x0, 0x0, 0x60, 0x0) 09:19:19 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x8a, 0x0) 09:19:19 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:19 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c, 0x0, 0x0, 0x60, 0x0) 09:19:20 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3, 0x0, 0x0, 0x60, 0x0) 09:19:20 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x8b, 0x0) 09:19:20 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x68, 0x0, 0x0, 0x60, 0x0) 09:19:20 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x8c, 0x0) 09:19:20 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4, 0x0, 0x0, 0x60, 0x0) 09:19:20 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x8d, 0x0) 09:19:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10100, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080)={0x7963, 0xc000, 0x4129, 0x12b, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x6}, 0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl$TIOCOUTQ(r0, 0x540b, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r6, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r6, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', 0x1000}) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="010fc113c0218dbc03001000"/24, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r8}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e24, @local}}, 0xddb3, 0x800}, 0x90) 09:19:20 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:20 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c, 0x0, 0x0, 0x60, 0x0) 09:19:21 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x8e, 0x0) 09:19:21 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:21 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x5, 0x0, 0x0, 0x60, 0x0) 09:19:21 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:21 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x8f, 0x0) 09:19:21 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x74, 0x0, 0x0, 0x60, 0x0) 09:19:21 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:21 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x90, 0x0) 09:19:23 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4, 0x0, 0x0, 0x60, 0x0) 09:19:23 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6, 0x0, 0x0, 0x60, 0x0) 09:19:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:23 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x91, 0x0) 09:19:23 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:23 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a, 0x0, 0x0, 0x60, 0x0) 09:19:23 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:23 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x92, 0x0) 09:19:23 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:23 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x93, 0x0) 09:19:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7, 0x0, 0x0, 0x60, 0x0) 09:19:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1f}}, [0x20, 0xde15, 0x0, 0x400, 0x70, 0x3, 0x80000000, 0x0, 0x3, 0x889e, 0x9, 0x7f, 0x1, 0x4, 0x23b]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x6, 0x7, 0x80000000}, &(0x7f0000000180)=0x10) 09:19:24 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x300, 0x0, 0x0, 0x60, 0x0) 09:19:24 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x94, 0x0) 09:19:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28) 09:19:24 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8, 0x0, 0x0, 0x60, 0x0) 09:19:24 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x500, 0x0, 0x0, 0x60, 0x0) 09:19:24 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x95, 0x0) 09:19:24 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x96, 0x0) 09:19:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r3, 0x703, 0xe, 0x4d2f, &(0x7f0000000080)="1c04ff01de6da9725f90c5a06d0f9f2400844d0044a98db225a47ecb10b429441dec77009050d9560e58f2e162226d4fe467a890b6c4c556c6894acf3d4cd49c4dd5a2d05d6ce642e3abc0e0cb0a7de568fb3f30013c74eb73383ebaf4257042ec5277fa18a9b201882996c7b8de5080c75756094ac8e258ff1673c27fb2f2bffc290edbc5dec9e44b6fab8d5fcbd12ae8339b04701b316bd5eccc3961ce80", 0x0, 0xf0, 0x0, 0x0, 0xfffffffffffffe19}, 0x28) 09:19:24 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:24 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:25 executing program 1: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x2, 0x78003) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db50d5e0bcff8696071") r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_SET_SOCK(r4, 0xab00, r0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r5, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000000c0)={0x6, 0x0, 0x6, 0x7fff, 0x9}, 0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) connect$inet6(r2, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x8, 0xe00}, 0x8) 09:19:25 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x97, 0x0) 09:19:25 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x600, 0x0, 0x0, 0x60, 0x0) 09:19:25 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x10, 0x0, 0x0, 0x60, 0x0) 09:19:25 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:25 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x98, 0x0) 09:19:25 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:25 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xffff}, 0x200000000, 0x80000000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x700, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000001340), 0x1, &(0x7f00000013c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) splice(r2, 0x0, r3, 0x0, 0x8, 0x9) 09:19:25 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x99, 0x0) 09:19:25 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:25 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:25 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x700, 0x0, 0x0, 0x60, 0x0) 09:19:25 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x48, 0x0, 0x0, 0x60, 0x0) 09:19:25 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x9a, 0x0) [ 389.821264][T13591] sysfs: Unknown parameter '' 09:19:26 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:26 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:26 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x9b, 0x0) 09:19:26 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:26 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c, 0x0, 0x0, 0x60, 0x0) [ 390.519597][T13598] sysfs: Unknown parameter '' 09:19:26 executing program 1: syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x6800) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xffff}, 0x200000000, 0x80000000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x9) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x700, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r1 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000001340), 0x1, &(0x7f00000013c0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000001300)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)=0x1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x2}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) splice(r2, 0x0, r3, 0x0, 0x8, 0x9) 09:19:26 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x9c, 0x0) 09:19:26 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:26 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:26 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xa00, 0x0, 0x0, 0x60, 0x0) 09:19:26 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x68, 0x0, 0x0, 0x60, 0x0) 09:19:26 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:27 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:27 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x9d, 0x0) 09:19:27 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:27 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x10ed, 0x0, 0x0, 0x60, 0x0) 09:19:27 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 391.201973][T13685] sysfs: Unknown parameter '' 09:19:28 executing program 1: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c, 0x0, 0x0, 0x60, 0x0) 09:19:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x9e, 0x0) 09:19:28 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1f00, 0x0, 0x0, 0x60, 0x0) 09:19:28 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 1: chdir(0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file1\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x2c, 0x6, 0x6, 0xd, 0x1, 0xfff, 0x6, 0x65, 0x1}) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000640), 0x24, 0x0) 09:19:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x9f, 0x0) 09:19:28 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2000, 0x0, 0x0, 0x60, 0x0) 09:19:28 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 392.401367][T13771] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 09:19:28 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x74, 0x0, 0x0, 0x60, 0x0) 09:19:28 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa0, 0x0) 09:19:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$admmidi(0x0, 0x7, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xff, 0x5, 0x0, 0xec, 0x101, 0x3, 0x0, 0x6, 0x32a, 0x40, 0xdc, 0x6, 0xff01, 0x38, 0x1, 0x400, 0x20, 0x3}, [{0x6, 0xffffff31, 0xfffffffffffffe01, 0x2, 0x629, 0x6, 0x3f, 0x401}, {0x6474e551, 0x2, 0xb5, 0x5, 0x0, 0x2, 0x45, 0x7fff}], "72bb6fb837b1167547273322e9d14e5ea09992fe5279caf25134fffa6344b656ba38fbc9859e08973b6a4628b23e7960cdb9474e0d59e3175b0e976313c1f7384cda4391d09d32f68f045ff488a86119e6de61da7cd4af02de4d87840cfa96992971d72d5410ab6741974257bce6cdbec9cc4a6c61868ac41b9ee7e16865eccee58a3f2f142fd71673c0fd7c703983579ab64be349a43c74fb387bc16b7eea18613475e658d2cc97ae21c403dd99c398b92f50da5f87e6fbabc9b262dde95799a87f62cd173b40eea856acaa1900bb48c457a5feea5a55097def96f51585ff9f482d11eac40baafe750ffc7eb37f0abf2a5a517917b722e31ed3acf018f9e206a3ff28f34bfec85c14ae9c380a53f6e6bf356489914975af003d0aeae1dbf7c932a17c369fa823c0becd34affc7ea778a2bdc9b7c886c8d8b24d4ea49d6210460497342d197466f015142cde01b2b4661e6830ccb776700992bc7b07c30df81589fc6bf5c37c21284de38f7ba69a7e062530113de4714d0ffb66ae46e2cc8931037ddd3a80c865b25ab4df5c3329e3764f74ee9229fe93411f05473e0e6e64789dd46082c184e28d247b028706ccf0f46bbe27dc94ee58486849ead304ef06fb8d73781c524a895ec099a9fb391253ce61b82fcf95edeacfa769867557fde8fcc3997459f42a75851ba7caf09ca01013409ad111a608967e82f8b0ac4b2714ccebe114bd7ff177259830f6c7806925d1aa8220a501c7d7d7383e25b52b46f18cf83a0416a16930b0288281d687bff8c13f16e3736c3d63396ffc7af750e8a625d4092cc99084e0cdefa269e6d4e7b6a0d31e1e12385c25fd1410cee48e00aa26228d20687dceebb731c5df65d9116b98af1cfbbe6f8d6f735c4cddf3c05cf0393e20fa97dbed088979418e60855c2d57eb4accea9363dfc1c0f218f21e2b6130519205bf2f5bf422457ef9d0e670874b57ffaedc567187c1dbabff0e829c66196542eb7bec3f559adfaba0a7b9d2aecfc7d7e0d9a3dc0fa4fca77b116025e13858a1e743ff6c035d90a5e5f6aeda5482b20f7cbdfe309f70bd9669356f87b97248b6802ae372a0459f47fc8d460fc0cdfb3bbc734566ed22ef4a93d4b0d802cd500d4f38e041b57f2de4e83fb6e68eb6e39e38ef70f773ada0be77965c875f41ef5001a87f163cd9486c7b2e775aa8d07f26834381b268fea09c9282e0b6ed5aa0fb12691001b839acb048d93785e76a5b8616b2b1f27decf53bb0c140d1da9e3a2b529a66924d2d4090fbd97168d593f708d8c31ea4c6bbd6c8e52cc395a232ee1f78e55ffa54f5d5edd119a5d2918099825fbd369f6586dfc186bcdedf861147c3f572587899d4a46b27a6a800a38c4a7780d0ed3a4e50008ef283744303b14da51160a2088e6a59dc04ae3b449c30ac4733114192ad2263d8e3f4651352f25713913e41e0bec3ebbf1e6f025f7b2430709214183cbb098f8a1a007d4c0b4d4174570ebdcec4aebb9946cce604a6648580dce525ca115ce9b45a403c9ee2524f57f72d1ae67c8f556aaf14376d9b9fdbc161a7b11694bed2f819c6558b2793b193e40334f9d8012f976313eb058897ddc1a01430e8d9f078d265731f2911dfa4609db81ce2a3a66e76113780399319b41e9fbed8caccbc2abb884bc2178daa9d23d26847fe72b55d40aeba137a3675500d32b14184f86805a4d15f1a4ff9b40dbaeadd8b2157964cbe265fce4977352d438164ffc7ebf621815ee702993ae2ac440e5cbdf5c3c8928fef77dfa19aeefc198fa5c481c94f5c71cf22d99d74edc3b207636d36b5f3a15da9ca65ec5eaaf106efe8afc9a2996febcda00c6978e0671cec7e546dd69bb42f31d4d32b1cd224224efbebcd72c15637aaa7f2c83cff056cc3dc512928a202cfab081a91209561cc14f65eb9563926bea01e9bf0dfe3565bec441a525c3405ce865fd6155923ce6e062969221bc84bc26b14ecedd2d9a42df98156e66807d461121b5aaedff47edd500db08f904364e60c6dbee07a826ab5c61fd514a31429a5e9ffa66ae80dd02066531bb0fc1251f0c38e7101d4d671637742b2fabda5184e7d08e401b9543b246c9ccf090e4cd1fc806730a9e8b2607fdee7f74df52c871c5bcf4fd72c31ea85082d0083b09a9178bbb20d82d4890e75feef9f18779f3c2e8b74f56b1d0e6f226f3d02d2bd94b4271a87a9ebfda66de6784860499d4604969176a1aff5c357e8edd9b8a3bed729a6b3a617d7dd69773682f0037a37cc9e5ae6e5eb8ef8e947387e056fff4b8c7be5c4101c6d8377a8f20a56d61c7d42f9442da37e17151054e8700480d55bebbe20cf03ace1639a97267dc4f82dd0d761928e52189251585981121f4c684251bb2ea14eba3c002f4c760a6bf32c1ee5ad14fb43db5a7f5644cb5d77356ad3760d426c3f8bcdfe9aa1b5239b4df4b12ca9b404ae94f998b1971278a82a8bea36777ec29d31f5e05eb5d8dd887e73af7dc2e33400a0c3c29dd0ff3eb7b1c30a1fe80f681de7dd81c954bcee502b72390edb3f33cf2c43f724964026407398807d430e8ea5c4ee1f2bc859fffb5f59680953db87e8d121212ae9ee4b78104c3fbec8637e940fdb91a2086644aace7c6c5166181e9248b1c5da8307db4772cdca943e6d7dc082607bbb9b4e9beb3b24f2ece924b029fc7a17747d98dbba2078b6ec2ec6e53a0cf7f77c2c4067c57257710f1beff4a22fc8b488bce52168916bef270e0c39811a559256c51d5e6448740a45216637bbdfdad262fb616c69254a6644a34e339734ba3ed6b2300f78c9929ed94493a14255e4f0cc08a7df8dbe68bdfdee15c9f09c66d33dde9193ce8e9292bf97899a1c4c11ea5f3b06e68d170eb61364cf51f2e01b462c52971e13cc55d833c5d10f0f88d0ea52eabb100a0028858afe9ecea4d0001a69880e82d93a313d99cbc11672a67e435a4f34f5cf046da63a06d342b891b9d381a9c8d643c50579c6db2333ce6c3b0d7b271093442e7f17fdc921ca2b141c3ad44f81f77b60e96d06c3cae1732b9f6eebde0b8c9ebdf8b9a71403ab5915f921855bf5e13c03bebfbb83c03c87e901ba4f6519191f69302e9ab6cf960b790d322cbe3fd525e2c9378d82f5f2250f133ed98f4322cd639400852ae576542963527a5405b84386a28d5f89d1f1b1ae49ca92be2334904e257e5cf913974d24b87e88f3856cd7ba8e401f8f7d67e183edbf2cbff1b1df36d1e44eee38d854594d4037d54671daba36f364285f132c4d60728af8b00e547d9fcbe57531119add866a8b080e575dffb1542f3f034d629e69b2b27b00b7ad652567b5178d5e476887dcf9332dbc7442b3eb681e3ad4e37c5456a481e87f8706cf2561d644411aabee0561381660bfb7688df33dfcf0f66f0c41d11476c26a14e067b114516fa5624bcb3644de06ebf826020c829cec7c7a37240a73a76ef188437d871e01544c637ba3c2b6a9c4e79cd58294b2d561debd3fe7b5349a8647f3ac5d76faffb575858bcfda272a2e5ef25681eaaadb0f73ce41d7cf1330c0d8bb3c8fbb266f0cfda8a6c6f7d225e8a7e7bf359a4cedb6c616d8413a6d15eefe42aab64f2bc8fe8236154484491e55f954411605b426f4b82f2baf3b9841af9624207b97b25bf747e78b3624ba0828d8e61c7810791774667ece537233e79b15c6bdae424408f3e9c971a791440fcf4540f8e5fe3fb1a9ab5853e618ff19bbd482f9c74f38702db5fec281a93ba0fb4bddde03ea33e653caeb9541f01d482160e73df28b920ca1c1f78a76c9df9750fd9c527932722bc41623a5a61a6b3aad0a599e6108dfc4547d364eb8ced249ea33f7020a58ab51cfc18770f7cbd24aeef367b4d34bb67d0076faf71337372b16e63160b32040dc73e115f477ade5b4c9ec57abfe95ed5534256cf0c633c5f46cc3967bf7127b63f6f6fe63f62b11ec4552d81559eb69e2f92fd34805007a433ad1c77a3738441eed0e9575efd3c86cebb98d55c741ea2a7a1d1b81a6044150843539b1800569a40ca691b21df547ef9876fe657872231164981ffd5647f8a0bf56a406dc3dc0acea77d7889d6782f5ef06172446d337170503f8998abc5e71f3750b765eefaf4b9d7a16704d795a4af579eaa9c4791b44803151552149fe74a520123c6c328edf6e3f2aa93cf1ca9644b522040791c0d1732d9e009fd94827aef0be44077f42b4a8d0d18df23ab652d1f0031c63e09ded6c7aaf8dd22fe13309a55bf4a71148a67370833bc827aefa962ac79812c872b082d52ce02bbc8bec9fc11259b78031d9d2af5c91fb3ada33e6f40613031614d0af5971a126add4d5d4e2275aaa0cc0cac0b66fbbfe399b008b2e7e25f03238f993739a654f17fef7cbdd100f40711cfa9d495ef351b93401294071c86da67475a1b54d57a9f01a3096803633ffc460d9d77a706037c35ce79e02005a550806be2f218c1b0de785d8ee43472e2afafa2bd0342ea8d523fd0d081896860e104aa69384054c9508828323dc9663b93d908faaffffa5c8543199896bdec07fb13b82c938b1d13a810199dc85ad070246426a7ccc8085189ff203fc30e985943ff06f69a69353372ddab29dafcf070796c7f1b75710f07eef770293f1e34e803a1dea686bfaf905a8bffef7337d41cb84f336c7a67bd2fb96f639f7f85f73629745865708fd1560ce84c467ddf7106caf67e39137c9686cf9f7c2c93b96fba66089c141bbae82f23565b1e7bc8f3246300fabdaa868111235cbc7e323880ea52ec7511f0a39252617aea0c5bfbb69dbe80a6a6ba0194383badc60826f968f1e68a75909abc37660b20797b8667c38929a26f4cdc5967cefd65471917c990e7015257449ebb6d4ac1673814242c9168c77b5574c24362342ddf71af921410ed5dd4ef528cafc55ecc0f5f0ef2d72bafe3f5d25f9a0c04f38bd76f09ff4aaf3db3a5e476d75650b417611e67907a74875438b8de97f17e1cc9178cf2c8758938023db472208ac32397c631d23a62d4f800f198c2a921537ebcf3f04b3193784d28c55676365a61aac43bea429b53d67f3a44bed572996ef4f162055b56bfa5af1099cd45e40c49b974e2c0168242f3e0cef07fd31c4f676aaa02ffbdcae55a1fab8e19280078893cd9e216a88f67d408fd60799007b9c345f014a9495cbd3bf7fefb9b9c4dd423ff05890b042aac9409bdf3368107867c1affbb292c5368c6c6bca93b968672ae693eecd204ea28cd9808c0fc3bea7de078ee0189dc2b40b36bd00ed560d997ce0135c0d8e9b305440d335b7266f992a341948a793f2f087c7c205fe8d4786bcce36be956533e622d4eed6652e7c9c1d3a2e3f8419fe108eb559c0ea1f12efccade94f149bacc2eb12d110b2854621ad75866b15ed890167ac00bb91e3c4db6450b8ec681c8960213acb14f7d233e4ebbfba9e47bad5133bd1a6e314b594eb7ccd1d2ac9bd04847201f1b8fa532c6e31438b0f51c0f24b73af7829d96f682bbefc1f699e262e59f02125eeefa838fcd98429c4d81863e869dfd8d45d5fa2fd91fc02e3c5b2728cdc3f6ee7d34af08e46af39e81b59ebd8a56fa024a17423befb5af714ad994e5469d29d7a756e62d0793d1b5eb5b043d7b0310747dd2fcef8cd051e3c81dd5c7e1ee61fc76b59f726dd009aefbd8ffe31bf73a87a8fc0d2330f8be620e060fa6f281a61e8facb52de02aca48b2f27e2cdf592e9134baf193270c951a2c1c65cc7261a2d0e17374449120e8ae16a0ebcedd0c0ef2005da4f43769a357c", [[], []]}, 0x12b0) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$bt_rfcomm(0x1f, 0x0, 0x3) semctl$GETALL(0x0, 0x0, 0xd, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 09:19:28 executing program 3 (fault-call:3 fault-nth:0): r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:28 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3f00, 0x0, 0x0, 0x60, 0x0) 09:19:28 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 392.862849][T13807] FAULT_INJECTION: forcing a failure. [ 392.862849][T13807] name failslab, interval 1, probability 0, space 0, times 0 [ 392.930515][T13807] CPU: 0 PID: 13807 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 392.940827][T13807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 392.951284][T13807] Call Trace: [ 392.954851][T13807] dump_stack+0x197/0x210 [ 392.959213][T13807] should_fail.cold+0xa/0x10 [ 392.963978][T13807] ? setup_fault_attr+0x220/0x220 [ 392.969129][T13807] ? ___might_sleep+0x163/0x2c0 [ 392.974190][T13807] __should_failslab+0x121/0x190 [ 392.979257][T13807] should_failslab+0x9/0x14 [ 392.983962][T13807] kmem_cache_alloc_node+0x268/0x740 [ 392.989422][T13807] ? lockdep_hardirqs_on+0x421/0x5e0 [ 392.994735][T13807] ? trace_hardirqs_on+0x67/0x240 [ 393.000249][T13807] copy_process+0x3be/0x7230 [ 393.005110][T13807] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 393.011023][T13807] ? kstrtouint+0x142/0x1a0 [ 393.015561][T13807] ? __cleanup_sighand+0xc0/0xc0 [ 393.020915][T13807] ? find_held_lock+0x35/0x130 [ 393.025722][T13807] _do_fork+0x146/0x1090 [ 393.030321][T13807] ? copy_init_mm+0x20/0x20 [ 393.034849][T13807] ? __kasan_check_write+0x14/0x20 [ 393.040161][T13807] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 393.046246][T13807] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 393.051557][T13807] ? wait_for_completion+0x440/0x440 [ 393.056866][T13807] __x64_sys_clone+0x19a/0x260 [ 393.062910][T13807] ? __ia32_sys_vfork+0xd0/0xd0 [ 393.067782][T13807] ? ksys_write+0x1cf/0x290 [ 393.072303][T13807] ? lockdep_hardirqs_on+0x421/0x5e0 [ 393.077593][T13807] ? trace_hardirqs_on+0x67/0x240 [ 393.082623][T13807] do_syscall_64+0xfa/0x790 [ 393.087160][T13807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.093058][T13807] RIP: 0033:0x45af49 [ 393.096954][T13807] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.116685][T13807] RSP: 002b:00007fa06d621c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:19:29 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 393.125094][T13807] RAX: ffffffffffffffda RBX: 00007fa06d621c90 RCX: 000000000045af49 [ 393.133671][T13807] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 393.141642][T13807] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 393.149650][T13807] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa06d6226d4 [ 393.158831][T13807] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000004 09:19:29 executing program 3 (fault-call:3 fault-nth:1): r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:29 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a, 0x0, 0x0, 0x60, 0x0) 09:19:29 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4000, 0x0, 0x0, 0x60, 0x0) 09:19:29 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:29 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa1, 0x0) [ 393.476622][T13833] FAULT_INJECTION: forcing a failure. [ 393.476622][T13833] name failslab, interval 1, probability 0, space 0, times 0 09:19:29 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa2, 0x0) 09:19:29 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 393.751151][T13833] CPU: 1 PID: 13833 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 393.761423][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 393.771698][T13833] Call Trace: [ 393.775028][T13833] dump_stack+0x197/0x210 [ 393.779380][T13833] should_fail.cold+0xa/0x10 [ 393.784086][T13833] ? setup_fault_attr+0x220/0x220 [ 393.789234][T13833] ? ___might_sleep+0x163/0x2c0 [ 393.794119][T13833] __should_failslab+0x121/0x190 [ 393.799085][T13833] should_failslab+0x9/0x14 [ 393.803643][T13833] kmem_cache_alloc_node_trace+0x274/0x750 [ 393.809604][T13833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 393.816076][T13833] ? debug_smp_processor_id+0x33/0x18a [ 393.821538][T13833] __get_vm_area_node+0x12f/0x3b0 [ 393.826821][T13833] __vmalloc_node_range+0xce/0x790 [ 393.831980][T13833] ? _do_fork+0x146/0x1090 [ 393.836440][T13833] ? kmem_cache_alloc_node+0x385/0x740 [ 393.842287][T13833] ? _do_fork+0x146/0x1090 [ 393.846758][T13833] copy_process+0x9aa/0x7230 [ 393.851352][T13833] ? _do_fork+0x146/0x1090 [ 393.855769][T13833] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 393.861485][T13833] ? kstrtouint+0x142/0x1a0 [ 393.866198][T13833] ? __cleanup_sighand+0xc0/0xc0 [ 393.871279][T13833] ? find_held_lock+0x35/0x130 [ 393.876051][T13833] _do_fork+0x146/0x1090 [ 393.880291][T13833] ? copy_init_mm+0x20/0x20 [ 393.884880][T13833] ? __kasan_check_write+0x14/0x20 [ 393.889988][T13833] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 393.895537][T13833] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 393.901303][T13833] ? wait_for_completion+0x440/0x440 [ 393.906614][T13833] __x64_sys_clone+0x19a/0x260 [ 393.911376][T13833] ? __ia32_sys_vfork+0xd0/0xd0 [ 393.916368][T13833] ? ksys_write+0x1cf/0x290 [ 393.920878][T13833] ? lockdep_hardirqs_on+0x421/0x5e0 [ 393.926159][T13833] ? trace_hardirqs_on+0x67/0x240 [ 393.931371][T13833] do_syscall_64+0xfa/0x790 [ 393.935908][T13833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 393.941934][T13833] RIP: 0033:0x45af49 [ 393.945957][T13833] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 393.965646][T13833] RSP: 002b:00007fa06d621c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 393.974058][T13833] RAX: ffffffffffffffda RBX: 00007fa06d621c90 RCX: 000000000045af49 [ 393.982029][T13833] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 393.990004][T13833] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 393.998134][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa06d6226d4 [ 394.006104][T13833] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000004 [ 394.023199][T13833] syz-executor.3: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 394.085035][T13833] CPU: 1 PID: 13833 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 394.094981][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 394.105416][T13833] Call Trace: [ 394.108772][T13833] dump_stack+0x197/0x210 [ 394.113319][T13833] warn_alloc.cold+0x87/0x164 [ 394.118027][T13833] ? zone_watermark_ok_safe+0x260/0x260 [ 394.123812][T13833] ? kmem_cache_alloc_node_trace+0x398/0x750 [ 394.130053][T13833] ? __get_vm_area_node+0x2e7/0x3b0 [ 394.135315][T13833] __vmalloc_node_range+0x44c/0x790 [ 394.140672][T13833] ? kmem_cache_alloc_node+0x385/0x740 [ 394.146346][T13833] ? _do_fork+0x146/0x1090 [ 394.150863][T13833] copy_process+0x9aa/0x7230 [ 394.155617][T13833] ? _do_fork+0x146/0x1090 [ 394.160057][T13833] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 394.165813][T13833] ? kstrtouint+0x142/0x1a0 [ 394.170356][T13833] ? __cleanup_sighand+0xc0/0xc0 [ 394.175323][T13833] ? find_held_lock+0x35/0x130 [ 394.180224][T13833] _do_fork+0x146/0x1090 [ 394.184502][T13833] ? copy_init_mm+0x20/0x20 [ 394.189044][T13833] ? __kasan_check_write+0x14/0x20 [ 394.194355][T13833] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 394.199937][T13833] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 394.205415][T13833] ? wait_for_completion+0x440/0x440 [ 394.210745][T13833] __x64_sys_clone+0x19a/0x260 [ 394.215620][T13833] ? __ia32_sys_vfork+0xd0/0xd0 [ 394.220511][T13833] ? ksys_write+0x1cf/0x290 [ 394.225057][T13833] ? lockdep_hardirqs_on+0x421/0x5e0 [ 394.230702][T13833] ? trace_hardirqs_on+0x67/0x240 [ 394.235761][T13833] do_syscall_64+0xfa/0x790 [ 394.240296][T13833] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 394.246550][T13833] RIP: 0033:0x45af49 [ 394.250691][T13833] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 394.271062][T13833] RSP: 002b:00007fa06d621c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 09:19:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='./file0\x00', 0x0, 0x5010, 0x0) chroot(&(0x7f00000004c0)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x0) [ 394.279833][T13833] RAX: ffffffffffffffda RBX: 00007fa06d621c90 RCX: 000000000045af49 [ 394.288120][T13833] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 394.296258][T13833] RBP: 000000000075bf20 R08: ffffffffffffffff R09: 0000000000000000 [ 394.304905][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa06d6226d4 [ 394.313091][T13833] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000004 09:19:30 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa3, 0x0) 09:19:30 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:30 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x300, 0x0, 0x0, 0x60, 0x0) 09:19:30 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4800, 0x0, 0x0, 0x60, 0x0) [ 394.355556][T13833] Mem-Info: [ 394.358947][T13833] active_anon:127511 inactive_anon:223 isolated_anon:0 [ 394.358947][T13833] active_file:7868 inactive_file:110185 isolated_file:0 [ 394.358947][T13833] unevictable:0 dirty:99 writeback:0 unstable:0 [ 394.358947][T13833] slab_reclaimable:15629 slab_unreclaimable:99486 [ 394.358947][T13833] mapped:60304 shmem:310 pagetables:1880 bounce:0 [ 394.358947][T13833] free:1154126 free_pcp:677 free_cma:0 [ 394.558320][T13833] Node 0 active_anon:514336kB inactive_anon:892kB active_file:31332kB inactive_file:440740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:241216kB dirty:392kB writeback:0kB shmem:1240kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 288768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 394.603187][T13833] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 394.630421][T13833] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:19:30 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:30 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:30 executing program 1: clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x492f01) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000180)={0xa, 0x0, [{0x5, 0x84eb, 0x8, 0x3f, 0xff, 0x7fffffff, 0x4}, {0xa, 0x9, 0x1, 0x8000, 0x7, 0x3, 0x3519}, {0x0, 0x1, 0x0, 0x180, 0x2, 0xffffffc1, 0x3}, {0x8000000d, 0x8000, 0x1, 0x7, 0x0, 0x6, 0xdc}, {0x2, 0x2, 0x6, 0x1f, 0x100, 0x5, 0x401}, {0x2, 0x80, 0x0, 0xfffffff9, 0x7, 0x5eb5, 0x8d7c}, {0x80000019, 0x8, 0x0, 0x9, 0x3f, 0x2, 0x6}, {0x4, 0xffffff81, 0x1, 0x100, 0x7, 0x7, 0x3}, {0x1, 0x8, 0x9, 0x2, 0x401, 0x6, 0xfffffffb}, {0x80000019, 0x1, 0x2, 0x4, 0x1f, 0x800, 0xe1b3}]}) r1 = memfd_create(&(0x7f0000000140)='$.6/%cpuset]\x00', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 09:19:30 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa4, 0x0) 09:19:30 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x500, 0x0, 0x0, 0x60, 0x0) 09:19:30 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c00, 0x0, 0x0, 0x60, 0x0) 09:19:30 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 394.682511][T13833] lowmem_reserve[]: 0 2532 2532 2532 2532 [ 394.682538][T13833] Node 0 DMA32 free:833216kB min:36068kB low:45084kB high:54100kB reserved_highatomic:0KB active_anon:512040kB inactive_anon:896kB active_file:31236kB inactive_file:440736kB unevictable:0kB writepending:424kB present:3129332kB managed:2596512kB mlocked:0kB kernel_stack:9536kB pagetables:7332kB bounce:0kB free_pcp:2492kB local_pcp:1164kB free_cma:0kB 09:19:31 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:31 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa5, 0x0) 09:19:31 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x600, 0x0, 0x0, 0x60, 0x0) 09:19:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000280)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x152) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, '\x00', '\x00', "20040100"}, 0x28) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) mmap(&(0x7f00004cf000/0x2000)=nil, 0x2000, 0x2, 0x1011, r2, 0x40000000) sendto$inet6(r0, &(0x7f00000005c0), 0xe0ffffff, 0x63e000000000000, 0x0, 0xd8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r5, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r6 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000840)={{0x0, r7, r8, r9, r8, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r10 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r10, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r11 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r10, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r11, 0x1, &(0x7f0000000840)={{0x0, r12, r13, r14, r13, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) sendmsg$nl_route(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newroute={0x200, 0x18, 0x4, 0x70bd26, 0x25dfdbfe, {0x2, 0x0, 0x80, 0x34, 0xfd, 0x4, 0xc8, 0xa, 0x2800}, [@RTA_UID={0x8, 0x19, r7}, @RTA_UID={0x8, 0x19, r14}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_METRICS={0x91, 0x8, "9f2d2040c9bb266c4d849ef63354f9ab150e2b4b25aab153612e39fd3a4767a9d46d7c35a1a92cbaa6568d4979e64d296746607a864e33853824596eb22f291e8459679f789e16cfbb67e67957a511d67b85b4db56db9f2503d584f2764f0d940e79d9fd1e74e0bd2a83365dacb497eb1234529bd75e381ea08c965ca0723af7d26dac5922208a3edf757cfc61"}, @RTA_PRIORITY={0x8, 0x6, 0x7}, @RTA_METRICS={0xd4, 0x8, "0d0a5570ca6cedd68e50981fb85b8e63b1233b5c6d950619bb20107b3e8572fe5f14daf6d88b4bfb64a373046d56989a6d4710382c4cfbce69be3b1337439316039fe5c4ef1f42b3715b5712e7c54cfae08d16bb0fbe0245e327c9e1395b85ed3a45932df72d768d4a27a9f874f647f1056196522c0fedbcbe429660823c9c6f387d69e8aa3dbea07d8057ec407263d0d65e750b6463ee9179e8a91c52629aaaf89925eb567e6f2526f3e958fccb05542d9f5c3b28cc1941bd9a4046d61b59698bb04edc5b7817dbabc473dfe1a4e576"}, @RTA_FLOW={0x8, 0xb, 0x1}, @RTA_ENCAP_TYPE={0x6}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_ENCAP={0x42, 0x16, @generic="6255bfacc4c2154025c6fce5b2f4a7592e312f70bfc8aae44d5b9023e5d9c8bdf47845260cb9ab3391a16a921482bfb8c605b20796df339c5c85c4b415ea"}]}, 0x200}, 0x1, 0x0, 0x0, 0x48090}, 0x20000000) 09:19:31 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 394.682581][T13833] lowmem_reserve[]: 0 0 0 0 0 09:19:31 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 394.682603][T13833] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 09:19:31 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:31 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6800, 0x0, 0x0, 0x60, 0x0) 09:19:31 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa6, 0x0) [ 394.682637][T13833] lowmem_reserve[]: 0 0 0 0 0 09:19:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0xffffff0f00000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x318, 0x1b0, 0x1b0, 0x0, 0x1b0, 0x1b0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'ip6gretap0\x00'}, 0x0, 0x190, 0x1b0, 0x0, {}, [@common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) 09:19:31 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x700, 0x0, 0x0, 0x60, 0x0) 09:19:31 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 394.682659][T13833] Node 1 Normal free:3767568kB min:53820kB low:67272kB high:80724kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB 09:19:31 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa7, 0x0) 09:19:31 executing program 1: perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00000004c0)=""/183, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580), 0x8, 0x10, 0x0}, 0x78) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x600200, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000180)) read$FUSE(r0, &(0x7f0000000240), 0x2305e2b7) write$FUSE_CREATE_OPEN(r0, &(0x7f0000001340)={0xa0, 0x0, 0x2, {{0x800000000007}, {0x0, 0x0, 0x100000}}}, 0xa0) r2 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240), 0x1000) socket(0xa, 0x0, 0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000001340)={0xa0, 0x0, 0x0, {{}, {0x0, 0x0, 0x100000}}}, 0xa0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x6, 0x0, 0x0, 0x800, &(0x7f0000000680)={[{@fat=@uid={'uid', 0x3d, 0xee01}}, {@nodots='nodots'}, {@dots='dots'}], [{@hash='hash'}, {@uid_lt={'uid<'}}, {@fsname={'fsname', 0x3d, 'syzkaller\x00'}}, {@uid_eq={'uid'}}, {@fsname={'fsname', 0x3d, ']cgroup+user'}}]}) [ 394.682697][T13833] lowmem_reserve[]: 0 0 0 0 0 09:19:31 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x810c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 394.682718][T13833] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB 09:19:32 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa8, 0x0) 09:19:32 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c00, 0x0, 0x0, 0x60, 0x0) [ 394.682798][T13833] Node 0 DMA32: 1260*4kB (UME) 274*8kB (UME) 68*16kB (UME) 87*32kB (UME) 19*64kB (UM) 20*128kB (UM) 32*256kB (UME) 34*512kB (UME) 18*1024kB (UM) 4*2048kB (ME) 187*4096kB (UM) = 833056kB 09:19:32 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 394.682886][T13833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 394.682943][T13833] Node 1 Normal: 4*4kB (ME) 76*8kB (UM) 198*16kB (UME) 88*32kB (UM) 45*64kB (UME) 18*128kB (UM) 7*256kB (U) 4*512kB (UE) 2*1024kB (ME) 3*2048kB (UME) 914*4096kB (M) = 3767568kB 09:19:32 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8111, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:32 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x10ed, 0x0, 0x0, 0x60, 0x0) [ 394.683039][T13833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 09:19:32 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xa9, 0x0) [ 394.683051][T13833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.683063][T13833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.683075][T13833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 394.683081][T13833] 46228 total pagecache pages [ 394.683089][T13833] 0 pages in swap cache 09:19:32 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = userfaultfd(0x0) r2 = socket(0x200000000000011, 0x3, 0x0) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000180)) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000140)={0xffff, 0x4, 0x8, 0x4}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$isdn_base(0x22, 0x3, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}, 0x200000}) 09:19:32 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xaa, 0x0) [ 394.683098][T13833] Swap cache stats: add 0, delete 0, find 0/0 [ 394.683104][T13833] Free swap = 0kB [ 394.683109][T13833] Total swap = 0kB [ 394.683116][T13833] 1965979 pages RAM [ 394.683128][T13833] 0 pages HighMem/MovableOnly [ 394.683133][T13833] 345324 pages reserved [ 394.683138][T13833] 0 pages cma reserved [ 395.357179][ C0] net_ratelimit: 11 callbacks suppressed [ 395.357191][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 09:19:32 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xab, 0x0) [ 395.754618][T13988] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables [ 395.754932][T13988] ipt_CLUSTERIP: Please specify destination IP [ 396.095702][T14018] CUSE: unknown device info "" [ 396.095712][T14018] CUSE: DEVNAME unspecified [ 396.178798][T14029] FAT-fs (loop1): Unrecognized mount option "hash" or missing value 09:19:33 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xac, 0x0) 09:19:33 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xad, 0x0) 09:19:33 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1f00, 0x0, 0x0, 0x60, 0x0) 09:19:33 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xae, 0x0) 09:19:33 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7400, 0x0, 0x0, 0x60, 0x0) 09:19:33 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:33 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2000, 0x0, 0x0, 0x60, 0x0) 09:19:33 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xaf, 0x0) 09:19:33 executing program 1: read(0xffffffffffffffff, &(0x7f00000002c0)=""/11, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) creat(&(0x7f0000000300)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x400000000000000a) r0 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000500), 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r0}, 0x0, &(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x20000000, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xc5) 09:19:33 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a00, 0x0, 0x0, 0x60, 0x0) [ 397.855411][T14136] mmap: syz-executor.1 (14136) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 09:19:34 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb0, 0x0) 09:19:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xed10, 0x0, 0x0, 0x60, 0x0) 09:19:34 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3f00, 0x0, 0x0, 0x60, 0x0) 09:19:34 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000300)={[0x1, 0x0, 0x2, 0x10001, 0x8, 0x400000000, 0x8000, 0x10000, 0x9, 0x1, 0xdb8, 0x6b7d, 0x8000, 0x5, 0xfff, 0x9], 0x1000, 0x141004}) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r3 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="a6690000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000100000000000000084100000000001806000000003a0000"], 0x68}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x400000) ioctl$CAPI_NCCI_OPENCOUNT(r4, 0x80044326, &(0x7f0000000400)=0x3) dup2(r2, r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xc40, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) sched_setattr(r6, &(0x7f0000000140)={0x38, 0x2, 0x1, 0x7f, 0x1, 0x3f, 0x7f, 0x3f, 0x3, 0x5}, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000100)=0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) msgget$private(0x0, 0x10) 09:19:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x2, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x194) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400201) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) inotify_add_watch(r3, &(0x7f00000002c0)='./file0\x00', 0x10000000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYPTR, @ANYRES32=r7], 0x23) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x1, 0xd4, 0xffffffffffffffff, 0x0, [], 0x0, r4, 0x0, 0x1}, 0x3c) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r10 = getegid() r11 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r11, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r12 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r11, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000840)={{0x0, r13, r14, r15, r14, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='fuse\x00', 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00575146705635767763450,user_id=', @ANYRESDEC=r9, @ANYBLOB="cd07a785ad4df161643d", @ANYRESDEC=r10, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030306130302c616c6c6f775f6f746865722c616c0400775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c61707072616973652c66756e633d4b455845435f4b45524e454c5f434845434b2c6673636f6e746578743d756e636f6e66696e65645f752c6d6561737572652c6f626a5f726f6c653dda7d65312c666f776e65723c0000000000000000", @ANYRESDEC=r13, @ANYBLOB=',context=sysadm_u,\x00']) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r16}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r16, 0xffffffff}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r16, 0x100, 0x8}, 0xc) socket(0x0, 0x0, 0x9) 09:19:34 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb1, 0x0) 09:19:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000080)={[{0x3, 0x3, 0x8, 0x4, 0x7, 0x81, 0x2, 0x61, 0x8, 0x7, 0x2, 0x79, 0x7}, {0xfff, 0x1, 0x7f, 0x81, 0x2, 0x9, 0x29, 0xa0, 0x9, 0x6, 0x8, 0x3}, {0x6, 0x7, 0xdb, 0x1, 0x77, 0x1, 0x3f, 0x71, 0x0, 0x6, 0x20, 0x2, 0x6}], 0xffffff0f}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:34 executing program 4 (fault-call:3 fault-nth:0): r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xedc0, 0x0, 0x0, 0x60, 0x0) [ 398.778016][T14207] FAULT_INJECTION: forcing a failure. [ 398.778016][T14207] name failslab, interval 1, probability 0, space 0, times 0 [ 398.838477][T14207] CPU: 0 PID: 14207 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 398.848391][T14207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.858443][T14207] Call Trace: [ 398.861743][T14207] dump_stack+0x197/0x210 [ 398.866076][T14207] should_fail.cold+0xa/0x10 [ 398.870666][T14207] ? setup_fault_attr+0x220/0x220 [ 398.875692][T14207] ? ___might_sleep+0x163/0x2c0 [ 398.880571][T14207] __should_failslab+0x121/0x190 [ 398.885644][T14207] should_failslab+0x9/0x14 [ 398.890166][T14207] kmem_cache_alloc_node+0x268/0x740 [ 398.895461][T14207] ? lockdep_hardirqs_on+0x421/0x5e0 [ 398.900765][T14207] ? trace_hardirqs_on+0x67/0x240 [ 398.905808][T14207] copy_process+0x3be/0x7230 [ 398.910410][T14207] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 398.916133][T14207] ? kstrtouint+0x142/0x1a0 [ 398.920651][T14207] ? __cleanup_sighand+0xc0/0xc0 [ 398.925587][T14207] ? find_held_lock+0x35/0x130 [ 398.930380][T14207] _do_fork+0x146/0x1090 [ 398.934632][T14207] ? copy_init_mm+0x20/0x20 [ 398.939137][T14207] ? __kasan_check_write+0x14/0x20 [ 398.944248][T14207] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 398.949794][T14207] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 398.955082][T14207] ? wait_for_completion+0x440/0x440 [ 398.960373][T14207] __x64_sys_clone+0x19a/0x260 [ 398.965135][T14207] ? __ia32_sys_vfork+0xd0/0xd0 [ 398.969999][T14207] ? ksys_write+0x1cf/0x290 [ 398.974532][T14207] ? lockdep_hardirqs_on+0x421/0x5e0 [ 398.979824][T14207] ? trace_hardirqs_on+0x67/0x240 [ 398.984873][T14207] do_syscall_64+0xfa/0x790 [ 398.989389][T14207] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.995410][T14207] RIP: 0033:0x45af49 [ 398.999310][T14207] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.018928][T14207] RSP: 002b:00007f66c6632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 399.027468][T14207] RAX: ffffffffffffffda RBX: 00007f66c6632c90 RCX: 000000000045af49 09:19:35 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb2, 0x0) [ 399.035469][T14207] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 399.043446][T14207] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 399.051536][T14207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66c66336d4 [ 399.059511][T14207] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000005 09:19:35 executing program 1: perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4480, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000), 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r3, 0x5606, 0x79) 09:19:35 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20020180}, 0x20000) 09:19:35 executing program 4 (fault-call:3 fault-nth:1): r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:35 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4000, 0x0, 0x0, 0x60, 0x0) 09:19:35 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_PREFSRC={0x8, 0x7, @remote={0xac, 0x2}}]}, 0x24}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080), &(0x7f0000000100)=0x4) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="edbf259659a927b189017950e3bc25e604851088077877f8f376519576f04f73e3d394a55ec727ff9847524ca3d7b4af1a6e4a80c4807c54283808838692df5950052ddbfb76642184e7529d543580d7fa4e29f837adcba637654384a6216ef0922dc9f2caf2f36534e331f3ee4444533fa8b127d7d299d1507bcbd2d1c9e2ec468e7c8c5602c5a4a41867e9db8bc01b1d20b12be472f2f78b417cc72628c16cd11cebe63d12f702a739e3ff0839bb2c683cf3b052e706ac939dc8ad8682ce33398cdfaace9d346d6b4bde38400285fdecf49496a65928537f2ffe986690243df5dc326c36504ad61ce40d5867ce789e35d8d61a4c51a6abe01d481c46ea0cb80f95657c9c6179c9e43e088e38e57dae59bbb4a15441f9924340ae45042d715946d691f025228827a2432c72bf6484d466b1452a157718a6cd2323d33de4d5c4d0e34c7baacc951f665ae62e743d0d9ed572414c8d2a8c2a52c273349d57730cc0b7da7a5ed7a476d8fdb73f5073eefdb7e76700295eb5875d0356c16041"], 0xa) close(r2) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f407000000000a", 0x11) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000380)="f98ac693ce6908", 0x7}], 0x1) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfef0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 09:19:35 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb3, 0x0) 09:19:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xff00, 0x0, 0x0, 0x60, 0x0) [ 399.604905][T14241] FAULT_INJECTION: forcing a failure. [ 399.604905][T14241] name failslab, interval 1, probability 0, space 0, times 0 [ 399.741378][T14241] CPU: 0 PID: 14241 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 399.751322][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.761385][T14241] Call Trace: [ 399.764690][T14241] dump_stack+0x197/0x210 [ 399.769040][T14241] should_fail.cold+0xa/0x10 [ 399.773657][T14241] ? setup_fault_attr+0x220/0x220 [ 399.778727][T14241] ? ___might_sleep+0x163/0x2c0 [ 399.783607][T14241] __should_failslab+0x121/0x190 09:19:35 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb4, 0x0) [ 399.788554][T14241] should_failslab+0x9/0x14 [ 399.793064][T14241] kmem_cache_alloc_node_trace+0x274/0x750 [ 399.798880][T14241] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.805124][T14241] ? debug_smp_processor_id+0x33/0x18a [ 399.810604][T14241] __get_vm_area_node+0x12f/0x3b0 [ 399.815642][T14241] __vmalloc_node_range+0xce/0x790 [ 399.820753][T14241] ? _do_fork+0x146/0x1090 [ 399.825170][T14241] ? kmem_cache_alloc_node+0x385/0x740 [ 399.830635][T14241] ? _do_fork+0x146/0x1090 [ 399.835061][T14241] copy_process+0x9aa/0x7230 [ 399.839646][T14241] ? _do_fork+0x146/0x1090 [ 399.844056][T14241] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 399.849758][T14241] ? kstrtouint+0x142/0x1a0 [ 399.854251][T14241] ? __cleanup_sighand+0xc0/0xc0 [ 399.859221][T14241] ? find_held_lock+0x35/0x130 [ 399.863978][T14241] _do_fork+0x146/0x1090 [ 399.868351][T14241] ? copy_init_mm+0x20/0x20 [ 399.872850][T14241] ? __kasan_check_write+0x14/0x20 [ 399.877949][T14241] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 399.883485][T14241] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 399.888770][T14241] ? wait_for_completion+0x440/0x440 [ 399.894054][T14241] __x64_sys_clone+0x19a/0x260 [ 399.898820][T14241] ? __ia32_sys_vfork+0xd0/0xd0 [ 399.903689][T14241] ? ksys_write+0x1cf/0x290 [ 399.908203][T14241] ? lockdep_hardirqs_on+0x421/0x5e0 [ 399.913476][T14241] ? trace_hardirqs_on+0x67/0x240 [ 399.918500][T14241] do_syscall_64+0xfa/0x790 [ 399.922998][T14241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 399.928908][T14241] RIP: 0033:0x45af49 [ 399.932806][T14241] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 399.952672][T14241] RSP: 002b:00007f66c6632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 399.961082][T14241] RAX: ffffffffffffffda RBX: 00007f66c6632c90 RCX: 000000000045af49 [ 399.969145][T14241] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 399.977124][T14241] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 399.985128][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66c66336d4 [ 399.993111][T14241] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000005 09:19:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa8, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x80, 0x2b, [@IFLA_XDP_FD={0x7c, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xadec737bc26c34fb, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa8}}, 0x0) 09:19:36 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb5, 0x0) 09:19:36 executing program 4 (fault-call:3 fault-nth:2): r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:36 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4800, 0x0, 0x0, 0x60, 0x0) [ 400.246339][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:19:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1000000, 0x0, 0x0, 0x60, 0x0) [ 400.326180][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:19:36 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb6, 0x0) [ 400.396834][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.408905][T14286] FAULT_INJECTION: forcing a failure. [ 400.408905][T14286] name failslab, interval 1, probability 0, space 0, times 0 [ 400.443420][T14286] CPU: 1 PID: 14286 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 400.447360][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.453573][T14286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.453581][T14286] Call Trace: [ 400.453606][T14286] dump_stack+0x197/0x210 [ 400.453629][T14286] should_fail.cold+0xa/0x10 [ 400.453650][T14286] ? do_syscall_64+0xfa/0x790 [ 400.453673][T14286] ? setup_fault_attr+0x220/0x220 [ 400.453694][T14286] ? ___might_sleep+0x163/0x2c0 [ 400.453725][T14286] __should_failslab+0x121/0x190 [ 400.453744][T14286] should_failslab+0x9/0x14 [ 400.453758][T14286] kmem_cache_alloc_node+0x268/0x740 [ 400.453784][T14286] ? ___might_sleep+0x163/0x2c0 [ 400.511613][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.514656][T14286] alloc_vmap_area+0x147/0x2080 [ 400.514675][T14286] ? __get_vm_area_node+0x12f/0x3b0 [ 400.514691][T14286] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 400.514718][T14286] ? purge_vmap_area_lazy+0x40/0x40 [ 400.514737][T14286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.514753][T14286] ? debug_smp_processor_id+0x33/0x18a [ 400.514775][T14286] __get_vm_area_node+0x17e/0x3b0 [ 400.514797][T14286] __vmalloc_node_range+0xce/0x790 [ 400.514812][T14286] ? _do_fork+0x146/0x1090 [ 400.514825][T14286] ? kmem_cache_alloc_node+0x385/0x740 [ 400.514842][T14286] ? _do_fork+0x146/0x1090 [ 400.514861][T14286] copy_process+0x9aa/0x7230 [ 400.543163][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.543450][T14286] ? _do_fork+0x146/0x1090 [ 400.543476][T14286] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 400.556230][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.560335][T14286] ? kstrtouint+0x142/0x1a0 [ 400.560365][T14286] ? __cleanup_sighand+0xc0/0xc0 [ 400.560383][T14286] ? find_held_lock+0x35/0x130 [ 400.586972][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.589970][T14286] _do_fork+0x146/0x1090 09:19:36 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000cc0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0x69bf42621f4a47f7}, 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r4, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x48008440) ioctl(r0, 0x1000008910, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x20}, 0x0, 0xa, 0xffffffffffffffff, 0x3) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 400.589996][T14286] ? copy_init_mm+0x20/0x20 [ 400.621863][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.625620][T14286] ? __kasan_check_write+0x14/0x20 [ 400.625639][T14286] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 400.625655][T14286] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 400.625674][T14286] ? wait_for_completion+0x440/0x440 [ 400.625700][T14286] __x64_sys_clone+0x19a/0x260 [ 400.625718][T14286] ? __ia32_sys_vfork+0xd0/0xd0 [ 400.625734][T14286] ? ksys_write+0x1cf/0x290 [ 400.625758][T14286] ? lockdep_hardirqs_on+0x421/0x5e0 [ 400.625777][T14286] ? trace_hardirqs_on+0x67/0x240 [ 400.625803][T14286] do_syscall_64+0xfa/0x790 [ 400.650775][T14272] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 400.655384][T14286] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.655397][T14286] RIP: 0033:0x45af49 [ 400.655413][T14286] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.655420][T14286] RSP: 002b:00007f66c6632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 400.655434][T14286] RAX: ffffffffffffffda RBX: 00007f66c6632c90 RCX: 000000000045af49 [ 400.655443][T14286] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 400.655452][T14286] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 400.655459][T14286] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66c66336d4 [ 400.655467][T14286] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000005 [ 400.799283][T14272] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 400.839202][T14272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 400.871501][T14272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 09:19:37 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c00, 0x0, 0x0, 0x60, 0x0) 09:19:37 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f00000000c0)=0x5, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x47b9a6f114cf205f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:37 executing program 4 (fault-call:3 fault-nth:3): r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:37 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb7, 0x0) 09:19:37 executing program 1: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@rand_addr=0x15, @empty, @remote}, 0xc) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) [ 401.262985][ T169] tipc: TX() has been purged, node left! 09:19:37 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2000000, 0x0, 0x0, 0x60, 0x0) [ 401.414725][T14350] FAULT_INJECTION: forcing a failure. [ 401.414725][T14350] name failslab, interval 1, probability 0, space 0, times 0 [ 401.442634][T14350] CPU: 0 PID: 14350 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 401.452572][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 401.462632][T14350] Call Trace: [ 401.465934][T14350] dump_stack+0x197/0x210 [ 401.470289][T14350] should_fail.cold+0xa/0x10 [ 401.474963][T14350] ? apparmor_cred_prepare+0x4f8/0x7b0 [ 401.480444][T14350] ? setup_fault_attr+0x220/0x220 [ 401.485490][T14350] ? ___might_sleep+0x163/0x2c0 [ 401.490375][T14350] __should_failslab+0x121/0x190 [ 401.495330][T14350] should_failslab+0x9/0x14 [ 401.499845][T14350] kmem_cache_alloc+0x2aa/0x710 [ 401.504711][T14350] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 401.510965][T14350] __delayacct_tsk_init+0x20/0x80 [ 401.517042][T14350] copy_process+0x4be2/0x7230 [ 401.521734][T14350] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 401.527568][T14350] ? kstrtouint+0x142/0x1a0 [ 401.532097][T14350] ? __cleanup_sighand+0xc0/0xc0 [ 401.537051][T14350] ? find_held_lock+0x35/0x130 [ 401.541860][T14350] _do_fork+0x146/0x1090 [ 401.546118][T14350] ? copy_init_mm+0x20/0x20 [ 401.550631][T14350] ? __kasan_check_write+0x14/0x20 [ 401.555754][T14350] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 401.561315][T14350] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 401.566617][T14350] ? wait_for_completion+0x440/0x440 [ 401.571926][T14350] __x64_sys_clone+0x19a/0x260 [ 401.576705][T14350] ? __ia32_sys_vfork+0xd0/0xd0 [ 401.581702][T14350] ? ksys_write+0x1cf/0x290 [ 401.586234][T14350] ? lockdep_hardirqs_on+0x421/0x5e0 [ 401.591543][T14350] ? trace_hardirqs_on+0x67/0x240 [ 401.596582][T14350] do_syscall_64+0xfa/0x790 [ 401.601103][T14350] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 401.607006][T14350] RIP: 0033:0x45af49 [ 401.610922][T14350] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 401.630539][T14350] RSP: 002b:00007f66c6632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 401.638964][T14350] RAX: ffffffffffffffda RBX: 00007f66c6632c90 RCX: 000000000045af49 [ 401.646949][T14350] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 401.654940][T14350] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 401.662922][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66c66336d4 [ 401.670902][T14350] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000005 09:19:37 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb8, 0x0) 09:19:38 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6800, 0x0, 0x0, 0x60, 0x0) 09:19:38 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xb9, 0x0) 09:19:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3000000, 0x0, 0x0, 0x60, 0x0) 09:19:38 executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x8000008000080003, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001300358600000003000100000731003e", @ANYRES32=r1, @ANYBLOB="01ffffef080008010c001a000800020000000400"], 0x2c}}, 0x0) socket(0x10, 0x80002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) 09:19:38 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c00, 0x0, 0x0, 0x60, 0x0) 09:19:38 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xba, 0x0) 09:19:39 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000140)={0xb3, "851a82348874188992ace372e99c7681e288a82beaa1b08bd7889e8411084ed5", 0x3, 0x2, 0xcc, 0x2000, 0x2}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, &(0x7f0000000080)="babc0c1293f76a597deb768d9cbdc505c560a084033d4fe1f4b87c691dceb30756948ed3d93ef2e2532fdc17c83566813824bd469e", &(0x7f0000000200)=""/4096, 0x4}, 0x20) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) getpeername(r4, &(0x7f0000001380)=@can={0x1d, 0x0}, &(0x7f0000001400)=0x80) setsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001440)={{{@in6=@empty, @in6=@remote, 0x4e24, 0x3, 0x4e20, 0x0, 0x2, 0x8c2625ba1f32a418, 0x20, 0x19, r6, 0xee01}, {0x8, 0x1, 0x7fffffff, 0x7, 0x5, 0xffffffffffffff01, 0x10001, 0x5}, {0x471, 0x8, 0x58, 0xffffffffffffff63}, 0x1, 0x6e6bb2, 0x2, 0x0, 0x3}, {{@in6=@local, 0x4d5, 0x6c}, 0xa, @in6=@empty, 0x3505, 0x3, 0x3, 0x4, 0x1, 0x1ff}}, 0xe8) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:39 executing program 4 (fault-call:3 fault-nth:4): r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4000000, 0x0, 0x0, 0x60, 0x0) 09:19:39 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xf, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3c) socket$rxrpc(0x21, 0x2, 0x800000000a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140), 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000340)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000d500e8a400e61bc2dac3de73000000"], &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r6, &(0x7f0000000340)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x9}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x6f1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$KDGKBSENT(r13, 0x4b48, &(0x7f00000006c0)={0xb5, "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"}) r14 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r14, 0x894b, &(0x7f0000000240)) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r0) 09:19:39 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7400, 0x0, 0x0, 0x60, 0x0) 09:19:39 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xbb, 0x0) 09:19:39 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xbc, 0x0) 09:19:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x5000000, 0x0, 0x0, 0x60, 0x0) 09:19:39 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xbd, 0x0) [ 403.764211][T14467] FAULT_INJECTION: forcing a failure. [ 403.764211][T14467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 403.872070][T14467] CPU: 1 PID: 14467 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 403.882003][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 403.892070][T14467] Call Trace: [ 403.895379][T14467] dump_stack+0x197/0x210 [ 403.899822][T14467] should_fail.cold+0xa/0x10 [ 403.904427][T14467] ? setup_fault_attr+0x220/0x220 [ 403.909466][T14467] ? ___might_sleep+0x163/0x2c0 [ 403.914339][T14467] should_fail_alloc_page+0x50/0x60 [ 403.919563][T14467] __alloc_pages_nodemask+0x1a1/0x910 [ 403.924947][T14467] ? copy_process+0x9aa/0x7230 [ 403.929723][T14467] ? _do_fork+0x146/0x1090 [ 403.934154][T14467] ? __x64_sys_clone+0x19a/0x260 [ 403.939134][T14467] ? do_syscall_64+0xfa/0x790 [ 403.943828][T14467] ? __alloc_pages_slowpath+0x2900/0x2900 [ 403.949559][T14467] ? __kasan_check_read+0x11/0x20 [ 403.954600][T14467] ? mark_lock+0xc2/0x1220 [ 403.959086][T14467] ? unwind_get_return_address+0x61/0xa0 [ 403.964729][T14467] ? profile_setup.cold+0xbb/0xbb [ 403.969768][T14467] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 403.976077][T14467] alloc_pages_current+0x107/0x210 [ 403.981211][T14467] __get_free_pages+0xc/0x40 [ 403.985928][T14467] kasan_populate_vmalloc_pte+0x2f/0x1c0 [ 403.991585][T14467] __apply_to_page_range+0x6a1/0xab0 [ 403.996889][T14467] ? memset+0x40/0x40 [ 404.000885][T14467] ? memset+0x40/0x40 [ 404.004882][T14467] apply_to_page_range+0x3b/0x50 [ 404.009848][T14467] kasan_populate_vmalloc+0x66/0x70 [ 404.015057][T14467] alloc_vmap_area+0xc26/0x2080 [ 404.019933][T14467] ? purge_vmap_area_lazy+0x40/0x40 [ 404.025147][T14467] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.031403][T14467] ? debug_smp_processor_id+0x33/0x18a [ 404.036881][T14467] __get_vm_area_node+0x17e/0x3b0 [ 404.041922][T14467] __vmalloc_node_range+0xce/0x790 [ 404.047048][T14467] ? _do_fork+0x146/0x1090 [ 404.051475][T14467] ? kmem_cache_alloc_node+0x385/0x740 [ 404.057299][T14467] ? _do_fork+0x146/0x1090 [ 404.061724][T14467] copy_process+0x9aa/0x7230 [ 404.066351][T14467] ? _do_fork+0x146/0x1090 [ 404.070787][T14467] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 404.076517][T14467] ? kstrtouint+0x142/0x1a0 [ 404.081050][T14467] ? __cleanup_sighand+0xc0/0xc0 [ 404.086002][T14467] ? find_held_lock+0x35/0x130 [ 404.090794][T14467] _do_fork+0x146/0x1090 [ 404.095051][T14467] ? copy_init_mm+0x20/0x20 [ 404.099568][T14467] ? __kasan_check_write+0x14/0x20 [ 404.104693][T14467] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 404.110251][T14467] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 404.115548][T14467] ? wait_for_completion+0x440/0x440 [ 404.120851][T14467] __x64_sys_clone+0x19a/0x260 [ 404.125627][T14467] ? __ia32_sys_vfork+0xd0/0xd0 [ 404.130491][T14467] ? ksys_write+0x1cf/0x290 [ 404.135014][T14467] ? lockdep_hardirqs_on+0x421/0x5e0 [ 404.140311][T14467] ? trace_hardirqs_on+0x67/0x240 [ 404.145360][T14467] do_syscall_64+0xfa/0x790 [ 404.149878][T14467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.155787][T14467] RIP: 0033:0x45af49 [ 404.159692][T14467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.179309][T14467] RSP: 002b:00007f66c6632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 404.187826][T14467] RAX: ffffffffffffffda RBX: 00007f66c6632c90 RCX: 000000000045af49 [ 404.195813][T14467] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 404.203796][T14467] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 404.211776][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66c66336d4 09:19:40 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a00, 0x0, 0x0, 0x60, 0x0) [ 404.219874][T14467] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000005 09:19:40 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00') r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24001334", @ANYRES16=r2, @ANYBLOB="0900000000000000000002000000080002000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:40 executing program 1: r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x98428d57a99b5f44) io_setup(0xc, &(0x7f0000000100)=0x0) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x40004080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_submit(r1, 0x200002f1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x80000000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 404.470522][T14467] warn_alloc: 2 callbacks suppressed [ 404.470543][T14467] syz-executor.4: vmalloc: allocation failure: 32768 bytes, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 09:19:40 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xbe, 0x0) [ 404.658283][T14467] CPU: 1 PID: 14467 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 404.668218][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.678563][T14467] Call Trace: [ 404.681867][T14467] dump_stack+0x197/0x210 [ 404.686303][T14467] warn_alloc.cold+0x87/0x164 [ 404.690984][T14467] ? zone_watermark_ok_safe+0x260/0x260 [ 404.696535][T14467] ? kfree+0x226/0x2c0 [ 404.700621][T14467] ? trace_hardirqs_on+0x67/0x240 [ 404.705660][T14467] ? __get_vm_area_node+0x317/0x3b0 [ 404.710877][T14467] ? __get_vm_area_node+0x2e7/0x3b0 [ 404.716094][T14467] __vmalloc_node_range+0x44c/0x790 [ 404.721305][T14467] ? kmem_cache_alloc_node+0x385/0x740 [ 404.727823][T14467] ? _do_fork+0x146/0x1090 [ 404.732253][T14467] copy_process+0x9aa/0x7230 [ 404.736856][T14467] ? _do_fork+0x146/0x1090 [ 404.741293][T14467] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 404.747026][T14467] ? kstrtouint+0x142/0x1a0 [ 404.751552][T14467] ? __cleanup_sighand+0xc0/0xc0 [ 404.756496][T14467] ? find_held_lock+0x35/0x130 [ 404.761403][T14467] _do_fork+0x146/0x1090 [ 404.765658][T14467] ? copy_init_mm+0x20/0x20 [ 404.770166][T14467] ? __kasan_check_write+0x14/0x20 [ 404.775292][T14467] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 404.780868][T14467] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 404.786206][T14467] ? wait_for_completion+0x440/0x440 [ 404.791519][T14467] __x64_sys_clone+0x19a/0x260 [ 404.796299][T14467] ? __ia32_sys_vfork+0xd0/0xd0 [ 404.801157][T14467] ? ksys_write+0x1cf/0x290 [ 404.805680][T14467] ? lockdep_hardirqs_on+0x421/0x5e0 [ 404.810987][T14467] ? trace_hardirqs_on+0x67/0x240 [ 404.816277][T14467] do_syscall_64+0xfa/0x790 [ 404.820796][T14467] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.826692][T14467] RIP: 0033:0x45af49 [ 404.830709][T14467] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.850350][T14467] RSP: 002b:00007f66c6632c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 404.858773][T14467] RAX: ffffffffffffffda RBX: 00007f66c6632c90 RCX: 000000000045af49 [ 404.866757][T14467] RDX: 9999999999999999 RSI: 0000000000000000 RDI: 0000000000008100 [ 404.874742][T14467] RBP: 000000000075bfc8 R08: ffffffffffffffff R09: 0000000000000000 [ 404.882721][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66c66336d4 [ 404.890698][T14467] R13: 00000000004c1701 R14: 00000000004d6660 R15: 0000000000000005 [ 406.104276][T14467] Mem-Info: [ 406.112552][T14467] active_anon:130514 inactive_anon:228 isolated_anon:0 [ 406.112552][T14467] active_file:8344 inactive_file:109734 isolated_file:0 [ 406.112552][T14467] unevictable:0 dirty:168 writeback:0 unstable:0 [ 406.112552][T14467] slab_reclaimable:16028 slab_unreclaimable:99909 [ 406.112552][T14467] mapped:60404 shmem:316 pagetables:2037 bounce:0 [ 406.112552][T14467] free:1149525 free_pcp:637 free_cma:0 [ 406.213669][T14467] Node 0 active_anon:521956kB inactive_anon:912kB active_file:33236kB inactive_file:438936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:241616kB dirty:668kB writeback:0kB shmem:1264kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 292864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 406.458541][T14467] Node 1 active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 406.608087][T14467] Node 0 DMA free:15908kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.640072][T14467] lowmem_reserve[]: 0 2532 2532 2532 2532 [ 406.646235][T14467] Node 0 DMA32 free:815788kB min:36068kB low:45084kB high:54100kB reserved_highatomic:0KB active_anon:520928kB inactive_anon:916kB active_file:33236kB inactive_file:438936kB unevictable:0kB writepending:668kB present:3129332kB managed:2596512kB mlocked:0kB kernel_stack:9580kB pagetables:7716kB bounce:0kB free_pcp:2580kB local_pcp:1080kB free_cma:0kB [ 406.679602][T14467] lowmem_reserve[]: 0 0 0 0 0 [ 406.692853][T14467] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.725755][T14467] lowmem_reserve[]: 0 0 0 0 0 [ 406.730482][T14467] Node 1 Normal free:3767812kB min:53820kB low:67272kB high:80724kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:140kB inactive_file:0kB unevictable:0kB writepending:4kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:16kB pagetables:4kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.762258][T14467] lowmem_reserve[]: 0 0 0 0 0 [ 406.767302][T14467] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 406.782025][T14467] Node 0 DMA32: 1030*4kB (UME) 73*8kB (UME) 28*16kB (UME) 8*32kB (UME) 6*64kB (UME) 15*128kB (UM) 33*256kB (UME) 35*512kB (UME) 17*1024kB (U) 1*2048kB (M) 186*4096kB (UM) = 815392kB [ 406.800539][T14467] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 406.812642][T14467] Node 1 Normal: 9*4kB (UME) 104*8kB (UM) 198*16kB (UME) 88*32kB (UM) 45*64kB (UME) 18*128kB (UM) 7*256kB (U) 4*512kB (UE) 2*1024kB (ME) 3*2048kB (UME) 914*4096kB (M) = 3767812kB [ 406.834650][T14467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.848577][T14467] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 406.870921][T14467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 406.880919][T14467] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 406.936943][T14467] 46275 total pagecache pages [ 406.941665][T14467] 0 pages in swap cache [ 406.946381][T14467] Swap cache stats: add 0, delete 0, find 0/0 [ 406.960068][T14467] Free swap = 0kB [ 406.964282][T14467] Total swap = 0kB [ 406.980767][T14467] 1965979 pages RAM 09:19:43 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6000000, 0x0, 0x0, 0x60, 0x0) 09:19:43 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:43 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xed10, 0x0, 0x0, 0x60, 0x0) 09:19:43 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xbf, 0x0) 09:19:43 executing program 1: lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xb3, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000280)=0x1000001, 0x1dc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000000c0)=0x1ff, 0xfffffffffffffc33) r3 = creat(&(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x99) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000a8866111b263856a4d4d31f56dfd07a68b8397588c3f16c1ab131ea216764ea274027e84783dd49c9cd78afa0c98b2512ecb5c16a92b79f8603299593bd311bef1fae3f12274e3efc03468b72d328d8116bafddbbd3a11", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000500)={r4, 0x7fffffff}, &(0x7f0000000680)=0x8) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$evdev(r6, &(0x7f0000000200)=[{{0x77359400}, 0x0, 0x8000, 0xfffffff9}, {{}, 0x15, 0xc83, 0x8}, {{0x0, 0x7530}, 0x5, 0x6, 0x20}, {{0x77359400}, 0x17, 0x0, 0x6}], 0x60) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1}, 0x6e) listen(r0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r8, 0x0, 0x484, &(0x7f0000000580)=""/222, &(0x7f00000004c0)=0xde) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r7, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r7, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) getsockopt$inet_int(r7, 0x0, 0x22, &(0x7f0000000380), &(0x7f00000003c0)=0x4) socketpair(0x11, 0x7, 0x81, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 406.985019][T14467] 0 pages HighMem/MovableOnly [ 406.989710][T14467] 345324 pages reserved [ 407.001658][T14467] 0 pages cma reserved 09:19:43 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc0, 0x0) 09:19:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7000000, 0x0, 0x0, 0x60, 0x0) 09:19:43 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc1, 0x0) 09:19:43 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xedc0, 0x0, 0x0, 0x60, 0x0) 09:19:43 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x202120}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x164, 0x1, 0x9, 0x200, 0x70bd2d, 0x25dfdbfd, {0x6, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x4}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x3f}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x3}, @NFCTH_TUPLE={0xd4, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0xd9f92ea1e49c15a8}}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr="5dcef203a395ceceb4bcef4d09a7a71a"}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x5}, @CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @empty}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x11}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x4}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x164}, 0x1, 0x0, 0x0, 0x4004410}, 0x20000080) bind$packet(r4, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14, 0x800) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="600228bd7000fedbdf25180000000a001a00aaaaaaaaaaaa000008000300", @ANYRES32=r6, @ANYBLOB="0c00990001000080000000000a001a0000000000000000000a000600aaaaaaaaaa17000008000300", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0a0006000180c200000300000c0099008080000001000000"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x8000) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:43 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:43 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000300)={0xa30000, 0x1, 0x3ff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x7fff, [], @value=0x200}}) ioctl$SIOCX25GDTEFACILITIES(r3, 0x89ea, &(0x7f0000000340)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0400090001006373756d000000000000000000f7bd34f04f000013000600"/50], 0x4c}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000100)="b805000000b9510000000f01c10f46aacb00020066ba2100b067eeb9800000c00f3235000100000f308eb9800000c06832d6d6004000000fda3030c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x47}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$P9_RRENAMEAT(r9, &(0x7f0000000000)={0x7, 0x4b, 0x1}, 0x7) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000180)={0x5, 0x0, [{0xa, 0x200, 0x2, 0x1, 0x3ff, 0x2, 0x1ff}, {0x80000001, 0x9fc, 0x4, 0x4, 0x7, 0x1, 0xffffffff}, {0x6, 0x7ff, 0x0, 0x8, 0x9, 0x8ea20, 0x3}, {0x80000019, 0x6, 0x1, 0x7, 0xa7e, 0xffff, 0x4}, {0x0, 0x1, 0xf7a760cc60169a2f, 0x9, 0x6, 0x6, 0x3f}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 09:19:43 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc2, 0x0) 09:19:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8000000, 0x0, 0x0, 0x60, 0x0) 09:19:44 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xff00, 0x0, 0x0, 0x60, 0x0) 09:19:44 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc3, 0x0) 09:19:44 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:44 executing program 3: r0 = socket(0x27, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:44 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc4, 0x0) 09:19:44 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x810c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:44 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x242900, 0x0) getsockopt$packet_int(r1, 0x107, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x80800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x7c}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:44 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x400000, 0x0, 0x0, 0x60, 0x0) 09:19:44 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xa000000, 0x0, 0x0, 0x60, 0x0) 09:19:44 executing program 1: r0 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf0c, 0x97}}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001840), 0xc}, 0x0, 0x0, 0xc9b, 0x1}, 0x0, 0xf, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000003880)=' \x00') r2 = perf_event_open(&(0x7f00000003c0)={0x4, 0xffffffffffffffd3, 0x6, 0x3, 0x3, 0x4, 0x0, 0x2, 0x80, 0xa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000380), 0x7}, 0x200, 0xffff, 0x3f6c1bb9, 0x1, 0x0, 0x9, 0x40}, r0, 0x6, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x3, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x1ff, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1020, 0x0, 0x0, 0x7, 0x4, 0x8000008}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="2e00000018008100e00f80ecdb4cb92e0a06012c000cd300e8bd6efb120009000e003f000000000006000500fe2e", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xa8) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2b, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cgroup.controllers\x00', 0x0, 0x0) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001dc0)={&(0x7f0000001d80)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e80)={r7, 0xc0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=0x2, 0x0, 0x0, 0x0, &(0x7f0000001e40)={0x2, 0x2000005}, 0x0, 0x0, &(0x7f0000001e00)={0x1, 0x9, 0x30, 0xdc4}, &(0x7f0000001880)=0x6f, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=0x5}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001680)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000001800)=':\x00', r8}, 0x30) perf_event_open(0x0, r9, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='wls\x00\x00\x00\x00\x00\x00', r6}, 0x10) recvmsg(0xffffffffffffffff, 0x0, 0x40000000) recvmsg$kcm(r5, &(0x7f000000ac40)={&(0x7f000000a600)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f00000004c0)=""/4088, 0x168}, {&(0x7f00000014c0)=""/85, 0x55}, {&(0x7f0000001540)=""/70, 0x46}, {&(0x7f0000001d40)=""/55, 0x37}, {&(0x7f0000001c40)=""/228, 0xe4}, {&(0x7f0000001a80)=""/248, 0xf8}, {&(0x7f0000001b80)=""/174, 0xae}, {&(0x7f00000018c0)=""/123, 0x7b}, {&(0x7f0000001940)=""/110, 0x6e}], 0x9}, 0xc0000102) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x34d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb3, 0x10, 0x0}, 0x70) socket$kcm(0xa, 0x100000006, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x12}, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x541b, 0x0) socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r11 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890c, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400) socket$kcm(0xa, 0x2, 0x11) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x3) recvmsg(0xffffffffffffffff, &(0x7f000000c0c0)={&(0x7f000000a880)=@xdp={0x2c, 0x0, 0x0}, 0x80, 0x0, 0x0, 0x0, 0xfffffcdb}, 0x1) r13 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000c1c0)={0x16, 0x2, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, [], r12, 0xc, r13, 0x8, &(0x7f000000c140)={0x6}, 0x8, 0x10, &(0x7f000000c180)={0x0, 0x7, 0x0, 0x9}, 0x10}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, [], r12, 0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x0, 0x1ff, 0x8000}, 0xfe61}, 0x78) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000007680)=r12) r14 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r14, &(0x7f0000000240)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x1, @loopback, 0x14}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)="b4f00eed9763bbadd91c2fd81cc798a8f25e93a3f75ca47118fce4c550", 0x1d}], 0x1}, 0xfec4) 09:19:44 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc5, 0x0) 09:19:44 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1000000, 0x0, 0x0, 0x60, 0x0) 09:19:45 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc6, 0x0) 09:19:45 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8111, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x10000000, 0x0, 0x0, 0x60, 0x0) 09:19:45 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc7, 0x0) 09:19:45 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x6, 0x2, 0x4, 0x445064d83d5723cf, 0x7fff, {r0, r1/1000+30000}, {0x5, 0x1, 0x3, 0xff, 0x5, 0x7, "e0ff2217"}, 0x0, 0x2, @planes=&(0x7f0000000040)={0x1000, 0x20, @fd=0xffffffffffffffff, 0x8}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x482400, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000140)={0xfc00, 0x1, 0x8001, 0x1000}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0xffffffffffffffff}, 0x30) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x10, &(0x7f0000000200)={0xa149d70}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000280)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0x100, 0x100, 0x100, 0x100, 0x198, 0x248, 0x248, 0x248, 0x248, 0x248, 0x4, &(0x7f0000000240), {[{{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30, 'esp\x00'}, {[0x4d2, 0x4d6], 0x1}}, @common=@inet=@ipcomp={{0x30, 'ipcomp\x00'}, {[0x4d3, 0x4d4], 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x80000001, 0x8000, 0x1}}}, {{@ip={@local, @remote, 0xffffffff, 0xff000000, 'ip6erspan0\x00', 'rose0\x00', {}, {0x1fe}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ip={@empty, @empty, 0x0, 0xff000000, 'ip6_vti0\x00', 'ip6gretap0\x00', {}, {0xff}, 0x2f, 0x2, 0x3}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3f, 0x31, "f53df2b96fa4b54f169267993a6315d7d5266bda3fc7e0fb2e8bdfdb2705"}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r6 = add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f00000005c0)='user\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="6ddbff683f794f09d1bf585b67cb0e7251c0129ca900771a033967c57dd584ab8e81476fdaa0ef6d95d0ba10866536e7dc4e7838fe7a1761633c2f1431350eb7047f18c7cd4ba6d11202d09dd236293b927bf3abee228815ba72bab666542ed1a30b8aff378a29974c51d6ac1b2fc6d811186d778148d57d0a1f63ca8fca592aafbd14ef19c5dbe86cbd898be664ab34d0e15ca2ff37b14e4841251bac6d78822b4408c564f6bd16", 0xa8, r6) getresuid(&(0x7f0000000780)=0x0, &(0x7f00000007c0), &(0x7f0000000800)) keyctl$get_persistent(0x16, r7, r6) ioctl$sock_ifreq(r4, 0x0, &(0x7f0000000840)={'gretap0\x00', @ifru_hwaddr=@random="aa47d2677f77"}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000008c0)={0x8, 0xc, 0x4, 0x2000, 0x519, {0x77359400}, {0x5, 0x2, 0x9, 0x7, 0x2, 0x0, "dfeab3b4"}, 0x7, 0x5, @planes=&(0x7f0000000880)={0x0, 0x800, @fd=r2, 0x8001}, 0x65, 0x0, r3}) ioctl$sock_inet_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000940)) r9 = syz_open_dev$sndpcmp(&(0x7f0000000980)='/dev/snd/pcmC#D#p\x00', 0xdc7, 0x200000) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r9, 0xc1004110, &(0x7f00000009c0)={0xffff, [0x569, 0x2, 0x6], [{0xf4, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x1}, {0xff, 0xd5, 0x0, 0x1}, {0x9, 0x2bf, 0x1, 0x0, 0x0, 0x1}, {0xf530, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x8, 0x0, 0x0, 0x1}, {0x100, 0xfff, 0x0, 0x0, 0x1, 0x1}, {0x660, 0x40, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x3f, 0x1}, {0x4, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x2, 0x1, 0x0, 0x1, 0x1}], 0x8}) r10 = syz_open_dev$radio(&(0x7f0000000ac0)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r10, 0xc0285628, &(0x7f0000000b40)={0x0, 0x5, 0x1, [], &(0x7f0000000b00)=0x4}) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000b80)=0x3) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$IMGETVERSION(r11, 0x80044942, &(0x7f0000000c00)) r12 = accept(r4, 0x0, &(0x7f0000000c40)) setsockopt$inet6_group_source_req(r12, 0x29, 0x2b, &(0x7f0000000c80)={0x8001, {{0xa, 0x4e24, 0x9, @rand_addr="bdf749c1b418e955f001f380a515cc0d", 0x4}}, {{0xa, 0x4e22, 0x3, @rand_addr="964df28d17b6c02c1381685543854f0d", 0xff}}}, 0x108) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f0000000dc0)) sync() openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/dlm_plock\x00', 0x201, 0x0) r13 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt(r13, 0x1, 0x31c00000, &(0x7f0000000e40)=""/245, &(0x7f0000000f40)=0xf5) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/zero\x00', 0x5358ac1d81f22d80, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000fc0)={0x0, 0x5cd}, &(0x7f0000001000)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r14, 0x84, 0xd, &(0x7f0000001040)=@assoc_value={r15, 0x10000}, &(0x7f0000001080)=0x8) 09:19:45 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2000000, 0x0, 0x0, 0x60, 0x0) 09:19:45 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc8, 0x0) 09:19:45 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_getparam(r1, &(0x7f00000000c0)) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e000300400600ff050005001201", 0x2e}], 0x1}, 0x0) 09:19:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x60, 0x0) 09:19:45 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x81b9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:45 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xc9, 0x0) 09:19:45 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3000000, 0x0, 0x0, 0x60, 0x0) 09:19:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xca, 0x0) 09:19:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x20000000, 0x0, 0x0, 0x60, 0x0) 09:19:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xcb, 0x0) 09:19:46 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4000000, 0x0, 0x0, 0x60, 0x0) 09:19:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xcc, 0x0) 09:19:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xcd, 0x0) 09:19:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x60, 0x0) [ 411.023491][T14782] @: renamed from team0 [ 411.057213][T14782] 8021q: adding VLAN 0 to HW filter on device @ [ 411.537240][T14832] 8021q: adding VLAN 0 to HW filter on device @ 09:19:47 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x9, &(0x7f00000001c0)="b4697100000000000000") perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, @perf_config_ext={0x8, 0x100}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:47 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x40000000, 0x0, 0x0, 0x60, 0x0) 09:19:47 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x5000000, 0x0, 0x0, 0x60, 0x0) [ 411.791578][ T169] batman_adv: batadv0: Removing interface: ipvlan1 [ 411.805367][ T169] device bridge_slave_1 left promiscuous mode [ 411.811631][ T169] bridge0: port 2(bridge_slave_1) entered disabled state 09:19:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xce, 0x0) [ 411.906208][ T169] device bridge_slave_0 left promiscuous mode [ 411.942595][ T169] bridge0: port 1(bridge_slave_0) entered disabled state 09:19:48 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x4005}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x324) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000180)={0x2, 'syz0\x00'}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0xa0002, 0x0) getsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000000)=0x120006c, 0x4) 09:19:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x48000000, 0x0, 0x0, 0x60, 0x0) 09:19:48 executing program 4: r0 = socket(0x3e, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000080)="96d9415614f69717dd9ca6d24fb6db87df06751f74cb157b134b9fe7f2c967b4b1ecbffa2f26c786e2955e2510b78346618ac866d9fb4ddffe0b028e8a59d532178ff8fb6f2b77439ca7fbc3f1c0acd07cf167e0e584417b27b2fc1a25674e0a725407cfb76b190069cbc8a8aa76dd3f9f0f3b7362470bf0ee02a5b66fdef1362016be833fd3349c5a87a242198aeae46dad58dd58aaf352da9182f4171ceb7c7a25ebdcf31d40cdab8e4466acd75238467181351af0db3ee14328e24f84d9e1831ef2ef64164fc85d23255fb89cc608846a4da619b16ab50f01a13522ef86c8b74c72b16a7f") ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000180)) perf_event_open(&(0x7f0000000000)={0x1, 0xfffffffffffffd85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xcf, 0x0) [ 412.125079][ T169] device veth1_vlan left promiscuous mode [ 412.151389][ T169] device veth0_vlan left promiscuous mode 09:19:48 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6000000, 0x0, 0x0, 0x60, 0x0) 09:19:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x60, 0x0) 09:19:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd0, 0x0) 09:19:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd1, 0x0) 09:19:48 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7000000, 0x0, 0x0, 0x60, 0x0) 09:19:49 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x68000000, 0x0, 0x0, 0x60, 0x0) 09:19:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd2, 0x0) 09:19:49 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8000000, 0x0, 0x0, 0x60, 0x0) [ 417.063097][ T169] device hsr_slave_0 left promiscuous mode [ 417.102655][ T169] device hsr_slave_1 left promiscuous mode [ 417.155965][ T169] team0 (unregistering): Port device team_slave_1 removed [ 417.170800][ T169] team0 (unregistering): Port device team_slave_0 removed [ 417.182358][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.217860][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.360427][ T169] bond0 (unregistering): Released all slaves 09:19:53 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd3, 0x0) 09:19:53 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x60, 0x0) 09:19:53 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x10000000, 0x0, 0x0, 0x60, 0x0) 09:19:53 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000000c0)={0x990000, 0x8, 0x1e, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990966, 0x2, [], @value64=0x2}}) r2 = creat(&(0x7f00000013c0)='./file0\x00', 0x148) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) connect$bt_sco(r2, &(0x7f00000001c0)={0x1f, {0x8, 0x4, 0x49, 0x8, 0x0, 0x3}}, 0x8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x4}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x100) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000480)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000400)={r6, 0x4, 0x1}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000100)={r6, 0x7, 0xfffffffc}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:53 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000100)={0xa20000, 0xffffffff, 0x3, r0, 0x0, &(0x7f00000000c0)={0x9b0907, 0x8, [], @p_u8=&(0x7f0000000080)=0xcf}}) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x88652, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sysfs$3(0x3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0xeb}) r6 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r6, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r7 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000840)={{0x0, r8, r9, r10, r9, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000200)={0x3, @default, r8}) 09:19:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{0x6, 0xc6b4}, {0x5, 0x3}]}, 0x14, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="38b3157ded3c"}, 0x14) r2 = getpid() getpriority(0x1, r2) r3 = syz_open_procfs(r2, &(0x7f00000002c0)='net/ip_vs_stats\x00') ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000300)={0x4}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000000303010025bd7000fddbdf250000000508000340000001010c000200ffffff4ae2a6ea9cc5b62f40700005000c000200fffffffd00000001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000340)=ANY=[@ANYBLOB="6e617400000000000000000000256d62dc23887d3103000000000000000002000002000000000000000700000000030000ff00513437110000020000000000130000000000000006000000000000000000003ab79d"], 0x58) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x8}, 0xb) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000a00)={"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"}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$UHID_CREATE(r7, &(0x7f00000000c0)={0x0, {'\x00', '\x00', '\x00', &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x120) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000000240)={0x5, 0x1}) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r12}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={r12, 0x3f}, 0x8) r13 = open(0x0, 0x0, 0x0) epoll_wait(r13, &(0x7f0000000040)=[{}], 0x1, 0x7) r14 = accept$alg(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007b00)=[{{&(0x7f00000026c0)=@hci, 0x80, &(0x7f0000002740)}, 0x49bf}, {{&(0x7f0000002a00)=@xdp, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002a80)=""/47, 0x2f}], 0x1, &(0x7f0000002c40)=""/167, 0xa7}}, {{0x0, 0x0, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/59, 0x3b}, {&(0x7f0000002dc0)=""/235, 0xeb}, {&(0x7f0000002ec0)=""/13, 0xd}, {&(0x7f0000002f00)=""/199, 0xc7}], 0x4, 0x0, 0xffffffffffffff9e}, 0x2}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f0000003280)=""/117, 0x75}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000004300)=""/207, 0xcf}, {&(0x7f0000004400)}], 0x5, &(0x7f00000044c0), 0xfffffffffffffe3e}, 0x3}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000005a40)=""/89, 0x59}, {&(0x7f0000005ac0)=""/223, 0xdf}, {&(0x7f0000005cc0)=""/128, 0x80}, {&(0x7f0000005d40)=""/170, 0xaa}, {0x0}, {&(0x7f0000005f80)=""/183, 0xb7}], 0x6, &(0x7f00000060c0)=""/230, 0xfffffffffffffe94}, 0x9}, {{0x0, 0x0, &(0x7f00000076c0)=[{&(0x7f00000061c0)=""/202, 0xca}, {0x0}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/127, 0x7f}, {0x0}, {&(0x7f0000007440)=""/128, 0x80}, {&(0x7f00000074c0)=""/184, 0xb8}, {&(0x7f0000007580)=""/89, 0x59}, {&(0x7f0000007600)=""/46, 0x2e}, {&(0x7f0000007640)=""/98, 0x62}], 0xa}, 0x4}, {{0x0, 0x0, &(0x7f0000007a00)=[{0x0}, {&(0x7f0000007980)=""/81, 0x51}], 0x2, &(0x7f0000007a40)=""/132, 0x84}, 0x2}], 0x7, 0x2060, 0x0) recvmmsg(r14, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x80, &(0x7f0000001180)=[{&(0x7f0000001080)=""/239, 0xef}], 0x1, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1, 0x0, &(0x7f0000001380)={0x77359400}) 09:19:54 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) accept(r1, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:54 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd4, 0x0) 09:19:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd5, 0x0) 09:19:54 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1f000000, 0x0, 0x0, 0x60, 0x0) 09:19:54 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x74000000, 0x0, 0x0, 0x60, 0x0) 09:19:54 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r1) keyctl$update(0x2, r1, &(0x7f0000000100)="251ede700bcd11849e22e1c0b1876330f532eb4972faad2bbe4a3dc9ac91601d6aef4253bb3eef1fc551e2f9bc9647091ba5b6e253722ccf028c783c26eb03dd515acba1078060317d80339498e7323107668cc680f1f4b13e98e999eab3f30327eb500ddde0d8959d6ccab862ad04", 0x6f) r2 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, r2, 0x0, 0xffffffffffffffff, 0xf) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:54 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0xc0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) fchdir(0xffffffffffffffff) 09:19:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd6, 0x0) 09:19:54 executing program 1: mkdir(&(0x7f00000003c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000200)={0x0, &(0x7f0000000400)="0eb7c9f67a715a3442ab1c1db342c0cfc22079e7aacb3dfa6d6fc5f9bade547fc277292976c7c9ae2a5b5104a1c61e801719a1906d720cbaf888e814d87b4ebeee10650711a65c649d090117121e9b5f4386bbec9a0ad130625e250bbc98118827f22fb19759a6b4a8a6f41ff9775ab0ff38ed1bad3426cafa2e502f1b9fa37b3e019e0b7929112ec7e9e271cd483790af50800881956811a87cac7fabb1846198f5e55f61f7b2fd0733086e5606f509e42522fc4bafdc5c43945aae6221667cf3a691d9ce19588f6bc991e67eae42d3351f3dcee082b42b54fab5ebfda0efb07561dbd70808b7522e2d", 0xea}) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) rmdir(&(0x7f0000000040)='./file0\x00') chdir(&(0x7f00000002c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000005c0), 0x24, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x65}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x50, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ipvlan0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40800}, 0x880) 09:19:54 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x900000891d, &(0x7f0000000180)="080db5055e0bcfe8696071e2cda9cb1b07a4934f93d7db2f4a8e07824573fe5f19960002bb7903") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, @perf_config_ext={0x8, 0x71}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0xcdc, 0x1006, 0x8, 0x7, 0xf}}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:54 executing program 4: r0 = socket(0xb, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KDSKBLED(r1, 0x4b65, 0x1) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf832, 0x0, @perf_bp={0x0}}, 0x0, 0xe, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:54 executing program 1: write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="abd109f15db04100f52d57256de746368968a99b70a4de6ddccd4c7d231ddcba8e2da22c29c639a763d18caa8bb6c038c8743901c15c5eb0b770b05701669b1f757e4089aeca9036486489f571ca776b7202988fc2b1ed94e082f70e0e590e3a99cb6383fcc096ad7a7f1c045c6ab0009fbed34eb72597b8e8f1d53a368b737ae41eff3a21bfbaa663a2f70025766d74820b6227c35f227081bbf5d4842650bd", @ANYRES32=r0], 0x4}, 0x0) recvmmsg(r1, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) 09:19:54 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x60, 0x0) 09:19:54 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x20000000, 0x0, 0x0, 0x60, 0x0) 09:19:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd7, 0x0) 09:19:55 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = getpid() getpriority(0x1, r1) r2 = getpgid(r1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x20000, 0x0, 0xffffffff, 0x9}, r2, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:55 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x200, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb049, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:55 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netpci0\x00', r3}) r4 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x105000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd8, 0x0) 09:19:55 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3f000000, 0x0, 0x0, 0x60, 0x0) 09:19:55 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0xfffffffb}, &(0x7f00000000c0)=0x8) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:55 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x60, 0x0) 09:19:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xd9, 0x0) 09:19:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r5, &(0x7f0000000340)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r8, &(0x7f0000000340)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r11, 0x111, 0x3, 0x0, 0x4) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) accept4$packet(r14, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000005c0)=0x14, 0x800) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000840)=ANY=[@ANYRESHEX=r9, @ANYRES16, @ANYBLOB="00012dbd7000ffdbdf25050000000800000300", @ANYRES32=r7, @ANYBLOB="080001000200000008000300", @ANYRES32=r12, @ANYBLOB="fb41c8fb8fa58db08333a3f2dbb7394e6fbe0c009900eb0f00000100000008000300", @ANYRES32=r15, @ANYBLOB="0c00990004000000040000000c00990000000000020000005f331fc69e3624cec03d8c08b22e9d053c61223c141fac27f53b8fa8eede84754f74c76d5659f4316144221f202c7da690ed36c998d321317c3697d3b999c7ba0c37e893203dd10c36c962d3964a518871b147a2c5c18929ebb46c7d028e011012ed46dbd0b1f4bd35b673b496094168344847b11df988d50322aed3cb2ee40676c7fbf6c2bd4b3b8798de"], 0x9}, 0x1, 0x0, 0x0, 0x40388a0}, 0x1) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r16}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r16}]]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_PRIMARY={0x8, 0xb, r16}, @IFLA_BOND_MODE={0x8, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) 09:19:55 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000080)={0x9, {0x911, 0x6, 0x3, 0xffff}, {0x3, 0x7a1, 0x20, 0x7}, {0x7, 0x4}}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, &(0x7f00000000c0)={0x3, [0x4, 0x3, 0x9], [{0x1f, 0x7, 0x0, 0x1, 0x1}, {0x8, 0x7, 0x1, 0x0, 0x1}, {0x0, 0x9, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x80, 0x1, 0x0, 0x1}, {0x528, 0x3, 0x0, 0x1, 0x1}, {0x3, 0x6, 0x1, 0x1}, {0xffffffff, 0xffff0001, 0x1, 0x1}, {0x1, 0x1ff, 0x1, 0x0, 0x1, 0x1}, {0x80000000, 0x7fffffff, 0x0, 0x1, 0x1}, {0x7fff, 0x200, 0x0, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x1}, {0x5f, 0x1, 0x1, 0x0, 0x0, 0x1}]}) 09:19:55 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x40000000, 0x0, 0x0, 0x60, 0x0) 09:19:55 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xda, 0x0) [ 419.868479][T15207] validate_nla: 47 callbacks suppressed [ 419.868506][T15207] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:19:56 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x97ffffff, 0x0, 0x0, 0x60, 0x0) 09:19:56 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ftruncate(r1, 0x8) r2 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000200)=""/220, &(0x7f0000000000)=0xdc) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xdb, 0x0) 09:19:56 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000340)={r1, 0x6, 0x60}, 0xc) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x75cffff, 0x2ba4, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9c09a5, 0x41b, [], @value64=0x8000}}) write$vhost_msg(r2, &(0x7f00000002c0)={0x1, {&(0x7f0000000200)=""/136, 0x88, &(0x7f0000000140), 0x1, 0x2}}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:56 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r4 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r4, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x85000402}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x88, r3, 0x202, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1a1}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xc5c5, 0xffffffffffffffff}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1c, 0x13, "59ab7132d72cf78862d433f9d2ed9c1631efc131ba1e6da1"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x20, 0x0, 0x6]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x32fa}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x10) read$char_usb(r2, &(0x7f0000000380)=""/250, 0xfa) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:56 executing program 4: r0 = socket(0x1, 0x8b1ed7649a699112, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x3, 0x9, 0x7, 0x3, 0x6, 0x83, 0x28a, 0x40, 0x34a, 0xffffff80, 0x8000, 0x38, 0x2, 0x5, 0x1, 0x4}, [{0x6, 0x10, 0x9, 0xe0, 0xffff, 0xa26, 0x8, 0x61}, {0x6474e551, 0x5, 0x3, 0x400, 0x1, 0x6, 0x0, 0x4}], "b71d8fecaa400f01f9db7045ccc78ba801ffcff5415e2dcb4fc3659d671969f6f08c6b20efc6cdf93617d0bf9006c3392b09b0392713f8abc6e3cc20cf840731d149673691d917a1f0e2c06127d9cc3bac3549e930613998ea089d73b48a5e40be14f284900445fc84281e15c5eb5887c16e6615cbf5640e42909340baa53d978311a9666b6f9b5d15ea28bebc22e402189041e927e1e78c85d7c54059850889803c8c84445a8812e28f608b52074f4eaf4c0c975c7763cedf3add6bd45d2cb7bcdc45785a2a9717e056b89eed6af1eb4677432180890f832c0ef12c51a41c83206ed0bc67b0550bf1", [[]]}, 0x299) perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1d}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xe) 09:19:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xdc, 0x0) 09:19:56 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x48000000, 0x0, 0x0, 0x60, 0x0) 09:19:56 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0x10, 0x80000000003, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r3, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r5, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) socketpair(0x18, 0x1, 0x5, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x18}, 0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r9, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r9, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) sendmsg$netlink(r2, &(0x7f0000000380)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x400100}, 0xc, &(0x7f0000000200)=[{&(0x7f0000000140)={0x84, 0x1f, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@generic="b49c6c3470687c53578486c0e7b2e6fd489a1c7b9064a7ea8c02c7463f2ff0a3c038da04d0637313e157e5288afcf3a45817936a03d32f8e5b5d122af02edef0078142270684f4226b6b668cedd94fbba40bed0620d25b974f0ede7db1eaf58d4af71183883cc7b9d2890e7ba8201a0a6eed402a"]}, 0x84}], 0x1, &(0x7f0000000300)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r3, r4, r5, r6, r7]}}, @rights={{0x28, 0x1, 0x1, [r8, 0xffffffffffffffff, r9, r0, r1, r1]}}], 0x58, 0xc01}, 0x4000000) sendmsg(r1, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000440)=[{&(0x7f00000000c0)="5500000018007f7000fe01b2a4a280930a600000fca84302910000003900090035000c00030000000d000500fc637400e34f040a1a3ad5570800c78b80082314e9030b9d110085b1766732009b84e7b1df136ef75a", 0x55}], 0x1}, 0x0) 09:19:56 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x442}, 0x400, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x8) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:56 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x60, 0x0) 09:19:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xdd, 0x0) 09:19:56 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:56 executing program 1: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r1 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r1}, 0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$alg(r4, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neon\x00'}, 0x3af) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$isdn(0x22, 0x3, 0x23) ppoll(&(0x7f0000000540)=[{r2, 0x80}], 0x1, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x0, 0x300) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r6, 0x0) write$P9_RWALK(r6, &(0x7f0000000a00)=ANY=[@ANYBLOB="db81d7b20191d7f8dd379c893198c38f99390dc397a7ad00aa55c4304174c19bf0215b55178dde9afe6adc00f170266329f95f8aa44cb30d9511d8e29666b67937d79e242f3f10de5d4a455a9f22d77e44214b38dc30a2d1da70899b8a8464d83d9f472559bdb222313d0379c1d68094d59331025bbeb124e7c8f25553783bad3ccd2e13647698a55ce8ac7fe49d99d5bd6c4f6e4ed849"], 0x2) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="e6f67408bb6aa7694083c61e13bdc81f4b7285ace5cd6c2757a921a3a466df023645d80cd4d723acc0df52a06f8ca319183393219cebaba0c6fbd97ef21c5bbcb85a43842ca7e2ba4fbe749eed0d5e45f6b838260a5f7491c67c16712e2039a12bfc415285d53ef7b0502986298e2107f876b4fb0950977c8a74c885c9595fa3fe0b2c4248b6"], 0x2) accept$nfc_llcp(r7, &(0x7f0000000200), &(0x7f0000000300)=0x60) fcntl$getownex(r5, 0x10, &(0x7f0000000580)) r8 = socket(0xa, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) gettid() ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x4, 0x0, 0x100, 0xaae}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r9}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r9}, 0x30) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x807}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r12 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14000, 0x0) pwritev(r12, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) sendfile(r10, r11, 0x0, 0x102000004) 09:19:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xde, 0x0) 09:19:57 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x47eed7a629beb9b5, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x0, 0x7e01, {r1}, {r4}, 0x3, 0x1f}) r5 = socket(0x1, 0x1, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:57 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xed100000, 0x0, 0x0, 0x60, 0x0) 09:19:57 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c000000, 0x0, 0x0, 0x60, 0x0) 09:19:57 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xdf, 0x0) 09:19:57 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x401, 0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RRENAME(r2, &(0x7f00000000c0)={0x7, 0x15, 0x2}, 0x7) 09:19:57 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, @perf_config_ext={0xfffffffffffff800, 0x8c}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffe}, 0x0, 0xf, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$usbmon(0x0, 0x2bc, 0x4000) recvfrom$inet(r1, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r4, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) r7 = getpid() getpriority(0x1, r7) ptrace$setopts(0x4200, r7, 0x5, 0x100009) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r8) ioctl$FIGETBSZ(r8, 0x2, &(0x7f0000000080)) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r5, r6, r5, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) ioprio_get$uid(0x3, r6) 09:19:57 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x3010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)="04", 0x1}], 0x1}}], 0x31a, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="0200000000008ff93961a05fe2b00cf5d2fcddfd1a00009038d00d5873ea94b080374007242f20a00b5f9a77159102e87aeaa6f8aaa4f2dd7b72851847871015d6c882d0316ede12e8bf0e36f56f6a85f565c55a00d2d3bdca6a40d0a064e48c71dc1dad9d5ec49882c52f"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) shutdown(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0x3}], 0x6dd9207777e1701) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1, 0x0, 0xffffffffffffffec}}], 0x164, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x16, 0x0, &(0x7f0000000340)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x16, 0x0, &(0x7f0000000340)) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x16, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan0\x00'}) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRESDEC=r4, @ANYRESHEX=r2, @ANYRESDEC=r5, @ANYRES16=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR, @ANYRES16, @ANYRES64=r3, @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESOCT=r7, @ANYRESHEX=0x0], @ANYRESHEX=r6]], 0x2}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r8, r8) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 09:19:57 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe0, 0x0) 09:19:57 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet(0x2, 0x1, 0x0) r4 = dup(r3) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000300)=0x88e) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) socket$nl_route(0x10, 0x3, 0x0) bind$isdn_base(r2, &(0x7f0000000080)={0x22, 0x1f, 0xf8, 0xc1, 0x4}, 0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, [], 0x1c}, 0x2}}, [0x74, 0x800, 0x8001, 0x5, 0x8, 0x8000, 0x3ff, 0x0, 0x4, 0x2, 0x3, 0x9, 0x3f, 0x8, 0x7]}, &(0x7f0000000440)=0x100) linkat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1400) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) faccessat(r7, &(0x7f00000002c0)='./file0\x00', 0x40, 0x2000) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r8, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r8, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r8, 0x84, 0x8, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) remap_file_pages(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x0, 0x3, 0x10000) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f0000000280)={0x7, 0x3, 0xfffc, 0x7}, 0x8) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:57 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008916, &(0x7f00000001c0)="080db5055e0bcfe8696071") syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x2, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x8500, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x80000, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0xb25a, 0x12) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000002c0)={0x3fffffffffffffa7, &(0x7f0000000340)=[{0x601, 0x401}, {0x1f, 0x3}, {0x101, 0xe1dc}]}) readahead(0xffffffffffffffff, 0x7afbf49e, 0xff) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) 09:19:57 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x60, 0x0) 09:19:57 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x68000000, 0x0, 0x0, 0x60, 0x0) 09:19:57 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe1, 0x0) 09:19:57 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) ioctl$CAPI_NCCI_OPENCOUNT(r2, 0x80044326, &(0x7f0000000140)=0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000080)) sync() r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, r4, 0xe) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:58 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c000000, 0x0, 0x0, 0x60, 0x0) [ 422.105849][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 09:19:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe2, 0x0) 09:19:58 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x60, 0x0) 09:19:58 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0xd86, 0x2}, 0x20400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:58 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0d9100430081003900023ffb8c498ec20021e754e4f4215fdb56165da4bcfab1826c146652e3a0d4eaaab336d5940fadb371c8106513f9033e04d4af144627f0f4bc78066849ab5e3e0637648302ebb2b3bbea3c0f295d3f0415794e13f2cefa1a0b65f672338822700b019b22a926507b272e0c8ce931ba21382b8bd02f6f2fd2410841f8c82fdd2094668d6840f49b96b50e5d1a8f833154e8521347ed"], 0xb4) 09:19:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe3, 0x0) 09:19:58 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r4, 0x405, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8090040}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MAC={0xa, 0x6, @link_local}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x10080801) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in6=@empty}, {@in=@remote, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xffc1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe4, 0x0) 09:19:58 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x2) ioctl$sock_proto_private(r0, 0x89e5, &(0x7f0000000200)="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") perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x5db, 0x800, 0x1}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:58 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe4, 0x0) 09:19:58 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x60, 0x0) 09:19:58 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x16, 0x0, 0x5a) socket(0xa, 0xa, 0x5) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='tmpfs\x00', 0x10004, &(0x7f0000000240)='filter\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200}, 0x0, 0xffffffffffffffff, r2, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:59 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x74000000, 0x0, 0x0, 0x60, 0x0) 09:19:59 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:59 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe5, 0x0) 09:19:59 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:19:59 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe6, 0x0) 09:19:59 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000080)={0x0, 0x2710}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000000c0)={r3, 0xca, "da081af76c5bdbf8d4f8dcfa28dcaad637e5b14f2add1b047f62a6a715c8df88440762edef4946e572f9e454f96cafa4f77720d7486b2fec27ea2a2351844cd8f7c01b55c38d2a822955a5a8f719f01b8b34e42571ad78c18a94a55e59c023e977f70742da74ec21451410034042ac9e08d6251ab3358a87d2c05a1c95022d2f8676ec756e3f4b829ab96f6a523c588c34600d96e0dc2d7138075cf46fd8dc7d7479a48d4bb9ced02970c2b3ec7cbdf447f9e00061c61f0bf92c87887767500a7adb5b0116db290bd73e"}, &(0x7f0000000200)=0xd2) 09:19:59 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdffffff, 0x0, 0x0, 0x60, 0x0) 09:20:00 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe7, 0x0) 09:20:00 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a000000, 0x0, 0x0, 0x60, 0x0) 09:20:00 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x0, 0xd2c95dbf1be336f9}}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:00 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0xad, 0x0, 0x4, "d41b13c8e42f217a09b089d66e0de970", "71dc9e57b40529b8704e267d8704b27fba33d8c48259c426676f2e9f756585a9cbd2bfb1491fd196bcee3da0c91264d5482011de341d0a52faa25299ec0171fc739f3bdd22a842ea32cca7aa651fbf8e61e0e3c8c350384dcd87857e97be42cc2ca62bd324df71128da1dcfec787720713bfbeaeca490d7e7ef837e943b4107e369f935d02f04527ce27938b207a4590065b0b3d4e079fe5"}, 0xad, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:00 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000280)) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0x35b) r2 = syz_open_pts(r1, 0x0) ioctl$TCSETSF(r2, 0x5412, &(0x7f0000000100)={0x17, 0x5f}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = geteuid() r6 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r6, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r7 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r9, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r9, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) fstat(r11, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000840)={{0x0, r8, r12, r13, r12, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) write$P9_RGETATTR(r4, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x10, {0x2, 0x1, 0x5}, 0x34, r5, r12, 0x0, 0x7, 0x9, 0x8, 0x7f, 0x5, 0x4, 0x5, 0x2, 0x3ff, 0x6, 0x7, 0x80000000, 0xffffffff, 0x9}}, 0xa0) 09:20:00 executing program 4: socket(0x1, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x2, 0x7, 0x5, 0xffff}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x800, 0x4, 0x4, 0x100000, 0x7ff, {0x77359400}, {0x4, 0x0, 0x20, 0x5, 0x87, 0x7, "e5768acd"}, 0x1, 0x2, @planes=&(0x7f00000000c0)={0x3f, 0x5, @mem_offset=0x101, 0x3}, 0x1, 0x0, 0xffffffffffffffff}) write$vhci(r2, &(0x7f0000000200)=@HCI_EVENT_PKT={0x4, "f077b1ef4ef40ff402a54d0575e6e8f9e17e7df20420b4e718440feaeed71a31f16888594bfc12be7c8198e8f1185a04f796ae0a6f90933054b4c2bf142943dc67e9c7f55cb87e5cbc7200fb3018ee710657bb"}, 0x54) 09:20:00 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe8, 0x0) 09:20:00 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xff000000, 0x0, 0x0, 0x60, 0x0) 09:20:00 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = getpid() getpriority(0x1, r1) r2 = getpid() getpriority(0x1, r2) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x10000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000001, 0x0, @perf_bp={0x0}, 0x218, 0x1, 0x0, 0x6, 0x0, 0x0, 0x94}, r2, 0x1, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:00 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8cffffff, 0x0, 0x0, 0x60, 0x0) 09:20:00 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r2 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r2, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r3 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x100) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000840)={{0x0, r4, r5, r6, r5, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r7 = getegid() setresgid(r1, r5, r7) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:00 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000080)=0x6) 09:20:00 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xe9, 0x0) 09:20:00 executing program 1: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401", 0xf}], 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r1 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{0x0, r2, r3, r4, r3, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r5 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r5, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r6 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r6, 0x1, &(0x7f0000000840)={{0x0, r7, r8, r9, r8, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000200)="ffd17c969fdf644eb6675d5a8f1219c7751d51d1e5b1dc033b193412982b7520a0f4059b29a90b01cf08d449fc2d9cc2c221b0ae51b0bac0e0f56653f8057d70fcbee915833e0c374f436a3dd317e6cd5647d4ecd27f7268fd29689d8fd2cf39308e5af4c017cad119120e4ee77a7bfcbdafc306b9e3c0ac19815ef98986e7e80866c6f4967f61ecc21e1f25c7c0ccb1265a0f", 0x93, 0xa173}, {&(0x7f00000000c0)="2bac2d9128489abe242e8316afe28be0fa1a79251712e5b070143284d93bc98281b6d116c535b26406da545a36c7cf1615bc", 0x32, 0x2}], 0x20020, &(0x7f00000002c0)={[{@grpquota='grpquota'}, {@errors_continue='errors=continue'}, {@gid={'gid', 0x3d, r3}}, {@uid={'uid', 0x3d, r9}}, {@noquota='noquota'}, {@grpquota='grpquota'}], [{@dont_measure='dont_measure'}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot', 0x3d, 'msdos\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_measure='dont_measure'}, {@smackfshat={'smackfshat', 0x3d, 'msdos\x00'}}, {@context={'context', 0x3d, 'staff_u'}}]}) 09:20:01 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x60, 0x0) 09:20:01 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x97ffffff, 0x0, 0x0, 0x60, 0x0) 09:20:01 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xea, 0x0) 09:20:01 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x84180) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x4, 0xa1733d3228f46c69) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)={0x4, 0xb, 0x4, 0x1000, 0x6, {r2, r3/1000+30000}, {0x1, 0x2, 0x4, 0x3b, 0x68, 0x0, "6da98d33"}, 0x5, 0x4, @userptr, 0x5, 0x0, r4}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000200), 0x4) 09:20:01 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) geteuid() getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:01 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xeb, 0x0) 09:20:01 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)='\b\x00\x00\x00\x00\x00\x00\x00i`q') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x200800, 0x0) accept4$inet(r0, 0x0, &(0x7f0000000180), 0x800) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x6, "152b77d36836"}, &(0x7f0000000100)=0xe) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x7fff, 0xe9, 0x3}, 0x10) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000200)=0x40, 0x4) 09:20:01 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080)=0x20, 0x4) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = accept$alg(r5, 0x0, 0x0) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @rand_addr=0x4}, 0x2, 0x1, 0x3, 0x1}}, 0x2e) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x20210, 0x0, 0x0, 0x4, 0x7fffffff}, 0x0, 0x0, r8, 0x0) bind$phonet(r1, &(0x7f0000000100)={0x23, 0x3, 0x3f}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r9 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0xa0100) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1) 09:20:01 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xc0ed0000, 0x0, 0x0, 0x60, 0x0) 09:20:01 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000080)={'netdevsim0\x00', 0x1}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:01 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x60, 0x0) [ 428.009874][T15708] IPVS: ftp: loaded support on port[0] = 21 [ 428.079761][T15708] chnl_net:caif_netlink_parms(): no params data found [ 428.112372][T15708] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.119744][T15708] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.128327][T15708] device bridge_slave_0 entered promiscuous mode [ 428.137046][T15708] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.145235][T15708] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.153858][T15708] device bridge_slave_1 entered promiscuous mode [ 428.173937][T15708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.185497][T15708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.209504][T15708] team0: Port device team_slave_0 added [ 428.217244][T15708] team0: Port device team_slave_1 added [ 428.306772][T15708] device hsr_slave_0 entered promiscuous mode [ 428.362918][T15708] device hsr_slave_1 entered promiscuous mode [ 428.412609][T15708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.420215][T15708] Cannot create hsr debugfs directory [ 428.471604][T15708] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.478917][T15708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.486335][T15708] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.493422][T15708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.550262][T15708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.567814][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 428.577629][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.586274][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.595147][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 428.611191][T15708] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.625647][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 428.634845][T10517] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.641924][T10517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.663331][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 428.671672][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.678762][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.689566][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.709136][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.717208][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.726097][ T2990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.741015][T15708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.753538][T15708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.762145][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.785396][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.793979][T10517] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.806663][T15708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.880478][T10578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.902155][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.911332][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.919400][ T2992] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.931166][T15708] device veth0_vlan entered promiscuous mode [ 428.946352][T15708] device veth1_vlan entered promiscuous mode [ 429.036621][T15718] FAT-fs (loop1): bogus number of FAT structure [ 429.050052][T15718] FAT-fs (loop1): Can't find a valid FAT filesystem [ 429.073262][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.081942][ T2989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.138819][T15718] FAT-fs (loop1): bogus number of FAT structure [ 429.145489][T15718] FAT-fs (loop1): Can't find a valid FAT filesystem 09:20:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$caif(r1, &(0x7f0000000340)=@util={0x25, "219ebc2bcb57845ba5c17ed4d54db259"}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x148, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x2}}, 0x0, 0xffffffffffffffff, r1, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000240)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r5, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) r6 = fcntl$getown(r5, 0x9) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r8, 0x0, 0x61, &(0x7f0000000380)={'filter\x00', 0x4}, 0x68) prctl$PR_SET_PTRACER(0x59616d61, r6) dup3(r4, r3, 0x0) r9 = socket$inet6(0xa, 0x400000000001, 0x0) close(r9) r10 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000540)=@assoc_value, 0x8) setxattr$security_capability(&(0x7f0000000180)='./bus/file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x8, 0x100}]}, 0xc, 0x1) ftruncate(r10, 0x200004) sendfile(r9, r10, 0x0, 0x80001d00c0d0) ioctl$TCSETAF(r10, 0x5408, &(0x7f0000000140)={0x72, 0x8, 0x8001, 0x541, 0x5, "fd2fdf452be8b9c6"}) recvfrom$l2tp6(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) 09:20:05 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xec, 0x0) 09:20:05 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:05 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xed100000, 0x0, 0x0, 0x60, 0x0) 09:20:05 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x60, 0x0) 09:20:05 executing program 3: r0 = socket(0x1, 0xa, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000240)={0x8000, 0x32315258, 0x89d, 0x0, 0x1, @stepwise={{0x7fffffff, 0x9}, {0x7ff, 0x8}, {0x0, 0xec}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20310, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7}, 0x10101, 0x6, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) clock_gettime(0x0, &(0x7f0000000280)) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x5, 0x0, 0x0, &(0x7f0000000400)}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r2 = inotify_init1(0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='map_files\x00') getdents(r3, &(0x7f00000000c0)=""/87, 0x222) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0x9, 0x9}, &(0x7f0000001540)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001580)={r4, 0x9}, 0x8) pipe(&(0x7f0000000100)) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000480)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RWRITE(r7, &(0x7f0000000140)={0xb, 0x77, 0x2, 0x56210b5d}, 0xb) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$cgroup_type(r8, &(0x7f00000009c0)='threaded\x00', 0x76660e) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001040)="ee4942ded77fea6dc3abedcfb925ae7e91d47c963b8d1285cde6bead2bc7ef4ebe707cb58c39db91e17c6bd46aeb49f86797a8f8e2bd2185b9e41918308e5a4599464951d603f9efed03cc112fdd92eaa6221f33b1a78c572a0e6459a288436668d066699a1a34a2e333fed960462f79d1b02fc3789840317fe7be55f84a320d9dfecf5651205dc90742cf56c21ea04dd358d1", 0x93}, {&(0x7f00000015c0)="0798035f8421a558f75a87f0fd1f33ba2931bb4555c00f98d48016a57cf6dbf7f0dbbdc0b60c16b24543fc7b850dc11701694002b9415e863637cca73aea96c56982c4973e22530ac106d34d2c6d33abc6b30ff188ae94f2db0a6112e0d9a32ca4b848215d7fd08cad6ebde212b7963f8c7f3629d4d36d821689840205742c6feb46eb52e9dbf215bbf3c98fbe171771722db94f440436f32998ec81524ba391b691a88bf219e6aeb3a657a97046d9d62bf4a05cf71048604feb08dde85e4e03eb396e9258", 0xc5}, {&(0x7f0000001200)="2f05b9b821321ee5a91462d95304336915c2766d55fdbfee06c2ff5cd08e4c9e97093fecf6cfc36021b7731e2ae0243d1639a006cb631570455fc0a6db6dfad410ff9967e0bc7cc37f753e19b4ff8c587853b6ea5f196887a48e9118d4d35adfee9dfa5d05b92b24529a5404458522391b36c04b1e09b99207d9c33c0bd931545aa7c944219a5f79389d623680c350c3d5e83bea0a73134a312c410a6716f66f29d0f96c5da82ae8", 0xa8}, {&(0x7f00000012c0)="da13a5df3039faed22e101b247d607259333ed33625afb4957c7efd8b48c2a4a06c522f67af04382d672925d97c794ab5cbac82092e8d4c14383ded390048ac3e8e0bd6b0f58c027cd20e9eb7bbcdd0842665a3fb3f43e344bbcc0de3870aee45c62122b7227c0da354e5dc0316a76fb20867fcc22b7d432f223e2379a80e73e6a303a799596fea0e8e5d98de5e5db9c8d375a6f7e82b080e957a2660e6032638db80b4b8cbeb622b99a9263081a", 0xae}, {&(0x7f0000001380)="735688d0bee0241d53f9349d2988c190f1341a8958c04d29217e526c55d28112593ecf5447b93490a17029175b0f1b9292cef7d1a12e009b6fb26067113cfde657251c481d5dd8390a3e2e3d7cec7197cb76aecbf04076756239a01ac3d29665e72a57257435767330a219b4b01609ded49274699a26a283415db5413650c28829182cb880c390af43a63d244ad686340a4ebafb9d4ae7a11c260b77484cac2068b049", 0xa3}, {&(0x7f00000002c0)="a33a84b62978de2cbfe3936a421f3d78403abfe82fc9", 0x16}, {&(0x7f0000000300), 0xffffffffffffff73}, {&(0x7f0000001440)="28e666f150984c65cf325e24c64025bd72f5bba356853ec773ed2c8317e92d3beea8112fbfb0b8d98637939e809fbe6a8b8e6847a5a55147cec4bc927bb37a92776f44ebb9770d1d7c83d7a7a6bf9e9234000000", 0x54}], 0x8, 0x0, 0x119}, 0x4008007) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r9, &(0x7f0000000380)=[{&(0x7f0000000340)=""/46, 0x2e}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 09:20:05 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:05 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80002, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000000c0)=0x6) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="27000000070a010000e700"/20], 0x14}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffd7) syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xfffffffffffffffd, 0x800) splice(r1, 0x0, r3, 0x0, 0x80000000, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_UNIQUE(r5, 0x40106410, &(0x7f0000000180)={0xee, &(0x7f0000000240)="84ebca88b57f7f843a619e282d6537d1c6b023515f17972d3930a06b81329230c6bdbb1e1ed9b2c44681d1c3b275a73d96278e148fecc41c659c684a82508698c85a22fd3e32166715aaec5657d0d76ebb792a763cfa3d8ef278ea3b26f1a75851e66481c7ce50d0cf2845e8c759eddb922ab4ee4b14fa9aff51ed85b801c64309b57139016abd1b307322c0f50093b803f41fe56c1694507ab6bd2af482463bdfeada51cd2d723fc8c4a9558139b77fcec0fc59826ce56c3f2ed742257fba73e265a35936de048e9d900939180f786dea644fb92c7ae9c3297e51f769327ad1cb67604d7730e15e26f1506388b4"}) 09:20:05 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x8}, 0x4600, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x7fffffff) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:05 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xed, 0x0) 09:20:05 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_config_ext={0x2, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:05 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xf6ffffff, 0x0, 0x0, 0x60, 0x0) 09:20:05 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 429.357588][T15735] ptrace attach of "/root/syz-executor.3"[12815] was attempted by " 0 p \x0b \x0c       -516000 \x0a  ( 715000-71e000 \x0a\x0b w ]\x0b!V ( 760000-960000 \x0a  0 1b2ca20000-1b2da20000 \x0a! \x07 0 7fa06d623000-7fa06d823000 fil\x0a\x22  0 7fa06d823000-7fa06da23000 \x0a# \x09 0 7fa06da23000-7fa06dc23000 \x0a$ \x0a 0 7fa06dc23000-7fa06de23000 \x0a% \x0b 0 7fa06de23000-7fa06e023000 \x0a& \x0c 0 7fa06e023000-7fa06e223000 \x0a :)x,jB=x@:/ \x09 \x09 [ 429.609725][T15764] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.1'. 09:20:05 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffff97, 0x0, 0x0, 0x60, 0x0) 09:20:05 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xee, 0x0) 09:20:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000000)=""/1, 0xe72f1117f9b4e275}, {&(0x7f00000016c0)=""/59}, {&(0x7f00000003c0)=""/243}, {&(0x7f00000004c0)=""/4096}, {&(0x7f0000001580)=""/174}, {&(0x7f0000001700)=""/236}], 0xd8) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0x9, 0x8, 0x4, 0x400, 0xffff, {r3, r4/1000+30000}, {0x5, 0x0, 0x9, 0x3, 0x40, 0x61, "e301cb8a"}, 0x3, 0x1, @userptr=0x3, 0x80, 0x0, r5}) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000200)={0x2, 0xb, 0x4, 0x10000, 0x6, {0x77359400}, {0x3, 0x1, 0x9, 0x40, 0x4, 0x1, "d6bfad2c"}, 0x3ff, 0x1, @offset=0xc3a, 0x401, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r7, 0x4028641b, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x8, 0x4, 0x1, &(0x7f0000ffc000/0x4000)=nil, 0x5}) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r8, 0x200004) kcmp(0x0, r2, 0x0, r0, 0xffffffffffffffff) 09:20:06 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = getgid() r3 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r3, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r4 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000840)={{0x0, r5, r6, r7, r6, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r8 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r8, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r9 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r8, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r9, 0x1, &(0x7f0000000840)={{0x0, r10, r11, r12, r11, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r13 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r13, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r14 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r13, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r14, 0x1, &(0x7f0000000840)={{0x0, r15, r16, r17, r16, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setgroups(0x5, &(0x7f00000002c0)=[r2, r6, r11, r16, r18]) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) write$binfmt_elf64(r1, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x40, 0x1, 0x1, 0x81, 0x4, 0x6, 0x6, 0x2bb, 0x40, 0x2ad, 0x5, 0x3, 0x38, 0x2, 0x1, 0x6, 0x240}, [{0x6, 0x5, 0x3, 0x280, 0x0, 0x4, 0x100, 0xeda9}, {0x3, 0xffffffff, 0x0, 0x6, 0x7, 0x20, 0x3, 0x3}], "dd96425a847f105d73b1b65da9c76e29abecf7005339d8b9fa8c61b15883", [[], [], [], [], []]}, 0x726) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000080)={0x0, 0x100, 0x7, 0x6, 0x9, 0x2, 0x3, 0x3}, &(0x7f00000000c0)={0xd1fa, 0x200, 0x1, 0xfffffffffffffffd, 0x9, 0x3, 0xc000, 0x6}, &(0x7f0000000140)={0x47, 0xffff, 0x4, 0x5, 0x80000000, 0x100000000, 0x8000, 0x80000001}, &(0x7f0000000180)={0x77359400}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:06 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={0x0}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:06 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfcfdffff, 0x0, 0x0, 0x60, 0x0) 09:20:06 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:06 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x60, 0x0) 09:20:06 executing program 4: r0 = socket(0x23, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8f9b79e3214ddb96, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8b6e3cf9df05cc37, 0x0, 0x0, 0x0, 0x0, 0x36ce}, 0x0, 0x0, r1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:06 executing program 3: r0 = socket(0x1, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0xc02, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_INPUT(r3, 0x80045626, &(0x7f0000000080)) 09:20:06 executing program 4: r0 = socket(0x1, 0x6228f8af966915d4, 0x7) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000000000)=""/242, &(0x7f0000000100)=0xf2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:06 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdfdffff, 0x0, 0x0, 0x60, 0x0) 09:20:06 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r3, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$UI_SET_PROPBIT(r0, 0x4004556e, 0x1f) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000080)={0x1, r4}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:06 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xef, 0x0) [ 431.098327][ T28] audit: type=1800 audit(1578820807.186:50): pid=15828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17174 res=0 09:20:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xa, 0x50, r3, 0xffffe000) 09:20:07 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3a5e, 0x80000) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000000c0)=0xa9) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:07 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffffd, 0x0, 0x0, 0x60, 0x0) 09:20:07 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000001680)="082db5cbf054620f58ca56460d96055e0bcfe85c607145906d7c090049df2d8d7c6afe053512520b4c3f988da4f18ffe9e9c8247a58a142e53c369bd63d8a380f06dc49034694e996cd2350520bfaf649062f459ca5daed7d005702faed8d808b0eae3d860d6551e65643f9c24021d4b2e3a9f8495e05d96fedd5f84") perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) recvmsg$can_j1939(r3, &(0x7f00000004c0)={&(0x7f0000000400)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/210, 0xd2}], 0x2}, 0x220) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000100)={0xa, 0x3f, 0x7, 0x80800, r4}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000380), 0x4) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000140)={0x20, 0x3, 0x2, 0x4000, 0x0, {0x77359400}, {0x4, 0x0, 0x8, 0x87, 0x1, 0x0, "511f3d56"}, 0xfffffffd, 0x4, @offset, 0xffff8001}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) r6 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x800) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in=@local}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xffffffffffffffd6) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000000000001, 0x80) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) getsockopt$IP_SET_OP_GET_BYINDEX(r9, 0x1, 0x53, &(0x7f0000001880)={0x7, 0x7, 0x3}, &(0x7f00000018c0)=0x28) lsetxattr$trusted_overlay_opaque(&(0x7f0000000500)='./file0\x00', &(0x7f0000001700)='trusted.overlay.opaque\x00', &(0x7f0000001740)='y\x00', 0x2, 0x1) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) syz_open_dev$sndtimer(&(0x7f00000003c0)='/dev/snd/timer\x00', 0x0, 0x90940) sendto$inet(r7, 0x0, 0xea, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r7, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) write$binfmt_script(r7, &(0x7f0000001780)=ANY=[@ANYBLOB="2321202e2f66696c6530202f70726f632f7379732f6e65742f697076342f76732f736e61745f7265726f7574650020706f7369785f61636c5f616363657373202f70726f632f7379732f6e65742f697076342f76732f736e61745f7265726f75746500205b766d6e657431707070316c6f206370752e73746174000af0c1636afec642fbc7dc218b0b8e7647506bcd2c9b6cf142b312952c9485a7079bbd2652d1cafa9ca4cc7bb70730955c87e897a8ff1c8aee17990372f6ded831600b3a0a53e50508335b4398366eb3c3511dae2237024d48cf72ff4c5e499af569474fdc33411b0d3b"], 0x8e) 09:20:07 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf0, 0x0) 09:20:07 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdffffff, 0x0, 0x0, 0x60, 0x0) 09:20:07 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001400b59500000000000000000a400000", @ANYRES32=r9, @ANYBLOB="1400020000b4f277f7b0a72bad22ffff00bed387ea458b28a35f4a12cfe427ac7ae685f9e6f58ed76fbc4038af34e19fe1212b89579996b9891a32c472876825abffd22b26ba2a1546aa94e893f059b48996d7134a8c2ea8c727bc9efcaff5ba656c73e523556b5118a7f4b84eced335207632017f3746cd4bc5daead2fd3b321efa6edf870a81bf5a2c915c72f601714d9de42074fb9c4679800ae3f320f19616c2247be4a03994e89add4189d5966bcf8218ff6bcd2ea1b1749eea734afeea52dcb36b399118b27ffc65889a9a"], 0x2c}}, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req={0x7, 0x76, 0xfffff801, 0x7fc}, 0x10) r10 = socket(0x10, 0x803, 0x0) r11 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r12 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r12, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r12, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r12, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r12, 0x84, 0xc, &(0x7f0000000380), &(0x7f0000000400)=0x4) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r11) r13 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, r11) keyctl$clear(0x7, r13) r14 = socket(0x1, 0x803, 0x0) getsockname$packet(r14, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r15}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 09:20:07 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf1, 0x0) 09:20:07 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1000000000, 0x0, 0x0, 0x60, 0x0) 09:20:07 executing program 3: r0 = socket(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x6, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x1eb5, 0x10}, 0xc) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000140)=0x80000001, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000180)=0x3f, 0x2) 09:20:07 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf2, 0x0) 09:20:07 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xff000000, 0x0, 0x0, 0x60, 0x0) 09:20:07 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xe9, 0x101}, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x6}, 0x0, 0x4000000000, r2, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:07 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf3, 0x0) 09:20:07 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="42d61ce44ebbec97696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) 09:20:08 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x60, 0x0) 09:20:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x5, 0x5, 0xe001, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:20:08 executing program 4: r0 = socket(0x18, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="f30600000000000f000000") clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_ENDIAN(0x14, 0x2) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) flock(r2, 0x0) 09:20:08 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:08 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf4, 0x0) 09:20:08 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffdfc, 0x0, 0x0, 0x60, 0x0) 09:20:08 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x9) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) write$cgroup_int(r2, &(0x7f0000000000), 0x12) 09:20:08 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x400800a0) ioctl(r0, 0x27fffffffffffff, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000240)={0x339, 0xfff, 0x8}) 09:20:08 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:08 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:08 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf5, 0x0) 09:20:08 executing program 3: r0 = socket(0x1, 0xa, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xa3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0xe39eefd75f111c02, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x3dc2a6fd14acc525) r2 = dup(r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x80, r3, 0x820, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x80}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2c}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x200080a0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 09:20:08 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x9, 0x9, 0x4, 0x200}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r4, 0x8, 0x10}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x3c}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:20:08 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf6, 0x0) 09:20:08 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffdfd, 0x0, 0x0, 0x60, 0x0) 09:20:08 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x1, 'dummy0\x00', {}, 0xbc9}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:09 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:09 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf7, 0x0) 09:20:09 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="088db5055e0bcfe86960711948389deeb9b5f560f90ff6369398b5536cee3f5821990b5cb8e0a998fe504e6e66b1dd8a681968f3886cbcb61fbed9") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0xa20000, 0x8000, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990902, 0x68, [], @p_u16=&(0x7f0000000080)=0xffff}}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xb9) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:09 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:09 executing program 1: syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0xffff, 0x16e, &(0x7f0000000200), 0x450, 0x0) 09:20:09 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x234, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffe0}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x87e7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}, @TIPC_NLA_LINK={0x98, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5260}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc32}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000000c0)={r6, 0x9}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000004c0)={r7, 0x6}, 0x8) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x20, 0x800) 09:20:09 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffff8c, 0x0, 0x0, 0x60, 0x0) 09:20:09 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x80802, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) write$binfmt_elf32(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x1, 0x80, 0x6, 0x7f, 0x2, 0x3, 0x4, 0x30b, 0x38, 0x20, 0x8ee8, 0x4, 0x20, 0x2, 0x401, 0x9ad4, 0x40}, [{0x70000000, 0x5, 0x9, 0x80000000, 0x0, 0x0, 0x800, 0x4}], "d52d6fcccd39a452df290d47d92bcc9e5f70c24ab6321ff9c601d450ff6a1d1952d3565dedc05165977a5f9bddc6b8a6d8dec029f5914ecd0a344182cf2b2b9ac620c6766c45af22c94bc7f7cc5c34c01a0297dec0aff7052a8a916b81dcb6db81b498ceb3a9d855d10e15025b9352dd5c95f14a48ebbf906ec80e2f7979c7997f96bd7425915bf926cd761ecd3800a8d4491a6625f66811b8a309e0eab5251b5fbefc4ba6b833939f511f4aec0f99c39b3ae77574525f254579c47c2c3f9e70d45b46970a428cc4789c408414413a18a9e14ffaeffdb1d6c691e8368441f2f129215abaf62d3512523a52f022054ebac6d96f3b8687477d28471f59f262b11100159093f7316d2c92240f9fbf303806f02b4abf958e05918c00cce443b6054f9cb8c04e68d626973c6a8d3fa8f699c63bf037f1da8c41d3e330be900f7c67b327965f36122aa6dbd6bb3c4183abec4c1289f12b1a47e6c82ee2085e52297fdf86c3869ab1e7d7e96a8090ddbd52b1a5722994071604aef46bd4d5a080b6705c6b3ab4e4723422cb5ec7e3ef1d723370b044d68bb0395f061f92f8c6cb0563bbc955e42b9fa03a6c5eb798087e02bd2c4e5ca2e6e762c8a5a5cef47bcd29110475e684d100903da364c6212cfde324e943d4e8749898adab43c2b1dadc3e3d51e982c0da5002016ebf1f891fe7bd473bbe46278a74d16e2f0099340ddf3ab8f0d481e6da3d7d6e3209ab533548e0c136c7a71dfb2e2426134676944b7f2f1bb19e81b2444c93fdb29e6e3be4ac10749441c2db7f83f0089db9b578b183b4b78e5859f9e5e31f93db6bd36a548d9426af0b97f9c33547152a400526bd9eaa6bc1798256be65be9ac6f23c2ae1891fc7de50480e3ccdd1e09eeb3ed18f48db6b0379c88782c8676a456fca70b366385d483a2c64aa76c0022dff9f4ab31b480cf99177ba43d0605c2852e689c423ffc57ebe6033a5da97a565f6f0231ae434de3ee0e62a558fc0b799b4bbd14f0e20076d9a6730cdbcc021ac6c73f69aa5c57ca37f00480d06f392d379b9e17e12dce6129a04e9e5d0b813b911c80074d40dd9a7f9ba92cd42a7650e8120e4211d78fe532abcf75a2d9da3b3accd288075e65195910e3f273ebbe89eb087fba98dba48c493ed7ca242fd6ac44487a5bf259e019eb59c7dd1acb9035ad80ba59ab7d16e7e68c895806c2a9dbc238a2c5db73fa526c59c2bf1f4a274a74e50a4e6edd7b05cedc441ec4c6a5027c6be206d988f6f649710967613f3681d08787d7986e1a1a7f3b0ba610e093a4d762d5a7f2fceeb85df996376d41c9cd8e93ce1cd5e07951f8282a2d58ab7288a0b5a45dceda2df4b4144fbe58cb2810fe687cee06d95da506775ed405a3db5226e895c52067f7c73a84e4ca302df8c7f734f62140dd8362ce7568bf94765fab1667180ac847598b0677f3089860b247271aad17e77913927039ca07a300b4d0add759cb24a2e7d743aaf8df7eb6b40077acdfa266499cf956a7983d7c0eb672b616161d7e7ca0b324753c7cca5436c29e4cda68d7d6ddac0e4dc26f1a31be804f40d1985d56fc243004fa2d2fddb5ca66777c0743d78756dcee2985a151ab6ba1ee39c231508894edea0088e7f4a1dee9502a2cd7d0c23b127728f1a671b9121d3802a002e3e70fa01ed969d81a1e5a621e182e813557ef71cd95c98bee947ddde0ff98078cac90fa2d8410793257d1ac6353ccffbb5812f934f81c8b66d506d4eb71616bbd8985319eef7b5a7c48324eddf3cc38a64c8b79f0cf8c264040c8c1fbd027e5c19d2c7a4a2995c59a38e4c98ef35a3ab49f356109b240b212c701b6394c5b5b255d01a0e2ef1303ae8a501c6afc4abd2519c17db6b7c4ab80c17ac7b7168a0ebe03d4f95b38789ca52bfe0e542e074b4cedca63730399884b8fd7df2e4417b9a5614d47a77aa699908296924d82e36fed3c3edfff7aad06fa18f097490f7355b8f0e067b0e0ad615fdb96641198c29dd5ecd1c3b5a434a8ce90f61753ac1c86c7fabd84da4433cd36a75692d791be1d29dbcd8c2966d03c71e5e08304d3e3927b97b449348ca513b3391962d82f5e6572826b6d3e4c58e72e34d43d9e7a2d45e6a19193f2ac594bc1e8b59e6cb309df75d808c04d45006bfe212fa51475e6b9176e9a8510283cdde00ddf6c8008b6185f239544a46772413812e99a7decc23468a95359b0c80b0bda23c56a33175324a8da6388ffc6e4c6df00a138a2201cb2a4fc44465270e7e2a448c8bfcde857578220d25a521acceeec504265165ee64ea4c7e442567b9bfa3a92b6e28c363b80cd47e17701bf1da74e61307dec08a78657b47fd9c8def953bb0a809d76eb65ccf2b247880fee5cac27c291ac8a3f174f4e99115700326e88df813f32f1bc73f35463f8fb47396e758bc6e6a7646fef05194e0bc2865696bde24c5c67ff1c27cb19d264a262ba2e06cf2edaf79c9a60befe1760457db7244d98fd2e2467cb420e1811b418bcf442caf4d3f5eda10cb5edb685781799b71d2a7a48833dbd32f72c1106d0681ad9b42b625debb05c280032b4e02dc2d8c4e0a49919cf5cee3adc7d8c7ba29841cd4371e0e108a0dba47300be3e1c02687b21611f114f7f2c7e58c2ff30664515ee9728337d0ab49fe5ce28f4aeab1c73f7e05727c119c1687099aaedea28fe04972daec14c58e02ed78160eddee8d45624b2cc219e8d9b6a36b5dca0192226818d8a7a2535c247a3f0ea23d0c7aba2b0787b01d825c0f5da817a542d08fc845a99baba18a7505d871966295491bba075fdd2fef82269343a47cfcc41581e0b3d236d90c6d2e3a5676261e0cc0a3a2583002b7de25582fc906f3846abdfdb25e9a26fe2ee8f0471d0744219f8c5968e5cf0c189725b66dd7f5f29efb97411a17e79e39f106acb9811a0d572c3d54014e4cffd67548bb0c3dfba9d82b5205d5c0f21ac0ee96d575dc71b80b31f2e0f9534ab19056a967f6553e573f8e8b70e594778d72f823eb663f51337702199b5766d42cc773602d99abd460e1d4c89f34f83e639287a016b97ae2aa4f2543133e9b60fa307d286b68bf771fc3a3b5157e89b4aeb91ccd2d72fcb76f96ad8f46f849779702eb2ede5802ffb487c44a3120dcd7d6767521a8ae754c0c02f2c115b430ff693f54ccf99dc93b29a33614618bd5f839511602890554cd1de1770b121d6ea3677189b57705a80dd3f549313823a03efbc433074020d2ba7ae76dfbd36db58582b4f742dc1f63e5467967df1c0edc7cb664d406902db3d6e64332dc54698081527d5eb6cc2baa4496bff453877a2cf12c6bc862f735d6e40799b9a2565db13337f44fc1791bf291919a8d4d336cc9977660de96074106219d32a7e50ce981064935168157c7396fc4f487701f1c050216e3ed521b325c2cd88b30d6a5cdc14649ad232395e59c28a98316df6c975a7098183e8eb3792207a82ba784753c053ccabfaa30c5203ae1439f8ab4f3975733e91a39bbda28575ee143d2aefcf95f5bdd48f387bebe357ee7bae09550f5fea2da55541a5afb8b4151388125a1a7ed2025fc6afedc40a9c02be7e3092e7b36464a0ac4e6d9f244b7af1002c4ec642b28ee184690179ec9ea60bdb8fdc418175130233e6c48b591fa48dcc38299236db9aba6e6fb99d3d130d2aa58b4bc083bb65a5feb8cf022a2d162a37f98f5dfab2ea80a912191c13bc9687157b754b5f7d73266dc4008972336b23126e6b6193bd5af0d869503df37f8bf98cae9ff24d120403a3bc33bd8e147c7f131db716d6905d98b2ba95e592e050404dd36ac65c0dc063844f99972565533db76f7d9bfe10b00eec1a68409b77a4636b6176a0ab392aec3e3969705726d5846b8250c5a6b83fb5d7b675586fdb73fb60c72e3f437c3ed64e9094039a0e0cd0dfef3d3eb56f9d2587ebf821a73ab05f4ed96a32b5b9cda41ca9871d8f71857d877290278f2cd493538a33fdbf2f93f745a33e4c83c029f6439ee3e8cebd6ec527ecdb2f418809185f0370a11f0bb9e7ef1240e6e1ca70bc2a97000eea0ef114ab66bd12aaba327e4156392992f76c7acd4b8bc961da6f3dc12d242647bb6b0d66d2a25093a7a8b29a9b9606c7d6ab01a1143f49295f139841316c2b6b51d3cf2741f527fa5249e9ef107efe61c7806bb44b8569d5e9570a2ee23df343e359fbda634935d99f7d056f9be148c04e8efc128aa63a257586cde84c9e88b2a54acee1bc301eb10fdc7c5453a5dd0743661dfb6d742125d8266e8af9799b1b2d543708db13fa53b817011887feedd614964e4ec6b8a2d5bee1111e63139a5211bd6ac7963d2a867265b847290b8abb93bb8e18d6bc159abdce883f113cb9739d33c1223572c4424194b92ecf7ac740ad291cce7cec2b097f3d6e59f4a33955342f31fa392ccfc8f41a376c185b0a9aeccd7f554e5e70871f5adeccbee55d751df86c970c01de7bf0cbf396c29700b4edc7368d331433c5b6b9eca96f16ef166c546749daa66624c4198207fade994e687c795a631278e350083892be22a92b77f1b86533a9802cc07a002c37fe41bfda6a6f675fbe98b35cc5ead96025637c2b71a16a7dec39f780766f37487a81f84eaed77d71be7d20b5137028881133e183b2793bb2745ab17360d91920df1c7b7b6da20a63917ff8141b9b40a22f245339525dadbc62a6c395cddd3b76b3af11f67528cc3e36e863b15ea3f1a09952a181282700699c62ddca73963ea4699c84e798a4984074c6407117e349c2d314d54d8df8fbfbaba18aa6a4c54a52264a7405837e1b547bd289869826e0e335ea8c205a54e1f565ddad5bb2be68f0aca47d09053e1fc548959e95e71f828abb65be23a2ef23585265cbcecf18e02a1025fac05443798ab198309580441907f9b8a83f8d27d01785cd3315de598edbd7b59087e2bf03e0fd0b6a8bfe4b3d406e460d1ae7d14219a042405c1f60767f66ed3a173d22b599c715891b28b7a09363e5d3cc0dc62972a9b8cf6a9ef280a78672fb61ef76c4b11c5a44188d8fbb471422ffd567480543997b1f75297b3731eaef72d22564d853f6882c4a63b619da0f66546cc566e50c5ce7f8302db307977da09617af2384849ab23af438fe9fa84f84b9e91e917fac4ac87e5772306b48b0b9297b9bcccfa4ae81607bc7b3285dec885c21704b04588ef254ff4eef5fec6de18e47ae632bae0af09b6be3e1df95ba1041b0da376382999ad7334f15df0d51fc12e730716c0f836bd4f92d190d9363655a29f24e8ca65a7a9c4adcec5c641294a575aed2662e880cdc9de49b0874394cd398e489bb15bf78fc267f851dd4412323c4516504664d66090a48c8cf8d5e7d599e8e76fd5c0febe9a29d20a27f3ca24e504568293bfb8d18d7a331b0b340a1fafd2a44ba6e41391ace28a9c7b998d40d6a34dea7b3ec4cc7d56ff2db5c95671ae4838fe2c48dfe1892a99afe945bf7a4f33442e893797dad0bb0563b18cb6f245890dad5f8df4c259bcd422f7eb4caf0278b28f5012c42dc89f2c2d29a6d13e28bc94989225b72273e48f339ec0d0e7ed15a3c894b30e2a3b393309fe93f1f72a66eaedcc800d8bb0f02129649323f07ea556277e858ea0bff2698e8a212274990d02c7d17b11e0279be777b33ddd77aeda81da2f888d4013471bdcf824e9eb4ffca90d7cc0c35689f4c5d9bb528a645e8c7045f03ab5e1ee336021fc93a0f46d6b374cd56cc0934c81328e2efb3593dadd20801bef4308169e6a638ac37e4d1db78257fbf092ea", [[], [], [], [], [], [], [], []]}, 0x1858) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$apparmor_exec(r3, &(0x7f00000000c0)={'exec ', 'dctcp\x00'}, 0xb) 09:20:09 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf8, 0x0) 09:20:09 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:09 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xf9, 0x0) 09:20:09 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000080)="080db5055e0bcfe869607134adcf45fbe3c882") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:09 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffff97, 0x0, 0x0, 0x60, 0x0) 09:20:09 executing program 1: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000108000141bf000002c9bf0cdd823c94bb40afc99864a08d83c6407510a8119156f30be212c4583f5216d0fc626448f86eeabc2b6032aee20024f3cafc8ac6ea84196c7b0230ab0043d06c9150daad4f5ddcaa121e82c7fa39dcadecb3eaf2f83c0fe0eaf58ed3d2fcd5bdaee19cd4b8977c725e86cba9a7041dbadb6a892e669e32179b609e8c4ea18c9af6259db55c25eca0baae01996b1d271a9a633b31ee380ba619ca98cd2a7ffaed7f8a9e6f6afe657f3e28a12e814430b1dd1feeb2f0a66c44458596bb2b2ee7dbc9bb60278791ce292f5f55105af8c7a8760cc2a731a92a9f7ee6f5c5e208a197c50c32f208d8112ee68b"], 0x20}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x40000, 0x0) r0 = socket(0x10, 0x80002, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xc51b8afe4856d64c, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x60000, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 09:20:10 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:10 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sched_getattr(r1, &(0x7f00000000c0)={0x38}, 0x38, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r5, 0x0, 0x20}, 0xc) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x40080, 0x0) ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f0000000140)={0xe, 0x401, 0x1000}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='ip_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev}, 0x10) sendto$inet(r0, &(0x7f0000000000)="129f", 0x2, 0x4, 0x0, 0x0) 09:20:10 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xfa, 0x0) 09:20:10 executing program 3: r0 = socket(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e5, 0x71e338082b5443df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:10 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xfb, 0x0) 09:20:10 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffff6, 0x0, 0x0, 0x60, 0x0) 09:20:10 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:10 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x1, 0x1782c9b4cbcbb682, 0x4, 0x800, 0x80000001, {0x0, 0x2710}, {0x4, 0x0, 0x33, 0x3, 0x6, 0x33, "4d5e832c"}, 0x80000001, 0x3, @fd, 0x4, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000180)={@loopback, @multicast2}, &(0x7f0000000380)=0xc) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f0000000240)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1c080002}, 0xffffffffffffffd1, &(0x7f0000000200)={&(0x7f0000000340)={0x9, r2, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x1, 0x2, 0xfffffffe}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4014004}, 0x1045) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f00000002c0)) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r7, 0x401870cb, &(0x7f0000000100)={0x7, 0x101, 0x80000000}) r8 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f0000000280)=0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:10 executing program 1: perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0xfb8c6668e93da8fd) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0xdc0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000380)) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/61, &(0x7f0000000040)=0xd) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc020660b, 0x400178) 09:20:10 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xfc, 0x0) 09:20:11 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfffffffd, 0x0, 0x0, 0x60, 0x0) 09:20:11 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="c4c0b3c0e45a6d0ad1d9559842e2af7a", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x4d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x41c2, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x6}, 0x40004, 0x1000000000000, 0x0, 0x9f0d46bcbe7d772b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) 09:20:11 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x20010, r1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r9) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) r12 = dup(0xffffffffffffffff) ioctl$PPPIOCSACTIVE(r12, 0x40107446, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x1, 0x8c, 0x1}, {0x6fd, 0x0, 0x75, 0x9}, {0xfffd, 0x0, 0x82}, {0x1, 0x2, 0x4, 0x7fffffff}]}) r13 = getpid() getpriority(0x1, r13) capget(&(0x7f0000000180)={0x20071026, r13}, &(0x7f0000000200)={0xf6, 0x1ff, 0x8, 0x5, 0x5, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$TUNSETVNETHDRSZ(r12, 0x400454d8, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:11 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:11 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xfd, 0x0) [ 435.192826][T16240] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 09:20:11 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0xfe, 0x0) 09:20:11 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x6, 0x8001, 0x5}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:11 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0xb, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x9) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x52, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x200000, 0x1ed8, {r4, r5/1000+10000}, {0x1, 0x1, 0x7, 0x3, 0x20, 0x4, "5e1b004a"}, 0x300, 0x3, @planes=&(0x7f0000000040)={0x2, 0x6, @mem_offset=0x1f, 0xd8}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f00000001c0)) 09:20:11 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1000000000, 0x0, 0x0, 0x60, 0x0) 09:20:11 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r0, 0xc445}) 09:20:11 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x102, 0x0) 09:20:11 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:12 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080db50573bd0fb2df8fec5a7d5e05cfe8695f13a9686071") r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xa800, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x3, 0x0, 0x6}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:12 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x103, 0x0) 09:20:12 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xedc000000000, 0x0, 0x0, 0x60, 0x0) 09:20:12 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x109440, 0xc0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x0, 0x2b, 0x4}) 09:20:12 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x104, 0x0) 09:20:12 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") write$binfmt_elf32(r0, &(0x7f0000001200)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x88, 0x3, 0x8, 0x0, 0x2, 0x3, 0x400, 0x7c, 0x38, 0x1d7, 0x7fff, 0x40, 0x20, 0x2, 0x40, 0x51, 0xf4b}, [{0x6, 0x6, 0x224c20e0, 0x1, 0x3ff, 0x0, 0x0, 0x1}], "1c19e9c44d87c10e53effa61faadbcbbd002a60c82caa04e475e70dce33258a512d3636eb6490f", [[], [], [], [], [], [], [], [], []]}, 0x97f) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0xa10000, 0x1a7, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0942, 0x0, [], @ptr=0xfffffffffffff756}}) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000200)={[0x5, 0x1, 0x800, 0x2, 0x1f6, 0x10001, 0x8, 0x7, 0x3d, 0x5da, 0x3662, 0x7, 0x5, 0xa3, 0x800, 0x0, 0x3, 0x9, 0x2, 0x0, 0x0, 0x8630564, 0x0, 0x4, 0x7fa7, 0x8, 0x1, 0x5, 0xc3d5, 0x25d6, 0x2, 0x1, 0x3, 0x7, 0x4, 0xffff, 0x2, 0x9, 0x9, 0xffff, 0xea15, 0x81, 0xf7, 0x5, 0x0, 0x3, 0xfb8, 0x8, 0x8, 0xcd9e, 0x10000, 0x6, 0x8000, 0x80, 0x1, 0x9, 0x1000, 0xff, 0x3, 0x5, 0x56, 0x1, 0x2000, 0x4, 0x67, 0x9, 0x9, 0x2, 0x7fff, 0x851b, 0x7, 0x6, 0x200000, 0xa6800000, 0x2, 0xedfd, 0x7, 0x100, 0x8000, 0x5, 0x59, 0x800, 0x763, 0x200, 0x9, 0x497816bc, 0x6, 0xfffffff9, 0x2, 0x3f, 0x7, 0x38a, 0x3, 0x2, 0x0, 0x2, 0x0, 0xb5, 0x2, 0x2, 0x5, 0x8, 0xca1, 0x6f73, 0x4, 0x8, 0x2e1, 0xb2d, 0x8, 0x9, 0x3, 0x1c35, 0x4, 0x0, 0x7fffffff, 0x20, 0x1, 0x6, 0x8, 0x9, 0x2, 0x200, 0x3, 0x0, 0x8, 0xfffffffb, 0x3f, 0x7f, 0xcb, 0x8, 0x9, 0x6, 0x3, 0x8, 0x979, 0x5, 0x4, 0x0, 0x6, 0x9bda, 0xfffffff8, 0x3c6e, 0xff, 0x1, 0x5, 0x3, 0x8, 0x8, 0xd9, 0x6, 0xf00, 0x5d0, 0x9, 0x7f, 0x7fff, 0x9, 0x7181, 0x6, 0xfff, 0x80, 0x99fc, 0x7, 0x33e0ce73, 0x9, 0x2, 0x800, 0x10000, 0x2, 0x4ae, 0x5, 0x4, 0x0, 0x100, 0x4, 0x593, 0x8, 0x1, 0x2d52, 0x7fffffff, 0x400, 0x0, 0x0, 0xfffffe00, 0x200, 0x0, 0x5, 0x0, 0x9, 0x8, 0x0, 0x7f, 0x9, 0x8, 0x9, 0x3, 0x0, 0x1, 0x0, 0x80000000, 0x8, 0x5, 0x8000, 0x8, 0xffa7, 0x7, 0x7, 0x5844, 0x4, 0x6, 0x6, 0x9, 0xfffffffc, 0x80, 0x9, 0x0, 0x7fffffff, 0x8, 0x1, 0x3, 0x1, 0x6, 0x8001, 0xaa65, 0x2, 0x0, 0x4, 0x7f, 0x81, 0x80, 0x4, 0x0, 0x7, 0x0, 0x48, 0x2, 0x7ff, 0x2, 0x2, 0x6, 0x80, 0x0, 0x3, 0x0, 0x3ff, 0x4, 0x80000001, 0xfff, 0x1b, 0x3, 0x400, 0x9, 0x6, 0x7, 0x7, 0x5, 0x9, 0x0, 0x9, 0x7f, 0x6, 0xfffffff9, 0x10000, 0x7fffffff, 0x2, 0xfffffffe, 0x401, 0x1, 0x3, 0x2, 0x0, 0x5, 0x400, 0x101, 0x1, 0x59, 0x80000000, 0x9, 0x2, 0x101, 0x1000, 0x17, 0x6, 0x5, 0x4, 0x40, 0x640, 0x1ff, 0x4b85, 0x100, 0x116a, 0x2, 0x2, 0x79, 0x2, 0xfff, 0x5, 0xfffffffd, 0x7ff, 0x1, 0x7000000, 0x2, 0x7f, 0x624, 0x40000000, 0x1, 0x2, 0x20d2, 0x4, 0xfffffffe, 0x2, 0x4, 0x101, 0x0, 0xfffffffc, 0x10000, 0x2, 0x0, 0x10000, 0xffffffc0, 0x2e, 0x8, 0x8001, 0x3, 0x8, 0xf800, 0xd61f, 0xfffffffc, 0x0, 0x5, 0xbb24, 0x400, 0x9, 0x0, 0x8, 0xbd41, 0x4, 0x0, 0x9, 0x6a4c, 0x10000, 0x800, 0x8, 0x80000001, 0x3, 0x8000, 0x7320, 0x8b02, 0x5, 0x7, 0xd9, 0x0, 0x7, 0x9, 0x5, 0x5, 0x7, 0x0, 0x271912f4, 0x5, 0x10001, 0xa0ef, 0x9, 0x0, 0x9f9, 0x7, 0x3, 0x9, 0x50e0000, 0x145c, 0x3, 0xd8e, 0x4, 0x1, 0x1ff, 0x2, 0x5, 0x2, 0x3ff, 0xc04, 0xf5, 0x2, 0xffff, 0x3, 0x3, 0x4, 0xfffffff9, 0x6, 0x8001, 0x200, 0xfffffffe, 0x9, 0x9, 0x20, 0xfff, 0x4, 0xca6f, 0x10001, 0x8, 0x2, 0x7fffffff, 0x5, 0x10000, 0x7ff, 0x7, 0x4, 0x80000000, 0x7fff, 0x303d398d, 0x9, 0x2, 0x3, 0x7, 0x8, 0x1, 0x1000, 0x6, 0x7, 0x4, 0x1ff, 0x2, 0x80, 0x0, 0xfffffffd, 0x16f, 0x401, 0x6, 0x0, 0x4, 0x6, 0x2, 0x1, 0x1ff, 0x5, 0x6, 0x2, 0x8, 0x1fa, 0x1f, 0x6, 0x81, 0x1, 0x1, 0x7, 0x100, 0xfffffc01, 0x9, 0x8, 0xffff, 0x8, 0x8, 0x80000001, 0x3, 0xd, 0x4, 0x2, 0x6, 0x4, 0x3, 0x0, 0x4, 0x1, 0x16, 0x5, 0x9, 0x7, 0xff, 0x2, 0x8, 0x0, 0x9, 0x80000001, 0xec7b, 0xda42, 0x3, 0x7, 0x3f, 0x101, 0x160ea282, 0x49, 0x6, 0x1, 0x54, 0x9, 0x800, 0x8000, 0x80, 0x7fffffff, 0x80000, 0x4, 0x8, 0x10000, 0x9, 0x7, 0x37379cc3, 0x81, 0x81, 0x3ff800, 0x0, 0xeb, 0x4, 0xdad, 0x80000000, 0x0, 0x6fb5, 0xffffffff, 0x5, 0x1f, 0x5, 0x1, 0x7fff, 0x8, 0x2, 0x0, 0xfffffff7, 0x4000000, 0x8001, 0xfffffffc, 0x8, 0x0, 0x53c, 0x63346118, 0x8, 0xab, 0x1ff, 0x400, 0x4, 0x7, 0x9c59, 0x7, 0x1, 0xb4, 0x2, 0x101, 0x7fffffff, 0xfffff000, 0x2f64e673, 0x7fffffff, 0x5, 0x8, 0xffff, 0x3, 0x7fff, 0x6bfe6caf, 0xbd, 0xffff4a83, 0x4, 0x400, 0xed7, 0x4, 0x4, 0x8, 0x7, 0x9ac3, 0x6f, 0x1b, 0xffffffff, 0x1, 0x6, 0x3, 0x1, 0xfff, 0x9, 0x0, 0x0, 0x7f, 0x101, 0xff, 0x7, 0xbe55, 0x9, 0x1, 0x4, 0x2, 0x7, 0x5, 0x3, 0xffff, 0x0, 0x2, 0x200, 0x14, 0x80000000, 0x7, 0x2, 0x8, 0x8, 0x3, 0x1685, 0x7fffffff, 0x591, 0x5, 0x0, 0x4, 0x7f, 0x205, 0x1, 0x1, 0xb2, 0xffffffff, 0x5031, 0x6710ed31, 0x4741, 0x0, 0x8cc, 0x3, 0x2, 0x6, 0x100000, 0x80000000, 0x3, 0x9, 0x714f, 0xfffffff9, 0x4, 0x1000, 0x63, 0x2, 0x8, 0x1, 0x8020, 0xca3, 0x8, 0x1, 0x7, 0x5, 0x5, 0x5, 0x7fff, 0xfc, 0x2, 0x879f, 0x400, 0x6, 0x2, 0x9, 0x6, 0x8000, 0x40, 0x296, 0x2, 0x6, 0x7, 0x9, 0xa63e, 0x100, 0x1, 0x5, 0x2, 0x9, 0x2, 0x0, 0x8, 0x24000000, 0xed0, 0x7, 0x4, 0xb5d, 0x6, 0x8001, 0x7ff, 0x3, 0x2, 0xfffffffb, 0x8001, 0xbb6a, 0x80, 0x8894, 0x400, 0xfffc0000, 0x7fffffff, 0xfff, 0x3b90, 0x1, 0x0, 0x2, 0x4, 0x7fffffff, 0x101, 0x3f, 0x3, 0x8001, 0x1f, 0x6, 0x800, 0xfff, 0xff, 0x6, 0x7f, 0xdc, 0x20, 0x3c7, 0xffff, 0x2, 0x1, 0x8, 0x80, 0x6, 0x1, 0x0, 0x78a3, 0x4, 0x2f, 0x2, 0x6, 0x5, 0x4, 0x4, 0x7fffffff, 0x4, 0x100, 0x2, 0x12, 0x4, 0x0, 0xfffffff8, 0x10000, 0x80, 0x20, 0x7fff, 0x80, 0x5, 0x2, 0x4, 0x8, 0x5f4d, 0x1f, 0x1f, 0x4c9d49a1, 0xcdea, 0x84f2, 0x8001, 0x9, 0x7, 0x8, 0xfffffffe, 0x8, 0x0, 0x7fffffff, 0x40, 0xfffffffc, 0x8, 0x7, 0x0, 0xfffffff9, 0x7ff, 0xd67, 0xfff, 0x1f, 0x7, 0x2, 0x6, 0x2, 0x7fff, 0x40, 0x10001, 0x4, 0x4, 0x7, 0x6, 0x5, 0x2, 0xf0d4, 0x2, 0xffff7fff, 0x800, 0x6, 0x7, 0xc75, 0xa054, 0x1c, 0x7, 0x40, 0x9, 0x3, 0x7, 0x7, 0x0, 0x2, 0x5, 0x5, 0x3, 0x53, 0x0, 0x8000, 0xffff6389, 0xf4b, 0x7f, 0xffffffff, 0xfff, 0x9, 0x2, 0x656e, 0xffffffff, 0x3, 0x101, 0x2, 0x800, 0xfffff001, 0x1ff, 0xb9, 0x2, 0x4, 0xfcd, 0xb65, 0x10001, 0x4, 0x6, 0x0, 0x4, 0x0, 0xada3, 0xd5f, 0x20, 0x240, 0xb1, 0x3, 0x10000, 0x4, 0x3, 0x4, 0x8000, 0x3, 0x3, 0xf1, 0x200, 0x40000000, 0x8e, 0x2, 0x0, 0x8, 0x3f, 0x8, 0xffff2f33, 0x5, 0x3, 0xffffffff, 0x5, 0x80000001, 0x1, 0x5, 0x4, 0x3f, 0x3, 0xf6e, 0x100, 0x10001, 0x0, 0x7ff, 0x20000000, 0x6, 0x2, 0x9, 0x3, 0x1e4d, 0x800, 0x7fffffff, 0x3, 0xd5d, 0xfffffff7, 0xfff, 0x3, 0x100, 0x200, 0x7, 0x8, 0x2, 0x7fffffff, 0x7, 0x6, 0x2, 0xf, 0x4, 0x4, 0x80000001, 0x6, 0x0, 0x7f, 0xffffffff, 0x81, 0x6, 0x1, 0x7f, 0x9, 0x3ff, 0x5, 0x1f, 0xfffffff8, 0x4, 0x2, 0x8, 0x1, 0x4, 0x3999019c, 0x2, 0x35, 0x7, 0x8, 0x6, 0x26, 0x4, 0x6, 0xa8, 0x7fff, 0xffffffff, 0x9, 0x7fffffff, 0xabf, 0xb359c60, 0x3, 0x0, 0x80000001, 0x0, 0x1, 0xec, 0xb8b413c, 0x0, 0x0, 0x0, 0x5, 0x8, 0x864, 0x3, 0x0, 0x81, 0x1, 0x6, 0x3, 0x1f, 0x7, 0x14, 0x67, 0x1000, 0x7, 0x40, 0xfffffffb, 0x9, 0x8, 0x13a, 0x5, 0xd9, 0x401, 0x8, 0xc23c, 0x6, 0x3, 0x1f, 0x5, 0x3, 0x400, 0x7f, 0x0, 0x1ff, 0x5, 0xf61f, 0x3149, 0xb613, 0x1000, 0x80000000, 0x8, 0x68f6, 0x522, 0xb0, 0xffff0, 0x3, 0x326, 0xffff, 0x40, 0x3, 0x1000, 0x0, 0x7, 0x1, 0x8, 0x4, 0x4, 0x3d2cc00, 0x8, 0xb00, 0x2, 0x7f, 0x8, 0x0, 0x8e9, 0x4, 0x10001, 0x3, 0xbf, 0x5, 0x1, 0x101, 0x1, 0x3, 0x1, 0x2f, 0x5, 0x5, 0x10000, 0x6792bc07, 0x3, 0xffffffff, 0x7, 0x8, 0x1, 0x0, 0x80000001, 0x1, 0x7, 0x7, 0x1, 0x3ff, 0x5, 0x1, 0x6, 0x8, 0x37b, 0x5, 0x2, 0x3, 0x4, 0x1, 0x5, 0x5, 0x2, 0xffffff7f]}) 09:20:12 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:13 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0xb, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x9) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x52, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x200000, 0x1ed8, {r4, r5/1000+10000}, {0x1, 0x1, 0x7, 0x3, 0x20, 0x4, "5e1b004a"}, 0x300, 0x3, @planes=&(0x7f0000000040)={0x2, 0x6, @mem_offset=0x1f, 0xd8}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f00000001c0)) 09:20:13 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x40000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:13 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x105, 0x0) 09:20:13 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xa00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:13 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bd888696071") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r4, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x68, r7, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000340)=0x44) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000229bd7000fbdbdf2501000031000000000b000000029b001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1b) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:14 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x106, 0x0) 09:20:14 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0xffff, 0x16c}, 0x0, 0x2, 0x0, 0x6}, r1, 0x3, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SIOCAX25ADDFWD(r3, 0x89ea, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:14 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x100000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:14 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1f00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:14 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x107, 0x0) 09:20:14 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x4, 0x1, 0x0, r1, 0x0, &(0x7f0000000100)={0x99096d, 0x2, [], @p_u8=&(0x7f00000000c0)=0x3}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x2b8, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x69a0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x77ef}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a89}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x259}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9d9}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8bf}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x606c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb07}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20c4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x33e6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x528}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9d4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb42}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000910}, 0x1) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x28, r9, 0x9, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x410}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x290, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12a5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc07f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x63f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x880000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf626}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe1e5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x30000001}, 0xb75ade19f9127c2b) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x12, 0x4) 09:20:14 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', r4}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fallocate(0xffffffffffffffff, 0x2, 0x3f, 0x8) [ 438.651359][T16439] tipc: Enabling of bearer rejected, failed to enable media 09:20:15 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x8}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0xb, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x602000, 0x9) dup2(r1, r0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x52, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000140)={0x0, 0x8, 0x4, 0x200000, 0x1ed8, {r4, r5/1000+10000}, {0x1, 0x1, 0x7, 0x3, 0x20, 0x4, "5e1b004a"}, 0x300, 0x3, @planes=&(0x7f0000000040)={0x2, 0x6, @mem_offset=0x1f, 0xd8}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$FBIOGET_VSCREENINFO(r6, 0x4600, &(0x7f00000001c0)) 09:20:15 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x108, 0x0) 09:20:15 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:15 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x200000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:15 executing program 3: r0 = socket(0x11, 0x1, 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bind(0xffffffffffffffff, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x2}}, 0x80) 09:20:15 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x109, 0x0) 09:20:15 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmmsg(r0, &(0x7f0000002a80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x11, 0x6, 0x21}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="13ab7698f842dc011d127419ee7aea93a6608a35937ac66f28054812fc61b28809309a45499ebb2eeb8f0a7771e9d0239216e6101b8ae3db9af103c3c777ea503750ca87cba48099def1ca15d6725b9e7c121e700c57ef14978161d24038c6024eb482e5bf9f84a0bb4e6507ab744910af501715423fa15572674f279f9e129ee1ae938981b1cfd8bb422b1da1618debf7471f691208ab34d8f7d323626007e8dd65d08b72b3ac47193f531f4c2acbf3", 0xb0}, {&(0x7f0000000200)="d625250394bd2e919a1f44f860e18bb9eb1336fb6a0261ef9537bb189887fbf7ce57eb8e87edd1f39989aaff7e62e4d41032ae6a7aa96961145e4acc37b5133bda737abe9b4a9c629e146b6089657af72c750a996497dba0464b58471b707dbd571ab0f18e899423cc43975e3769db33097bdd565b30bd052080fc4c804847e015da425041005f7a91dc106a6849d6ed0048f9dbd0bc176711f411c82ca715", 0x9f}], 0x2, &(0x7f0000000300)=[{0xf0, 0x10c, 0x8, "2290326cae50ee045ede0719cc987a0e62b99c1b8ebe0f4613ee5aebb87957b88b898c3a3cb5dcd5f55fe16105ef8bb5a9f2b685c121201efc1ef4cf1a37ea2dbbcfb891d78c482952917d7eef53f9564f88fad4dd29af99cb17cf98c6cc34986a30c2c188d9f1d8db83a80f786f2d76f73dbb40c032fb8f105c155fb9dd71bafe15497634a1bdfab5da00ea543c85344bb1e113daa6f64d47d7af2e5a998218f73f5ff2ecae288aa74b21b4c58ced99cc133e8b4a502093c9ff102aa78a79281f3809e3067330259230b5e322b3028e118e55978f5cebea6230e80b"}, {0xe8, 0x100, 0x8, "b375ce168319076fb1dc01b5ff153175e0917fa1450e5fe0d3c1dbd71eae2624775fc1976c8391c9183582831b67ff28175d2c632719162e4b03189354e2642c793d32a3f8d15da1497a4aa16f9d56c799b86fe662a4287cd9dbedfabd3d5166a2b9fdeee80aa58c9288a9ceed289e2e7b5cc0d3f34fbf281afba4040bdf947dad4f541a7cd7443a154447ba48d804c87a464b42d2cfae1682cc57a5d044c27102d34b538832001b6b5cb14635b2883d4cf2d2adae244cb4436e11b1816d868d523d67872bcf7a8464766af9de361812b2"}, {0xb0, 0x1f, 0x4, "804b8b962befa66163a311af1a2fd83bf101b71364244e6dcdb281f1f66365ca3ec66594cc92fd6a09270dd2b4349d99da8f4ec06b78212d72cf3a417cad2c8a3b0f45295a428c5ab827ee32599575c9d71505e955ba38c62927509f5eb724e3dd7f728ee968479a127acb4b5f7369bca67cba3e911d8aae6e0cb1c4208f70e54fa26975874e74993944068303289fd8af0927b1679137374768b519db3a9c"}], 0x288}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000005c0)="ecbfe73a377cb5411f9a9da3c4c13dae0534519bf2a1cdd4f5858de19d6fa52ca4d7bf3acc2bbe0d2b9266e290fef14022a26aeb48272c6ad70d3ed0669e834f2c9e77450b93f60c865f9635271e54361ff19bae1ccea62cba671009ea8d40efe5552b02807b8b36988d5b9a105ce8ab8aa983d21da227f9906479f8ebb792144e798bf201fe32d2093d0bc08b0e3c43faec96ec211f4c32a7214cc265369ae1203ead1a0c9b4d8007f77dabced9443a84e917d3e147263c3d9ce8f9fda8369e39ddebc9b739de", 0xc7}, {&(0x7f00000006c0)="80cec7e1a377f527a26f2e1bc40e86d43b6f1c4bd1c1aa24f95f4a0d67c336c0e6c6e1220bbb95ad546cfb20dda1b14fc34f0fcbbe1dea23014f7deb3835433ac590e9603d62", 0x46}, {&(0x7f0000000740)="323e4f10092383c717e1f664368062d69b163d423d714b4c269a0c5608d1cc539915b9267c4b7cf8099c8eecda4ac82ffc74f1f61a92753cba2d2672769eebc79141b09802eb1bdc44847c38d00e642bb1f36489ef05bf2f8a4f35d012bf946baeced8215b7b5aff5e6d5caf71de8bc4ef2fcfe85dab19a2c6eabe6440389a2dce6012afb43f8fca5efdf29668137570fa628c182a69bf33fe80ac0d779df448326887f31aaaa778c836640434e0e64dbae591625614788deab1100c5aeda6aa9d4ba92f4159c08447335bae35745f31ca7d01cff8ac20afcabeddb749e3d896c8998c8a15efc0fbf60c0a7d4d47", 0xee}, {&(0x7f0000000840)="5a2d7a73177a26d954f8207956b14c28a01c49ef59261844037849a6aa7b1468fe8aaf8473e02a44d21f8781c02ed0e34dda5ed2ae579bef900f94a47c6a06989f99bc4e1b232c02304df57e12821098b28ecd31b60b016f9468ee5e368626fe0ef6f1b79d89bea005c22a3e055fff1e52c1387e7492a0cdfaf56274", 0x7c}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="6933fa0f4d4ecb12d49a9dd9f9ac26a5da449478e60ed463fd8f3ec4d94887c36b8d2d347e75bb99b4c635b8d24d9df65888ad3c8c4c29b6bcfbe5553a95c41ddb6e05eaa71688228dc9cc7e225550e8e8328dc6ff7110f3b29695085e868c1afc148e62c20b1234b3ab3340e8240937886ea9f84a1ec1c8478afadfa2bcc1377a0fb100733e689b29bf70d23890fb11bdb152b0a0986aa182e477e90d1a667b9466caaba932c7091863c0a9dba8cc98c6", 0xb1}, {&(0x7f0000001980)="ff0783b5ed1a5f380dffe6192d928d2ba7d2a28a420ea277390d6aff21ce1f9e3d1dd52addeec185cb5638b1c069c2809ff540eb70ace053167ab7e156c7c33c922e468d18ac1ea73825b6bc48948d42e0d7a61ba812c7d52574ea111a2f8f60942e26410c1d4cf33963169cd11f4540046972ef402118b6866a7c364060ea836c060922301996a2de", 0x89}, {&(0x7f0000001a40)="b99661798746f404410908f476b9f07b7658394e8703cf9cbec0303d2cc0ba311cc7530131a5f5976638d0702cc0989bf2aaf61d6a214e7da774060fc5ee26acadf4ed67cfa9ef17f1c9087dea5c778a61b3c785adad00597220523c9140616e56e0340dab7e1c238c302df29bc08047114e77efe920004bc8627956c5b05e855d876707220f5e7954f740ce567348c2876c7c0d2d", 0x95}], 0x8, &(0x7f0000001b80)=[{0xa0, 0x5f, 0x7fff, "f7d835a7c014ed11509dabcd03700d1a7d70a381fd806e736205fde57e534142ea97ed2e837250ad84614294ea4f7ca6a0dab576e9a91417a0d2674e21ae2365d6f648a4d5240796fd5fc95dcaae44b407df1c8ee03a6649c1394a67cf9db56ad58858ab28e34418b707720e3671cdc69aa46a5aae7167879d5216a4365c9a29ea53659575b1403a0f0509f2"}, {0x40, 0x1db, 0x0, "d85c63e47e355b317ab4f960ab12d71e4313ae7952f9679e6e9b35cf8e223f9e7591e22949a0e4a7337ebc71"}, {0x70, 0x29, 0x6, "a0b13afbfb55b3f7fba2617bcee7e7f30680b225e4d7a6044ed6e38b18abc3d1396def4c96efebe62fc6cd8410e0f29fabad3dcd669c2b6f59aef6a75e54c90d8abf974418a6c330c41ae8c34a086995950a6d7be6baeb00de8c4e42"}, {0x100, 0x117, 0x2, "85a38cc6b5b30bd9d6440947523475fd453de333efbb0ea7090e98a5a78c3d4b390aaa015b2fbec17255a376f87808c66214ed44ed908b44a13fb52525f05e231b21fe47f23a84b684893ed1fcb5c39322c18350d48d01ef36b4baf245a482f54a143f5b831435eac36412a34b7a9c48ea1cda7f0ac4a7f99e1597d5b9c0a8fda1b41bcc95fc0329f0ab33b525716bd18e4e537dcb354c134511f4e5d8d97354d8078a92654c12c3cd2852bd1b5b4a78fc27fe0a674fa27b95dce16e4f5c15fbc96f0dccc14003a30c7799be1a9c4def620c386b580de57e36d3d4b959bce989295b9d4c4ab628a6661885"}, {0x38, 0x11, 0x800, "cf66f1fc9d2d7dd9600fe341ace3c28a9339883d1ecc4c424eab793780da84e8f9"}], 0x288}}, {{&(0x7f0000001e40)=@l2={0x1f, 0x3, {0x5, 0x2, 0x2, 0x5, 0x4, 0x69}, 0xff, 0x7}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001ec0)="9062aa8733f20d6a9da4e8cceffa9f2d9e5671cf", 0x14}, {&(0x7f0000001f00)="d1e4e826cad6a6c55bbc51efa46de0bff958f4626230c3cafecb5c6584c4031787d14554921d52218259af8dc033b7341381e16639675dd86113ba5377880f08ebe97c671e9ae188f7512ff5dee2667b7d03344a18d016ebed07c65041164dbcd953d667cb3420b0f10d5b2249bcc00ea08e51df6fba569c7315075a506bdb12a1abaefd3a362f1f1b7a0737162eb8424b9429c57292a50206c9bf75a40df75b6ac70b96ae8008c26c71afc312557f645eba2438fb", 0xb5}, {&(0x7f0000001fc0)="72f52d6a623b2e34db400404ea64db99de811f0ba8e9086e39b81d178a1cbac4f2dd93ee0eebfc3c12c5ff89cad43cd554fe3192c0b861ed2342a471ff36987bd8b289e2d173b89599315358f3a6c63fa875f08ae6cc624f9904d4a33572dfb45d0163de2d", 0x65}, {&(0x7f0000002040)="6afbb4232024a3196e74c4d46d4b271805ccbed6e0d6bf92d6a87fa0ece34fd8325a731cebefece716320f6f160aaad18b3bbd09680ed19543e996d377d32d7abbd986487f02947afe905241ed89006997585e9b0ec4d33647c6c61ccb475e75296c234ee399aa01cf293a79c522fa2a651f77e3494d7c41130052e0ab6a07bfcdddfa75d8365fcd55c3e51abf1c091f59752f5b382a16e4a3dbc10bd80e1eef722a7b653b9e7ac5fe310fc9b8519d3b6d469811ea699bae6d97dadbf53213640b8603d43f3082d3496c864b33725921e62da598aa993a2ed2f22bae6c20c8452fd02566fc936f20b9f6", 0xea}, {&(0x7f0000002140)="1f1e32cd190bd841ecd99920e6b83d67e5ac6c76092f9c94ebdafdb007f7a716393e520130", 0x25}, {&(0x7f0000002180)="60e396dc864ec24a5a91dd6d35fb43539a9ed323385206d3dff0b976d742400ce68f1a856ca3de8c28c07bb6746288df0ed42d5194d93b41589326d2af3be97943cd92465af5d706f1a1883bddadf0b861e6558ff754874f827b71f60ad35db541710b14897cb102d52ae513e186957e2ad6739242f530c311e685c301281246ee214dd51c1427300cd9e3722fdcfb8f59db07f2fffe0bc7991cbf7ec30aeb1f913bedda068b603593633fe61b44d3481a88b62974cff00aad755ef9354c7566e533889d08e12b582acdc4e9f1c35319b35ca79f81b53d04ec8426ff530820d44af8e116e661e0125454f972d11df63c1d85b71b3ff2", 0xf6}, {&(0x7f0000002280)="54e6259421b9b84fb0ccdb43f606931275501701b94453323537950e190e7bab48b41f11a7fb79ec167686ac1b24798b748aebca3036e6d225388f76f789abee7859808a1897fabfc3312fb572072be943fe2186d25c0d1d5c3c070a2f63232d09a755f9b38ec778f3bdfd0e98406a9f", 0x70}], 0x7, &(0x7f0000002380)=[{0x110, 0x0, 0x6, "92bcaca6b620d0ebefa450c0195d29166d04f08ba15e4a4aa815da6920de285e01b13176703cd1cbeac0638f23ceb81bc952250e452ca211ed85c9920b16148051822fbdc85f5dfe8d20c45b9cb77c557a5b116d423cf3ab24abc6b3894c8223a147624a2739194dfc7e2f980082618c8e4c22dbf6507bb943bf4e0ff71325af1a32b08fc1400be3085fd8cbf24fe41be7933ad4606c286861ea3a22f938618e2978ed345b7ebc9964de8e60082ac0bd852e43f177844478a38ee90dcf6d0583404498bd42a3f6a27122bf6c461f47b35f6f575aee62b026ad83d5bc7439275d89406a3b442e9c06c9bdf0b339c255cc79beb40b76dc503d07"}, {0x10, 0x1}, {0x90, 0x17, 0xff, "285c2a8258cbfe797e12ae376557c597175e509a34c4ebe36caf7ad4ff64f252bab14ee9c2844ba6b81f1b23406b4cce97055000ffc62ff7d4a79493c68227ad14d1aae6f37cb8f737eedfacad188c419731446406f112cd1388a560a954ae2145bd571514dd5559378a00816c542768e25aba5b67d8d4fa3ceafd9e"}, {0xf8, 0x112, 0x1ff, "8ff5661ee625950898ce95b89ece461dc3bf021a8ce75446b11d4d4110b2183b350089dffec171b369f0cb8c654dee86cb23b6cfe6959598923014c1eddf8fa777878511a8dad0c43d8082846adefc33a298b72f2df09bb5bb5246e8e15afcf3284847db64472506682a88834bb7f43fddd2c311748ef694e5449cb6459106cb144c25ed6aae7433d5a9e7431a538bc2aaadc7213e9141089538e523f642e1481f73b9a9372392fbfa0fab01788afc3f63b62db363ab0aa77c646f78bf4c69587f11cc8e25822fcd6335a196d598cd79119518f519b10918e3f57c8e0d1ccb7bedf2b004625a8624"}, {0x18, 0x10e, 0x5, "431b4abe7a36"}, {0x90, 0x104, 0x7fff, "f008146b5e4fd3da12ffef7d844671bc994237034bd5c141dc4995faa70f4225bbd4499e6dea379b3e8ee2b03bb861156d4ae44daaba6c84d0259cfd7dde4966e918462459d23bf7c94db75b9ac67da1f93c15a525aaa8ebe554191e2ddbf94659a5ddcf11390edf4dbfe95dfb52090461938b167eed6f0127d9a0010f4b"}, {0x38, 0x114, 0x8, "675072113394d94cd906cf2238590df09e294736e4d424aa7efb7c4dc4d5ecedb3339581e2c98623"}, {0x88, 0x97, 0xfff, "f2cf14e0fe582a8eb8fa61d4114b8cbfcc7d4ddf492077348fb052f8ff382b68c6b06854ad40d6e06b50a64b7bf90398298387978c113bfe0efc9278e3760f9ae6c50117b6293c0935c657cbf7276c63f21ed42683ce358f39c732ef17a9824c70ec7a69f68f5bc4ff4b7893e81a3a3b39ce6a95b3"}], 0x410}}, {{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f00000027c0)="a420d8e77b7ccf4b97ae369a35571a23ec35465001e564c78f45ae73bb6246ba2b72dcde2ff5862eadeb8eed5f7b1f9265fa1f5d843208c5d246f4074a7ad54e15606c25c51abedce750b9e4ea4a281db70fc7fa97453db31d9d444fa4", 0x5d}, {&(0x7f0000002840)="ecd2cbdfee1402154534b6ce93adb647e9a75bdec8be2dcd48fc40c8fb5aaba0fde0cd1b196b7bd21517eca715b9b8abb12f3c722c625c7e8914d40111d1d24eec97bcf854e00a0e8ee8de585d5786f234401fabe412fed3fb50a75081e1e3daa28adeb0314b8d2e913e0975ab76cd48fbd06388db290c4830e5195ede9f0b5f254508bc84590ccfdd3e67c4b11e47e4fd6b059b3350d247008e8810e9e60020b87865207d57848ce4cb61d5a4305ebfff0c252ce6fa6cd85f030d856d106a1a1369ba8cc1bd7fa6fe92908334fc3f904f2519ec2155b15b774b597924fab9ad751636d7bf9aa053a920f1", 0xeb}], 0x2, &(0x7f0000002980)=ANY=[@ANYBLOB="a000000000000000180000000100000077383e79c9c2c2eef890a118040bffa6d9356da7f21545f0dd73fb7630feef18f45fbd34f9c9ee75e253e120fb24416f0605af368458360c5a1fc2707734cda0cd798b880a0a35a32e4a443a26c9c102746a35f3aa99c37eb06aea84cbebe038b7756a1035f5b80be9c522327020d7d87bab3ded478810a816d801df70700000500000000000000007010000f7850000e336966e61e4b927f44164687c3a8c4b9bb27cfe4a01de1b19f50660e4a0c2d6a3751cc012acfb848e893f16ba346836113ad61d7fdf92a62acdc720bdfc2e00"], 0xf0}}], 0x4, 0x8000) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r4, 0x405, 0x0, 0x0, {0x7e}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002c40)={&(0x7f0000002b80), 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x30, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x40}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2040000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) fallocate(r5, 0x18, 0x81, 0x1) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:15 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x300000000000000, 0x0, 0x0, 0x60, 0x0) [ 439.553346][T16493] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 09:20:15 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:15 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x10a, 0x0) [ 439.678921][T16493] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 09:20:15 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$tipc(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x5) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000080)=[@timestamp, @timestamp, @mss={0x2, 0x200}, @sack_perm, @mss={0x2, 0x8}, @window={0x3, 0xfe07, 0x1}], 0x6) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:16 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x10b, 0x0) 09:20:16 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:16 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x400000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:16 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:16 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x10c, 0x0) 09:20:16 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r1) r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000340)="04", 0x2, r2) r3 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='!\x00', r2) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000180)=[{&(0x7f0000000080)="28470dc7dd5ef112843dda45aa65dc63324d06fb2ebfdad3b633c39d512c441e7cafdcef72a7a6d5fd0c4c66d9f857fee9afe6d325718bf6c68e9960f933bd13a48087f4e46d7eb6ec461a3a5c588ed803f20b", 0x53}, {&(0x7f0000000100)}, {&(0x7f0000000140)="91cee0275872e3663834cbb81292d20f7c7276615e686dd110219a7f53041906a3", 0x21}], 0x3, r3) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:16 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x10d, 0x0) 09:20:16 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4800000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:16 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x500000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:16 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000000c0)={0x3, 0x1, 0x1, 'queue1\x00', 0x4}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000001ac0)) 09:20:17 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x10e, 0x0) 09:20:17 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x5c, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x400100, 0x0) write$UHID_INPUT(r1, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000180)={0x4, 0x2, 0x4, 0x44c0800, 0x8, {}, {0x5, 0x8, 0x2, 0x5, 0x3, 0xf9, "9ca96df6"}, 0x0, 0x3, @planes=&(0x7f00000000c0)={0x3, 0x100, @userptr=0xffffffffffffffff, 0x8}, 0x0, 0x0, 0xffffffffffffffff}) renameat(r3, &(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000140)=0xfffffffe) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80, &(0x7f0000000080)={&(0x7f0000000f80)={0x14, 0x2, 0x6, 0x1, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000280)=0x5, 0x4) 09:20:17 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:17 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x1, 0x1, [0x20, 0x4, 0x2, 0x5, 0x5, 0x4, 0xbc, 0x9]}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0xc587395985499a6e, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}}, 0x24000000) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x800, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xe964f3ad71e6268b}, 0x8000) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_DEVMASK(r8, 0x80044dfe, &(0x7f0000000180)) 09:20:17 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x600000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:17 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x10f, 0x0) 09:20:17 executing program 4: r0 = socket(0x28, 0x5, 0x3b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000180)=0x44) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000080)=""/102, &(0x7f0000000100)=0x66) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ca0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x4000400) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:17 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x110, 0x0) 09:20:17 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_default\x00') ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000200)=""/92) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000180)=0x44) 09:20:17 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_dev$ndb(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000200)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:18 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:17 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x700000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:18 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6800000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x600000, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r3, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r3, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000280)=0x8) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000140)={r4, 0x1687ae96}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r9, 0xfffffffe}, &(0x7f0000000280)=0x6) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r4, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r10, 0xbaed}, &(0x7f0000000100)=0x8) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) syz_mount_image$iso9660(&(0x7f0000000180)='iso9660\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x9001, &(0x7f0000000000)=ANY=[]) 09:20:18 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x111, 0x0) 09:20:18 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008911, &(0x7f00000000c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 09:20:18 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd76f7612903bde1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:18 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:18 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x112, 0x0) 09:20:18 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:18 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, "add088e814b8ceae63f1fe1723fa6a4c84bd32"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getitimer(0x2, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) 09:20:18 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$unix(r2, 0x0, &(0x7f0000000080)=0x31b) 09:20:18 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20600, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 442.692615][T10289] tipc: TX() has been purged, node left! 09:20:19 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x113, 0x0) 09:20:19 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x1f00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:19 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7400000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:19 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x114, 0x0) 09:20:19 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x119) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x1000, 0x7, 0x3, 0x3, 0x3, 0x3, 0x7ff, 0x3, r3}, &(0x7f0000001200)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 09:20:19 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x115, 0x0) 09:20:20 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x2000000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:20 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:20 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x116, 0x0) 09:20:20 executing program 4: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x28000, 0x0) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80090001}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x6, 0x6, 0x3ef63eb7aa6542e1, 0x70bd2c, 0x25dfdbfe, {0xc, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x800) 09:20:20 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f00000000c0)={0x281, 0x1}) 09:20:20 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x3f00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmdt(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710}) r0 = getpid() r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000380)={{0x0, 0x6, 0xf1, 0x4, 'syz1\x00', 0x10000}, 0x3, 0x30, 0x0, r0, 0x4, 0x7, 'syz0\x00', &(0x7f00000004c0)=['mige_ty\xe5h\a\\pe\x00', 'syz\xeaBx\xa3L0xffffffffffffffff}, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, r2, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:21 executing program 3: r0 = socket(0x1, 0x3, 0x9) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x20024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x107fffffff}, 0x20011, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001440)={0x14, 0x0, 0xbc8bae2176b172cd}, 0x14}}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x9, 0x4) recvfrom$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)=@abs, 0x71e000) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x8) 09:20:21 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x118, 0x0) 09:20:21 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4000000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:21 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x97ffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:21 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x119, 0x0) 09:20:21 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000080)=[0x2, 0x9, 0x691, 0x8], &(0x7f00000000c0)=[0x64, 0x6], 0x10, 0x5, 0x1, &(0x7f0000000100)=[0x4, 0x5, 0x0, 0x7fffffff, 0x3], &(0x7f0000000140)=[0x9, 0x1, 0x3, 0x2, 0x1000, 0xfff, 0xf58e, 0x7]}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:21 executing program 3: r0 = socket(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r1, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r1, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) recvmmsg(r1, &(0x7f0000003400)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/109, 0x6d}], 0x1, &(0x7f0000000200)=""/27, 0x1b}, 0x5}, {{&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/255, 0xff}, {&(0x7f0000000480)=""/80, 0x50}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/79, 0x4f}], 0x5, &(0x7f00000006c0)=""/181, 0xb5}, 0x5}, {{&(0x7f0000000780)=@ax25={{0x3, @bcast}, [@null, @null, @bcast, @netrom, @null, @bcast, @netrom, @null]}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000800)=""/157, 0x9d}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/174, 0xae}, {&(0x7f0000001980)=""/174, 0xae}, {&(0x7f0000001a40)=""/115, 0x73}, {&(0x7f0000001ac0)=""/97, 0x61}, {&(0x7f0000001b40)=""/160, 0xa0}], 0x7, &(0x7f0000001c80)=""/239, 0xef}, 0xd59}, {{&(0x7f0000001d80)=@ethernet, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001e00)=""/78, 0x4e}], 0x1, &(0x7f0000001ec0)=""/4096, 0x1000}, 0xe9e9}, {{&(0x7f0000002ec0)=@x25, 0x80, &(0x7f00000032c0)=[{&(0x7f0000002f40)=""/193, 0xc1}, {&(0x7f0000003040)=""/234, 0xea}, {&(0x7f0000003140)=""/255, 0xff}, {&(0x7f0000003240)=""/44, 0x2c}, {&(0x7f0000003280)=""/62, 0x3e}], 0x5, &(0x7f0000003340)=""/169, 0xa9}, 0x9}], 0x5, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_mount_image$xfs(&(0x7f0000003540)='xfs\x00', &(0x7f0000003580)='./file0\x00', 0x5, 0x3, &(0x7f00000037c0)=[{&(0x7f00000035c0)="341bce65272c76facfa0658c12dc588cacc12e165b592d7723af82d98eafa310b49ca672c125a8682ac1d8254e874e832f33598230b9745c727b7d899aabfad9003951f91cee3ee855d63ee4f0f451526f5dd8145e068591a67f096147c4fefd25579a5eb698a5cfdbeefad50231fc28a9b7a521fae818e95a76c81e87929858cf0f20eaeb7eb85824075d666c9a80ccd7fa224304c31643fde5d73326efd5c9bc6135a414f323a7761ad22769ab2b163930ed8f726c03e032ce6a9a21ab74b35f60694c7a27c85ad2892027020d05c68e15445142447f872d07fcfd6f99c9e9b1ff6ad9797f28e20725", 0xea, 0xb46b}, {&(0x7f00000036c0)="4981a8a632d853ac8df8f31a20f44b7bf1673cfe0a159ee7fbc0c007e879253dfe643b969e918fbef7d7aff822adfa6b9bac4240235d30236a951b3b2b8981db1091bb0c4abb07baff4397dfdfb5569bf595178cbb75dc6824e0f475e8063997c419746438d87e89cdc9b0d058cf5879a9e43282724227a0afb89ddf85a9f602c36b63804afbaaa9899af51d6fecf67d07a17d1e8e97aebd483f0dd1da2245cfd8fcc95350cc605bc9b0d4d7220a0b9fb821032cd0c8c7f8afe8c50e287b", 0xbe}, {&(0x7f0000003780)="8726ce22c70877c711e58f11515011825b0cd9203cda039ea1f5102076d793b43e35ca4ae7605d836f59fcf76f831e43cbcfd7bd", 0x34, 0x1}], 0xa6825, &(0x7f0000003840)={[{@lazytime='lazytime'}], [{@subj_user={'subj_user', 0x3d, 'dctcp\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@subj_type={'subj_type', 0x3d, 'dctcp\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'dctcp\x00'}}]}) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:22 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4800000000000000, 0x0, 0x0, 0x60, 0x0) [ 446.063531][ T28] audit: type=1326 audit(1578820822.146:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16900 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45dd8a code=0x0 09:20:22 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) write(r1, &(0x7f0000000600)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e9e688d35a978813c38add66548d7575727ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f", 0xe00) fallocate(r1, 0x11, 0x1, 0x10000) sendfile(r1, r2, 0x0, 0x12000) 09:20:22 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x11a, 0x0) 09:20:22 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$rose(0xffffffffffffffff, 0x104, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:22 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xed10000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:22 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x11b, 0x0) [ 446.574406][ T28] audit: type=1800 audit(1578820822.666:52): pid=16926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17306 res=0 [ 446.731575][ T28] audit: type=1804 audit(1578820822.766:53): pid=16926 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir193272422/syzkaller.QxmApE/23/file0" dev="sda1" ino=17306 res=1 09:20:22 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x4c00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:22 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x11c, 0x0) 09:20:23 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)='/:\\)mime_type9\xc0cgroup\x00', 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={r1, 0xde, 0xf0}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'wp256\x00'}}, &(0x7f0000000380)="d8c9c17de5eaa7024b0c40cbb73ef77bcd27165d74092cd77a80bb0e2734dbb4501b49664dca951c54478581544482c34910986caf1c81f3b969743662fe8d86690941d4a2499a824e56cafdbc74220b1ccddbbff114f9e842c9f03f2147adfd688a0a250f5aa898c1ffbb0444a6b69151856a36b5a4bd17b3de5b8aee8e2acebef78dc64e016a9177e8a5e540ea7c560cff2b29e22621d056388c4bc182d3cec07ce253378e6a88fd71d8d7de2c8f7e04e243a7c5447c98f8fcbb68ff51d8d7a3b659aed66eefc904a5c2c79373cd1388cf492cf562dee2ad7f313eac13", &(0x7f0000000480)=""/240) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="73797a30ea087ee465b7ec5af2d975b72b88b8c4e23602aa6eec7b40fe1c8318df02000000e7e5925017fdbabab7453e602220d3231c82169098f28f4d2f08cdc4cca58962a610c6f691f38c33d7e63e5b0368cc8e82c23f0495b1b1d93385067249a4f1576c4785df316400dd98ecdeb465ddb6e3eb0dd2d13dc1c42838a0173f18f0a2c22d66e5dbf41db3ee16c3c01de6d3b705e49418d29f41918d0b47dd3ceca0843b7e2d31faffc6b8b82ccc6283aaa83911c0ae47f3ec1bb9891cf169e90bbad06f3ed3fe0fa02b26c70ed696e6bfdf6215dc2efb5364c0eec3be719c0705c1f12f40b6e80a9d"], 0x18) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:23 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x108c4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="7636ffff", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000280)=0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r6, 0x408c563e, &(0x7f0000000380)={0x57563bca, 0x4, 0x2a, "8c3ca1730d4d9db3d6b4f8cb0cd3f4df24e9bc521bbc98feed7a6b8f91f3201f4eccbdabac66119f0cbc66976e1783a3ff50d86696c87cc67f55439b", 0x2a, "8de94941a7a25be300d9beb3d864b1a9d799afdf52c52bb6b2430a1031147b4977c0785140ca4063b70c03d7ba17fe10593530a55cec43d4a6f2c6cc", 0x1c0}) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001480)='/dev/dlm-control\x00', 0x1a341, 0x0) shutdown(r7, 0x0) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x4, 0x1f}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={r2, 0x5, 0x7ff, 0x100, 0x3, 0xffffffe1}, 0x14) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r8, 0xc0485630, &(0x7f00000000c0)={0xff, "3c7fac110d33ddbc862b61bd802ef1f20b562ba3458c88f70d8f7d2ac174cd1a", 0x1, 0xff, 0x7fff, 0xc000c, 0x2}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x1000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000240)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x18) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$TCSETAW(r14, 0x5407, &(0x7f0000000300)={0x2, 0x81, 0x2, 0x9, 0x9, "02d8546b399eef46"}) 09:20:23 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x11d, 0x0) [ 447.249860][ T28] audit: type=1800 audit(1578820823.336:54): pid=16966 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="file0" dev="sda1" ino=17306 res=0 09:20:23 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:23 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6800000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:24 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xb4, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb4}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r4, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xff}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffff80}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0xe44dd4c244de546}, 0x4101) 09:20:24 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x11e, 0x0) 09:20:24 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:24 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$void(r0, 0x5450) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:24 executing program 1: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x14) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000200)={0x7, 0x4d, 0x1}, 0x7) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000080)=0x40, 0xfffffffffffffd3d) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x500, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0x178, 0x178, 0x178, 0x178, 0x0, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x2c8, 0x4, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@addrtype={{0x30, 'addrtype\x00'}, {0x80, 0x408, 0x0, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3798, 0x25b, 0x6, 0x7ff, 0x0, 0x8, 0xfffffffe, 0x10001]}}}, {{@ip={@loopback, @local, 0xffffff80, 0x0, 'vlan1\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x1, 0x2}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@osf={{0x50, 'osf\x00'}, {'syz1\x00', 0xfffffff9, 0x4, 0x1, 0x2}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x810, 0x511}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x5, 0x2, 0x0, 0x4], 0x2, 0x1}, {0x4, [0x7, 0x1, 0x4, 0x5, 0x4, 0x2], 0x1, 0x2}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) socket$inet(0x2, 0x0, 0x0) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000002, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000280), 0x4) open(&(0x7f00000002c0)='./bus/file0\x00', 0x131080, 0x12) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 09:20:24 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x6c00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:24 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x11f, 0x0) 09:20:24 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdfdffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:24 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x120, 0x0) 09:20:24 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7400000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:25 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdffffff00000000, 0x0, 0x0, 0x60, 0x0) [ 449.006713][T17029] IPVS: Error joining to the multicast group 09:20:25 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x121, 0x0) 09:20:25 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, @perf_config_ext={0x1, 0x5}, 0x44c, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:25 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6c00002084d882b7f44b23b29d985d59e895984f7cad74c43da01782ed42b9449ea6bed9476ab4956ba1d8b552f96f9f5749bf8360a192e3ba138beecd66bcaa", @ANYRES16=r4, @ANYBLOB="95c40000000000000000010000000000000008410000004c001800000000696200"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x6000000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 09:20:25 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x7a00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:25 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x122, 0x0) 09:20:25 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xff00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:25 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x123, 0x0) 09:20:25 executing program 1: 09:20:26 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x8cffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:26 executing program 1: 09:20:26 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x124, 0x0) 09:20:26 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:26 executing program 3: r0 = socket(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x44, 0x31, 0x77ed030a4766e2bb, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc67}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040400}, 0x4048015) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:26 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xf, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:26 executing program 1: 09:20:26 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x97ffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:26 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x125, 0x0) 09:20:26 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept4$x25(r6, 0x0, &(0x7f0000000140), 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x6, 0xff, 0x81, 0x1, 0x0, 0x5, 0x4002, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x4, @perf_config_ext={0x7, 0x5}, 0x2, 0x0, 0x2, 0x7, 0x7, 0xd34, 0x7f}, r2, 0x1, r4, 0x2) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r8, 0xc0105303, &(0x7f0000000080)={0x6, 0x9, 0x6}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) acct(0x0) 09:20:26 executing program 1: 09:20:26 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) 09:20:26 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x126, 0x0) 09:20:26 executing program 1: 09:20:26 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xac, r1, 0x481, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8545}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8c0}, 0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:27 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, @perf_config_ext={0x8, 0x1000}, 0x58, 0x2, 0x0, 0x0, 0x8, 0x1, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') getsockopt$ax25_int(r0, 0x101, 0x33620549d1d78a4b, &(0x7f0000000000), &(0x7f0000000040)=0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:27 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xed10000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:27 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x2, 0x0, 0x60, 0x0) 09:20:27 executing program 1: 09:20:27 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x127, 0x0) 09:20:27 executing program 4: socket(0x1, 0x1, 0x9) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) ioctl(r1, 0x5, &(0x7f00000002c0)="080db55e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x4) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000140)) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000400)={0x2002866, 0xe, [{0xf, 0x1}, {0x4}, {0x8}, {0xb}, {0x8}, {0x7, 0x1}, {0xf}, {0x2, 0x1}, {0x9}, {0xb, 0x1}, {0xc}, {0x5, 0x1}, {0x1}, {0x0, 0x1}]}) bind$tipc(r2, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10) r6 = socket$pppoe(0x18, 0x1, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) r9 = getpid() getpriority(0x1, r9) r10 = getpid() getpriority(0x1, r10) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x6) r13 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x440000, 0x0) r14 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x8, 0x10800) kcmp$KCMP_EPOLL_TFD(r9, r10, 0x7, r12, &(0x7f0000000380)={r13, r14, 0x5}) r15 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) bind$packet(r16, &(0x7f0000000340)={0x11, 0x8, r8, 0x1, 0x0, 0x6, @local}, 0xfffffffffffffd24) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=ANY=[@ANYBLOB="1800000000000000000900"/24], &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r17, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ip6erspan0\x00', r17}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:27 executing program 1: 09:20:27 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xf6ffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:27 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x128, 0x0) 09:20:27 executing program 3: r0 = socket(0x1, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)={0x7, {{0xa, 0x4e24, 0x1, @ipv4={[], [], @loopback}, 0x8000}}, 0x0, 0x1, [{{0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x1b}, 0x1}}]}, 0x110) ioctl(r0, 0x9, &(0x7f0000000080)="080309000000000000f95ec7167f696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:27 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x3, 0x0, 0x60, 0x0) 09:20:27 executing program 1: 09:20:27 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg(r0, &(0x7f00000004c0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="64ef360d972a4785586876eb9b0046b93700a46d977d27b17d98da438134e353730553b8517cf801ec01143abf4aefd0c37f0b77d984ce9e480f0f97928f832f9f3db709ffb30e9106e4d8743e6a8799690e4a795403bff3d0f03720583d97ffff921f9e774a0d2b13488384562775ccfaaf6f95c70dbfe7ae2d09057ead4bf68863bb19984e4f9ad26343ef9b79694b5cf03cde11d4408272aa37910be7fd91de55fac843e5b883e1d56e5df2faba58c776c9dd8ecdbc7569539eeb", 0xbc}, {&(0x7f0000000200)="0a5f64cf5c6da181b7a098764f491b628daeb896ebf89779873208b2228103", 0x1f}, {&(0x7f0000000240)="066518962020887cdd65550394ec70b71c5560ed1b5f332a09024a3e1db8c495ada32f83154e", 0x26}, {&(0x7f0000000280)="8376408fae212629c9910bc13d5385ef", 0x10}, {&(0x7f00000002c0)="025b37e125989908985d8282a3fb97222093406f5e66954f25d06ad6cc0216496cde08c92581a631170e8a19836d55898243c2c02973c14192fd03fa6889ababe0910b09decfa71820956bc48133d679db22f2d97e9e57625809288ed897c5b2aab9937eea3b40eae355c303fb1de1b207f45bd31c4375431141d2", 0x7b}], 0x5, &(0x7f00000003c0)=[{0x68, 0x3a, 0x6, "be7688a24f4929fb6459f7373a8e9077b8afebd4e441f288d5215e931811e749cb38beaeb347d3f84154cc40cf30cf46fbb7c4c87187d4bbbf2d4077c79371a73aa5d576e4be86dc8dfa39aca9a1cd7b430f"}, {0x30, 0xa714313be999761d, 0x2, "267dd7a9b34761d2e484b6a2153a74d15b1d02e30f16d566b48cd57db51df0c2"}, {0x38, 0x102, 0x21, "000bbbb47c6f05706667f63a7c6a9a6afcc8c99f0bf121ab3dd278a75c664f47f3124a"}], 0xd0}, 0x4000000) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:27 executing program 3: socket(0x1, 0x1, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x980000, 0x86, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9909e0, 0x10001, [], @value=0xffff8000}}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x8c}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = getpid() getpriority(0x1, r1) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x608a) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000000)={{0x2, 0x0, @reserved="80727d37b201cec8d12efa5f8bc6117968381c2afc5ea0ed03a65f91dff272d3"}}) 09:20:27 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x129, 0x0) 09:20:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x12a, 0x0) 09:20:28 executing program 1: 09:20:28 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfcfdffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:28 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4, 0x0, 0x60, 0x0) 09:20:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x12b, 0x0) 09:20:28 executing program 1: 09:20:28 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x6, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:28 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x12c, 0x0) 09:20:28 executing program 1: 09:20:28 executing program 3: r0 = socket(0x1, 0x800, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl(r3, 0x1000008916, &(0x7f00000001c0)="080067615e0bcfe8696054") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x4, 0x15, 0x4, 0x1000, 0x7, {r4, r5/1000+30000}, {0x40f4719c2b3026ca, 0x2, 0x40, 0x6, 0x43, 0x1, "5eea8178"}, 0x1, 0x354530c9829112ed, @planes=&(0x7f00000000c0)={0x1f, 0x7, @fd=r7, 0x3}, 0x0, 0x0, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x140000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc810) 09:20:28 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdfdffff00000000, 0x0, 0x0, 0x60, 0x0) [ 452.685442][T10289] device bridge_slave_1 left promiscuous mode [ 452.724341][T10289] bridge0: port 2(bridge_slave_1) entered disabled state 09:20:28 executing program 1: 09:20:28 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x12d, 0x0) [ 452.830720][T10289] device bridge_slave_0 left promiscuous mode [ 452.840700][T10289] bridge0: port 1(bridge_slave_0) entered disabled state 09:20:28 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x5, 0x0, 0x60, 0x0) [ 452.965996][T10289] device veth1_vlan left promiscuous mode [ 453.020131][T10289] device veth0_vlan left promiscuous mode 09:20:29 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x12e, 0x0) 09:20:29 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000003740)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000006c0)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x2, 0x4}}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000480)="f046ac1aed3ead9d980f21c876cb8257c61a65b09091b8f1fdb238b61e70b5f76b9b91f83110605e78f198916d9c48711792d44d50e80af12c2ff02c33499abc4acf9ed881c99fdc48bb53ff8bedc3cc2f8b4e48ccd4f32d52cea85c0dca1b89f3e814bd2446812fc2960f0ceda4443e71eb069a43494a53", 0x78}, {&(0x7f00000005c0)="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", 0xfc}, {&(0x7f0000002000)="146479399a9620d0a8be4527f733582a87b7f8e77bf758920dd603cf300f5cbe9af5522f5af4c7a0db4bad77eef949995464e386c63550187814d248c51e1ba4c576a658c1c90cc6a7ed3ca313a9dfd44197ae603f50895a28974fdc97128bfe56a67d77589704b20389ca989f452652ac0b4222b7a3486d14b04fb97e3db0a538f3d0e12475afded6935357d55db3f42672e58ccb30f0eab89072fc57a650ee9ba55f4f2a1e6eb37bb5ee1ff2e8ec9d2c1c63e99b1fed86", 0xb8}, {&(0x7f00000020c0)="d6f52982e9a800041a371eaa1f32fc120fd91d0f6f7e1c4dc9947352d3c045c712ffc7a4cc648cb7d183d3bbfb77e35a25a32912760a3f0b8cb24f17b556a19191bf4821bd1780ebb899e6bed8da2a1b1c812afccf4a8101c1aab228f51ef9a7501823634956ba0192a4c6c7f76b8ea0a3ac78caafbd25e315fc8a7f16e9a720a0a440c8f1f5622fff0fb91e65", 0x8d}, {&(0x7f0000000500)="537788b42bb0b31bea9633b41360ea3687f7b9fddc2a3a1cdc733967cd8457e2dba9cdfec3083925299d7b1d985d6870b95847ef996403a81033e2bcfaa1f11934d58d1354c5c68b742458a328cc92ee0c5c26bd1de81229ba0b", 0x5a}], 0x5, 0x0, 0x0, 0x4000000}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000380)=""/16, 0x10}, {&(0x7f0000000880)=""/14, 0xe}, {&(0x7f0000000a00)=""/19, 0x13}], 0x3, &(0x7f0000000a80)=""/22, 0x16}, 0x44) sendmsg$kcm(r1, &(0x7f0000001fc0)={&(0x7f0000000b00)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x0, 0x4}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000b80)="d7a4850ad9ff8152b2e973e2c2579885c0e65381583049888b2212702759a8e58858dbcf00b8553d41b258a6f95c91643623418ad0b944914a232fb8c4ec46104569b981ded1887fcdf55e81037a3cf3f540b54b96433aa4f3a755c609cc1561fb0240b8b77403064778865cb23ddf3e45b6566e236f881e7b46a214346706675ee69e3b9759952a18f0a745fe21ccecc6486c416a09ccd7da36c678e2424459dd02a6ebbffdb30b2ed0bcf98f06b9a110468013c6c6e8d92a9a60a4e1184f2a9d9293328085df3ded7cc96de85bc3866ca0b496c9a33b0cfcae73a15caa70f90ebf02efc6f08d0cb515db5c7cff3b16848c12f5dd9fb6b1d53d6b2267a65dbfd0f19f39b5fe1d8d187811239697e16730c8f35bfe954bcde99f36d44ff03f70d50dff414fc4bef616d5ab3eb764d6d29e50cb979627604670e7f3b2c18f025ff3525acfbf6cf37da8b819ca08a31f3f65c99028b929c646c2643c93a11753cf5edda1239d725abcac2c2c1e7f78c76e3ce827885fb5c1cbc441e30700a78340d09f1fb9495435b84ed2cb2278e7ffd9294061db81ac8dc7eedc9417c38ff5dc20d10bb2692ce3eb157170ce98c43c99e225eb6ca0ca1d33ff7fe4b5fb26322e4329648eb0668e9ca3d41be81c12b7d5b5fe013052ee528b89ba4a66d54ba687c1f1e912da396d4266145fc14c91e6b6ad7aa14dcac73ff1fb62df854925de4e6007099ce3a15b7e2505e4e1eed3c592e02fe4aeaa7a88a4c8034b808355fa7e9e7c7f5bef52418701f98dc3e3f33a535939ba16c079beed59aa97284491a17387ed5ef33aa71477ee11fceebd17e3255ceb7c4755f506d09b6cb48759d3bdf6e4ead469283a7b78303647ffea399c13b6b15ff954e7fae6dfbf9c5377275d50c718b82840b5f2027e1ce7dc63920cba641129f0738de67fdb7d8a900fbff74443e3c13fad092c5bbd4c5e97920082eb1cd61da2f5a4d0d7926b37799bad25389b23dea2e1a3d064ab86db97f3db6477e5999788fd39850ae245e84f4f227916bc5439998ae7196b7b30004988a1386dd02d32541ba71148782c8c420491ebc4b85366614a7ed36ec2b75b6e8b03c6ef95e11bd063cc7b851885a9c6f93dfd62247461643489b77620927033dc46dc661e531248fe2a5f3d36759be96d54ec48125b2980064e8573033507132880a826ff9ae33b92f058eab4593363941ad7b416fc24314673831f49ad8f4b1e3a3aedbed745d3ff74086418660a96ef29aa7221b5f3aebe12de10bb8afd54b74efafca092af4e4fa0fb63e971cfa96c66f1ff0cbee1e95d660b8e38f54893342efe5d0ed30c7b697350efbff9dfffaee5d0e1c8befaba144f617d04be8ab6f2621c6121c3ab3e58a26f94a68f8ddc3e761b35170453e1dd33f1d3dcae6860364efba2561d2fbb4517af07470f48c4d87e7d593fdbdf9c80ff9227b9e9fb2406412bceeaa3c0062b68b1d2eda76d5794be320a19fa70cb36f1681f59336dc6d8b112b36026a5b453861441306bf8457e83ce9d580865ed826c6dc5529537e77b540a99c3b4a9f348463f81d5e2ba513806ce092d0937c7ddee6f7def993b213759acb8e3fbabceacce174b22942d12a019b9d96a3e33352541fb095ea529ee89297c04acdbccb4277cff38bb52b342e559c281eafe85e9f56418e974e55f8cc1508b4eea880637df6337a6faed7ca166f124e247e33d35b6e4ec802507f8ca394bf8869327b84ea20e35403ca01202dd50b2e379d9ebecf34aa5edb18e6cf06e4b30804741f4c66fc3b3cd50673f771f2e933f86185dddc471736c54a5a6dac45b699a2f5c7ed54050d72492f16296d22b79c7f1c946a1aafccd5d58c93f6032f93517a3b1826d05bcfb4a654282bde851c7ce079abf2f9c6cf18f7130b481e7b7f09eca8b5c819493b4e5f2ded73b796619c3ed2a15f3711bb4013831504654fff564ea48d99a93587387039960355f35bbd12c4560df58644437dd92c70a597d80d82c7c863160857f317ff98f974276728f60d55cd202adf0036ec266dcc28d7fc21bcd3a18da4e4ecc43a849f4a79804a24a0fba4caa6282805389389bdca1dfe2ba8db63ca9be4904e6309de8f4e3bd193c86d67661801ff1cb3af4ca50d84c527629283a8cefae8e5f8137d8565f4a3d3e292a522c7a51ebc298fa73a51e8ba2129393c6511560336634a555bf953c325829179325a2cddbe31ca755f9ee8d9a8a9d079e43199073ece6a57ed64d2e4c1bf69260a0f78fd8f9cda3b90ce4f41dec375504474b74399fb9f48d0064102f7aaa27dd8026ba6eceee02dd7da5340366ad31415c23eea2a9a588e50487090f5e5a14108bfb77cdbb715f38e671e81cf7d1f9b3656ca575a2d6d7468d271ad8e0926a099ecd4ad1c7b6e10aeb4c10364309c8a418412ec6e528149ee29197adcb5394170649cc3e667fca814e5450e89df5dd661bc2aea414819cd9b5967a4920edc2dc7da5c8a7aa101e271271e769f5083afdf261b8da447f7cda2312593751fc131e9fa4d92274bf0ef828e2ae35c644600ab564214cd93f3a6164c901d3854fc849ab3d96863a5ffedea0b81cd05a1178b9a15ae20a7cf61e85a5abd207747589fbe9e806420158d614c907cd768d10bc022354c4e03f3845c3e8a0237b3549151a76bab8c8df4594b9e969ff3f8cf87f682e584b4d5f3184d409f66c26ccad4edb3d2980476ce806badf3a9eacc0e1c819cd8746dc0f3e2f488aad40f0b6b700962057fc16a65758befe7dc5e5643d13fe9d53b33daf9ff25b71040ffd6059fc3ac0cd4367f7356f699dd8f581f6a5ed286f7ad1cfd7c6b429b60a257d2efdd435ca5ffa8b36dc8bf556366ea7c6a71f2261fdd747a13aa7609d8500473f51db3cabe264269daa5b3e68a3d475058b15ee6ced711ccabeb3b5912d84f84480910b6c38e575d612db170243acbb603c8c7207f4427db6d848f2c25dd258563087d93ac14cad4471c06f5df1fe48319cb015ea977765c339312d7413440c9fb862e97c754087793aabeae17442350ec910662fd7ee1ffc849a534f269c5869a38ba40bfc332f6a06867dc39791f6c3d34b92f4ce9d6d2d1266dd080d86baa3534169105d5f3faab3f83b2c7fcb2d280bbc48e294919cd09be458230ead3f8f8c1a942458c1822bb27c6f00a50876aa929a595daf6fec0d7f1b74f0a7e753db0bb67924e7478c4037ff9a9a9f261d4e28b03aa26fd59d620e23191c710f4f3930b1bef0acce9ffd824593adadbb445008f6f37edaa8494fb1493dd0ff50a0c899a21b37392cd89b943f0109e11521ee22e6acce1adcfaf672eb91ad7c8dcda923190918cf9cec8dd4ff5a64a9c7c761912e7a3bf39b912cc14be382b7294f4544ba50bac3b9ec24d131590f22480a5100c2184e9ec119c7b49b10b4e247c885d712bba4c55d287ffb633b0c6bf6f769e25d2dffed06af25898c2c29959e056c4ccf347afb109fc604262fe4d68414cb605565bdd53d9f77ef76e0dc50fb01773d2532029b5d70e26455cdc2224e3a380ef549ec70a620b4b08786666ccbd424f96dd782def6dbd4133afaae8f53a735a42584006ac457cb6f7f8a48db90dcd54fbed1929f857bf4bacd2197e256738c4c2e4e11a3ea7e3ef0ddb698bdab1c9d4d42b7c1c241a07fbf1ae616c5814746b6c212950909039f4fbdf50b2f5e441ec358b00cc8a613d6826742c71c245375c9457a06f0173d2735359ddf64f107193cceda5d9f1a393b8800b486572d2edb5a32273d2ce084aad886c286931a8d8be20b2e503313972ba3cc9d53619ea80511491ab0e6431400c7ee2598dec44d28f1bc97ef4b9b4b20e5f9ea1e27decfa21d61baccf261d3d8f7319a4228e323cc2e49d2dafd5cb7d923da57541f8509cb87a4550af0ba5af57db8a4f35f7bb8ddc4b200451fa011273a2d4a1df8638ea86f8b62a51f4b23ed3bf042083549f7fb760d35e15faa6f0ac3abac0a1408b8e89197a066233b5616d912f1304422e5ffa7e153a7d3251530bb5fdd5ca03456ae37a7a06630ae4e209a330b8efe195d52fd2fe6fadd964a3b9eea5895314cad6ccffdfb1fe1660822fa9b84b4d66b5d8326873527d58f15bf6cc9e24b9ba8420f0f304cb406e96aea85c5d0b4d7f8f6c87e766a6169047c19ead990a49cb509b0718fda492d2d090a17347a1ae12e47cb1e1b62ea4cd3d0e8002252cf60a626de576bf78b8bddc70c6cc97ca2477723145d6d1c7d85de86a5095141bc8b3334238f4698709c16246c74338f3a9ce70be1dd43481b68193a5559b8c410ea56e49a3bf2b2ed4ccfc59ab46656dfbcfdcfdb78a4065eb5be1127136ad4198c49145750dbca0b1eff225f80a388fc051680f60dc49a3bc3941dbb6ca7d5147e7e5bf4f4f0cdc34df3d9c5b741c64a2875584f1c0f297e5c0c83615a95e19ae1a64e0178813051bf3461baba283334250e21fc2ba1909aa55d5bc3f01c32670a49f8aab17599d91153cd059d2361a0f6b7469051c6f10ef5a66829056cdc96351f3fac8a900b746a6da4ccd7e0e5bf02e0d4cc08219ca3ef41048c725afb963f34a31011992252018afa061e9d01b7c167bf62ac31c896a5c4194f0d214fd4cf75527e4785ab495e0a895e2bcbd7d5d719be172fbe97cb833442c7381287f0d845ed1c2bf8f42e5e7c1a01447e50a3d5377fd556d3e1fe8897f0ab949e847ebd8ba0ed3d3270f9bf89960959aeadfdfcb01643a122b6c768d6d84539d8f8a7820fe1079a63ce8bf61e8a9b73109b348f375c1fa7f436ed635e1b14f3015ebeadb71ec8db7eb449c97ff9bf529d9d17e3d9a1c50ead6390fb2e3e24656633473dddf6b393cb07b4d6fb7434d6e24c7789f0499f8c051c6cff278388647b7f02d54c657d37f12c22bd43c6035c10fadaaf92723ddc708be90ab4a842b62f75160bb04da3c903417e09f863fe28f60ed1019cb7ca9847c0f7e2174967cf00e89d600476cf93f9e6cf7f0faf9e15ddd527ccc53ed0f4b1e6154eda237338bc70748ae0c930a70907c4f88d3e5afbb22d681f20110b388de340022f641a23964eb149fb15d6414e5e6cdb50a45c741040ccf5e1a0fd5a59b0f6d7452ea05a9a6a393131d3a589399353de8c424d78c812958f8df0bf4be27e37a43074e4533821858a74d1971159e282bc29f9cf7b49e11bbc7d92966ce2dc6a08dba70d2926b62960f830f1a1d8b9818f1e8dbfc8ee63385dbdd403772e07cb49f4b7e0dcabf6cbf6e4e43d9059c96960d8ed3bca2ac5a7782d9c828c616f892e41a520983eabdc80fe94eabf0cc24a1d6b6e636bea649a242dac78455a9ee6db64bb541b5a5d181bf947693f3120d24aaf1ce78a31a1de54a694c8968508db75e838b50af2730a460c72c86100255082f2a6fa531d7b73555eacd15243acf705fc19b1b4f7496c9cc33022a45ae0e5cbfd3582b7254e0f18095ec2080ae40331f4a0b17dc3e41041475fe78205a30e0061a45a6c326f4252f04803632104168720537a5fffb9ebdb7caa1cb73f11ddb3bf32b863a4dbf6bc0a4a286af3576b19acd48d6e00c89fa65c6acfc8dddb9cf49fe400bcd624b3da773bd214579f21586764c797c195e5473fc56e6646b9fee9d48f2bf177df860253038b32c6462cc87bede03c29e9735f96f5770141ab39092800f7be36568eb521c3a298229cbe795b90d4ca9e31a1781be040444d0e75e25099913667d2e7096499d36e5c9e1ffacd3880620934762bba23ccbac3a7c61f3cec95c504cc239db849", 0x1000}, {&(0x7f0000001b80)="e930052b345d2ac8348723a20276d593c1b6f069fb41a7c2c84b09548dc9696551c2fc15640583a0c2ae138fd9f1bceed96413e092b68f52ebb1d67f185498691bf1e924d4dc16dca6fa221c20ef0d6be6fda4c67a4f2d8d67d80bec87e2a99b80140c18d9564fb15525f1d2e08b76c96032bbbe09489eaeccbd80475ac52978d3b3e222403f9b261055e4ad1cc50ba7ab7dad9ab4dc90aa57257238fe1051e57d5e2e5db8e26312fc6afad4eb15e414480356c14b692a1d44a5f0f12d625addacb314b0362a1e7560b687e613657b51a42bdc071b59c32dd68f5f4c1e586e4b1857699a30753d2c33c9cbed", 0xec}], 0x2, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x2f0}, 0x40000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x7a, &(0x7f0000001a40)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYRESOCT=r4, @ANYPTR64], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x1, 0x0, 0x80}, 0x10}, 0x78) r6 = openat$cgroup(r5, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, 0x0, 0x0, 0x0) r8 = gettid() perf_event_open(&(0x7f00000003c0)={0x4, 0x70, 0x0, 0xfa, 0x3f, 0x9e, 0x0, 0x3, 0x10, 0x19, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x88, 0x2, @perf_config_ext={0xffffffffffff8001, 0x7}, 0x500, 0xf7a, 0x1, 0x0, 0x3, 0x6, 0x8}, r8, 0x3, 0xffffffffffffffff, 0xd) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r7, &(0x7f0000000240)="30f93e012ba0bbf346c11d29b6f2867c949177059f68697c711d3497654afe068379c9e6307d64362ea4998467added36a7ebcabdc4d0139afd4659d24c0ebcf857e187d2ffe7f5bb673a5e612c1bf796f74dac91fccdbead9109ab28af88eb351aa92bd4271221268b965fea0eccc8f70f2c4aa2963b83df5b7a32e734fc635ba0058d51c659a223b", &(0x7f0000000040)=""/1, 0x8}, 0x20) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000940), 0x4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x241, 0x0) write$cgroup_type(r9, &(0x7f0000000080)='threaded\x00', 0x6d356) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000007c0)={r2, &(0x7f0000000040)="d8db80b8894d031c41ca7056c3d275c6e3c41ccc1a3ea437474f8fba6793bba393347963f7b61ad14a9872e411d06901c7c54c405151cad5", &(0x7f0000000700)=""/163}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b000d0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 09:20:29 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xfdffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:29 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6, 0x0, 0x60, 0x0) [ 457.460051][T10289] bond2 (unregistering): Released all slaves [ 457.508734][T10289] bond1 (unregistering): Released all slaves [ 457.683975][T10289] device hsr_slave_0 left promiscuous mode [ 457.732698][T10289] device hsr_slave_1 left promiscuous mode [ 457.787197][T10289] @ (unregistering): Port device team_slave_1 removed [ 457.799094][T10289] @ (unregistering): Port device team_slave_0 removed [ 457.811274][T10289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.857490][T10289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.992222][T10289] bond0 (unregistering): Released all slaves 09:20:34 executing program 1: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000640)={&(0x7f0000001b00)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000480)="84", 0x1}], 0x24f}, 0x0) 09:20:34 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xff00000000000000, 0x0, 0x0, 0x60, 0x0) 09:20:34 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x12f, 0x0) 09:20:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x7, 0x0, 0x60, 0x0) 09:20:34 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xa4, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffff9f}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2e}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = getpid() getpriority(0x1, r1) perf_event_open(&(0x7f0000000000)={0x0, 0x3a, 0x0, 0x0, 0x1, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xe}, 0x8000, 0x0, 0xfffffffd, 0x1, 0x7, 0x7f}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:34 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x130, 0x0) 09:20:34 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400801, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000100)) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000140)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000080)) 09:20:34 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x2da8020000100000, 0x500001c) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) close(r1) 09:20:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x20010, r1, 0x3bf4d000) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:34 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000200)={{0x5, 0x0, 0x80, {0x6000, 0xc000, 0x3}}, "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", "51e0867d6fcec7a3ce1655dc3e57317d86103894c329f0b08bcd9d7365be46135879e2dcffe899f82ead5d8e12c5a51da0d0bb72229693262140831a63c16a7450a163f480036e9542afe1bc3adba68df29072067cbdc40626c988197da6c1b7e485a90574d7a14e8e41e4776ea8f5d0c4fa2bb82163fc8e1f7562ef53dcbb3b84bd0f0faceed507238d53138e24b73c52748ec03139d4a88e0001aad70348d5d7abbfaac18399e713ee1390e6fcedd47547e7fc2797b371ad1c3d1833d410f721a1d34b9792bfba226b801279b2fadea093966a5143c7920bf2534a1152aad7e1ba924a08f9ff6cea8e1e0a664d1604cd717ac87d1e90871b26f1c17b93ee5c10111ca0e11c21bbb27e288ec57cab925b254339e7e33d1036a2b51cda1b92043d1d91707c3d1f5bf0e3c4ee134f30d40d9a2d7a2561e9eaec484c0e43ff756a75ded7d82578030b4a4f267b735335a082cb392391ed9b16b7d7b0da74f1de74b5b29ff0f9360897207238e01a36cfe9e0e9667afcb1caad956f964c73094bd3ef275e2996c88393b843823e346b7a657d327100c774868ebee4d1b809eb5c01eab60b72bde1315933b423b15010ceea0f3a93a824a081ac2fb6274f984b5709fe72315b337571cc5dd5850ef384fd1f726f412015fcd0a79a323a587a8bd08b30b830ae7deddd91220055f184613fb1667d984eb681e3a5d027f7d201790d6da411da3502d5bcb8e6348b7ede6daaa4598d678ee69af704f4b93c0246eea603f250cd21f9afc59671a1ad7f00fc7519146ee9dcc01f5dfb28621dd4c05cb01665641185440f9f59305d5932f4415e524932acc01bccd978b7a27b5838b49286800849a9f158906a2d0db3ee31a56f6585ed46621aeae79365bde59d9e60492763c3c5666295a9f95af2fda9111827eca4ab9a81bf2aefa5d33b5ee5ff9ee0cb07e126f203360ac83ea0a00c93af784f925dbc872f82e85722bccea15712c8b26fb93f077fc6ee0fed142d95f78d1b1c04292b52be2f049142bfc5d8eaaec082dd827fed0eea03f434ee45c87c32c823ffbe7862e851966c9123aa2cf4cd37165c262759d25069f694e4b7ddceee4e82b58b0e01ccb54669d5234cbf52ee65cc462dd9fe20a5551a6f74ccb5b541cd469789bb1e64c141d089c4ecbed2aad456d3a7b9f1d6bf8b4789476c8421d6607e87e02d8fa4d497ba80221ed5c5e39d6f6466d28ddd3d878cf7e03041d5e346eeacc341308c2f69c70de3298d09c3aaac82165ec3a03a45d77729acf8eccf3457c2903debc84c809641a60141a886839dca7b83c0f9c33539f4f9b7d238343e62974104b8df9f4dc2a0ee7a15fd72232d01314eb6be371908ca5a9ce8d727fba99bd6333bb94a73847f8360a09f43610b436353c11b41c3bcd5c4fdf94465143db44e8246629479c2d806a64eb3d833b2d90b31364319aac920b5d5fb3dc2b84651efce4cfa53fc98adbc334f2925f84df4e6e741773e81a33f5b313f444f0dd73b884deefbf14cf04ca9cc464086ccfdfec737380c415364d0deb57020115b3ad46bf56f72b9655c6f80196dfe2f44058f61152f64608d7def0ba1fc427088f7fdcbf4b828d4417b4533e2772f7be6393e79e53be052c6da69ba62298a7fddbe1b6cf31ee3fd356e3a95fe6d549de599bcd31681fa67a6b1f49ad9f58307d9cccf763b9f8cd23beddc6f52ef86cbbbbf6be0eaf61170097bcf54ddabba6cd7a81a489368a0a5cb7fc6aff73b48214f5f6c613d96d16343cd767d2d71b9c72f05b6dee412ec0ae696f833aafd9825301b1edb41867d6d5db762791239fe2c27c510969361b82b70cd85ef572d0d0575280090f64e12e863eaadda512add4541fd772039a5717bcfc46304341cee05d2eb59ba755bd8fee681de9172487908a9ccbc77291f89a2ade5887b0ba93e5728b760fcc5c8c0dbb0f940265ee75c4cb1f9919e63e2e4abca62a03bcbf3eba73cce24d6ca155d7deeb0f011e898b8fdc17ec2fa984afd21234f9e557834d35ed5b065d45dc9de6e45bfb5a7192043b51b6d7ae962ba56922226d3126f9fd921763d32a10419dc145e32cd0db127d2cdb96783ad1177267a37165ef8e2e76f64195abf780b34a2e57c42a873a8e40b7c7911efaa4c06e251f9857478bfd5f83d64f9803a9eddd52244db90af05e231d788c75d23932025cb2ffda6dc8f10ab225929f75e4c5198d2343b2822d72f5409af11ff33ccb098866ce26e0e7bf16e3f508560cae254e73537a58861fe798103428639dc01d8ef52c0bf8884e02621acbb83d8eead6d39346cce9b5d76486cf69e79a72f48bf1cbc745db67476880d559aa6df78dfda21664f0abed27b0f43f97f785671c5c507aa6e3b5abc58291e85fbc045fa32a48c5085f42e54c699462f98aa1c5b44d08344cbb440ce14174f87bbabce9019c71be40f1132740fb20f61187408275a2cee1d90a466b084e1a3b906f8e169e9f1c9ec55a1d0c1226c664d2335c6b297ee31d853b6d7a7e0fd81f01635e4062b476d8902ed1f4d6e42ddd10a3370bcd92ab0110f204ae29e8cadec97f4a8471aa4912f46fe528488497c82cb74718bc6ecf66451faea205e2050a4681b723cc99d13dc53e3609b8034b89d44066345ddce5fcecb2fd8335e979eb21f61627a627f454d0a23399abddf524972cc196c4f6599a902f2bdf28a844ee21f9e099d7d5ba87fa72238079f54cd4f5211c7181d5155f12ab20ff2ef6a1416e4d933cccd9ec3ed2c4ccccc05d132c751b8376f1abc463a350e6f39fe04f06ee6f9a6e12405ac343e0cdb9fb6716401804c493272fd72e647b04dfd68fb5a4c303d4bd23cb8aaddcd80b64f483dde6537c9f279b3e613ec3cf4f649f6f5ca3cfd890a247c755d7698095df1c723b39d5e901e47c082d990afd5008fec4764540e3cd574d5b53f0f44dd2efc0a705967531aa1b9bf401fc945a5f7346bf8ae96dd8aec7cbf69d173a7fa6d9304699dcab557c5bf43acee0d61c85c1f7078721c97c5410123b2f0a4a95cdede15906e27797c85f59b884a754ab000c8aa6901ac726a2a65bde837cde52a149521de8dfdf31ed1d64e16e115621530b3f90d931dd5b3dca96d05868d96b3140d6b716d579c1eb534a5bcf084acb4d1adf3277eee4a2aa6e5dd53f1b208d16be5826bfb8fe78d28eea140c22092f4805127c4c6fea860c5290c9464c2f00582c80dacf4dac487af109744621818283d0f7867c2d9257dc3241e3f3699e16a48bce23c2563e619e54ff4ffb9282bd8d8720917ab6e482d20370edc66e9a1e14a1042fca87cc817642fa1c3d3cfb4aa8db2ddad2a605f35838aab882c746a166619a1d145d2cca43d836bf041252a7ea14e91865ab3ff9a5ef107b035f1fb8115ca624e497c5007811a2cd3c400c5f43e7d6ac37c061b22c3a09a2db791749d35891127eccc20e3f5f151b44c89c8cf4a73b57283f519665b9b7361f235f9c2b1b0e8b2aad82439f8b977ccd352bc6fe673a509238cb9fe9817b4eb09faa8e54f8e8c4670f1ba6496f54a76fdf3a5c6c3f569d14d1a2df12ba64a4abf6943cafc1fa6f51319106f79e37b61858f75fff7723322c2d9b3f7547caf5b318f64e5f443e1ab2e14915deddde164796ca750a446c0d3ab0b5d8cfb0954a034f73506788ee46e192cbb925f933581c2ad99eedfb30b9d49d8ba13eaa1e74ba1a04f6af9d6f0bb12622951ae3771bf75696960605d0f6b0d435cd7c8b9f9c867d92e887069724423b8431ee11e74e140e5c7fb100211c6a258b9257c56d06be308ddf3f048eec42ad020bddc82e0b9f6fc366cd1a082c0bec9570d60b45a2328f38336634fdd523c384ddf269e47626e53fd55e122285bce429d653a1b6c68717cae9b4dfc0314309d093ff4349ffe6154aba8adf9f88df2e25be5c954de8243e21db95be4d4f7cf4138ffc879bc2b60217f737ef52d3a12e9cced19e6e802ee1b43890d62e3a0795ff7682cf9399fe0dd443692e86a5f99793e3842ca31d217823d123627b1bb629299857b9d4916c1c6ecb658a052ab6dc28d80bb6b279a43b2b31cb7ec6000770d60692482e54a63b9c88d79723db29538dfed76cc76a75856d3b11d439934cff35c4126bcb9b3f192b206fa7a811db36ce56456f0fadacae2c7110c53ffba436a6f1d541e1aa33a97b26ba5cdf618248905a447870b0d2e61139d857272c8928a6d9491cba49b4852722584f4d537063cd3abd02d4f7d5369d41320437072d71e491e8067ef30683670ed19b8c0801a4cbfccdf8e62568fd5f1e031bf20e45a13c650d61a092a0c0cb1682d115757ece8a7939a3cdbae615ae4302467a7d8123722c4a691b3bb54ab8a2afcb26c062d335e9080e0e5429a88c393c51f2eda5154ddd52d8d412ec5bc480108a0f8fed69084c52bc5e709800491e8d6fe9566c47d32066336ccac2ab8b2aa8eea0e23d92b05b4e5d3dd16d9c89ebdd05a1d6cc72696cdcb5731f014ffa777f8dd1645402c80584b7b5dedab26982a95dfe89a4a6efe44f88c71bd8863d0a6c517f14893fd7e5abe3c69bb448a01ac419689097b4edbb4dbb846817698c273fa95de7f0bef62354e8b930c7577dbe38ef639f9f04a5ab5ca440e90621a65e516310912cb9044c67551d2d23846296136077ceb513b099b4fbf485853c641c381b47fdfadb2212605303d311e8f4215b70a6393903ac7ce32e29e4a025fafc5524cc2761aaf9d5ce012f924380347d82700c69da4367353c41fdf46974631708cbdad21bdad39a7290b108410e376a4e6dd97c73f0e8f4c3fe7f1482bff780fdd0338a84f906a4bec4b38bbc86e41bf0d718a8882d09332ae1e73bef41dfe31a53abab7e6065fd897fc2949725212dd9ea99979d7dab2fcf595921eb497dcf0cbe88a555cd7eebab01f27b56f3b80879326186856f367a2dca486cd750d177b1e7f491e425b3b518152609fd84949dfb694caae73683089f2083e849e287ed55d1014ec65d6aeb0a5c41fd972292c713916eb4c7c3bae98e490f40d6aebb1cf2e2c20a17457e051235bcd77ba6763c736f37c126a1b47b3f1aacc868491b5c6098d4269cf63e598fb8160f2b3d773cf09c2bf999564ce1dc4cf42625aa9f06090e780e1e9630352e126766f1b8927632fada1073483fe0fc233361c91c14ba4b53d3584b0e7a22a881a9653a20f2f9c7685db4bdf715511dc9f078d6653983e727978b8bce160131393610d47b7b0c350d4150c0bc4db8c66d82aef06bb531b7d97a86f095c9fdec1dd9e1223457fb2ef604f4ed38edd52f07ccc516d21e60e71a249f1935ca74d76baba609613cbe8d63ceb1045d82807a8b243759f7fc141bdcdd90bdaf4c07c0450f6e9ab375213b545aa5e5a641ba63d1782a83d43d0f2892a5e7e4afb956dd44e4c39986c98f365b7369bef500bbc0a69dd430f7cda5e5d15738702cc51953e85b641fd5f7444bd428632b32a18b0dd0a11c20d19bc8a0112d48a2ad92a446f97a27ba8830a26670dd2d21cf2fe53122a7fca355d4ca817af8c4fba56aa033fff6554acd3d703ae19d1c5be77b5d50d276498b352d581e838fbf6fb7cce3523d6c44090ad2bbf3f39171cef2f342533f2d9f95479273d81fdf5d2b9446b0598775d3ad27c5f3af8155ee87e99a8dec6b325ca129b555db627089fdf3edaca9e293895bfafe1f380fc2accc2278e556be978af7d9545712290f3d116a4b1c004d2fcb6c7b15d60eb5747b1e58df0b511976eaa8088281efc3f9a0736491ecb"}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="000000ea08d04bb20d080800"], 0xc) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:34 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffffff00000000, 0x0, 0x0, 0x60, 0x0) 09:20:34 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x131, 0x0) 09:20:34 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8, 0x0, 0x60, 0x0) 09:20:34 executing program 1: r0 = socket$kcm(0x10, 0x800000000002, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000140)=""/257, 0x101}, {&(0x7f0000000700)=""/60, 0x3c}, {&(0x7f0000000480)=""/67, 0x43}, {&(0x7f0000000b80)=""/110, 0x6e}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000cc0)=""/203, 0xcb}, {&(0x7f0000002640)=""/4087, 0xff7}], 0x7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2e000000120081aee4050cecdb4cb90425485e510befccd77f3e9cf0758ef9000600b0eba06ac400060003000000", 0x2e}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) 09:20:34 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r1, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, r5, r4, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r6 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r6, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r7 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimes(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={{0x0, 0x2710}, {r10, r11/1000+30000}}) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000840)={{0x0, r8, r9, r12, r9, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) setgroups(0x2, &(0x7f0000000080)=[r4, r9]) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:35 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x6, &(0x7f0000000080)="080db5055e0bcfe8696071697b35d154d12fec0962dbbe74fde383ec3a8af6a0ed5f51c5d9720fd464a40c675a52395387ae4729fc4421aedfa239319925839b94c2f66a01099cad0b86e9e5619ae190f083a129a410b1566d19186f2622de43a8d2915ac99a930466381eea810ebca7bf1a0080f382164caa61f5827bdc57ea22052a") perf_event_open(&(0x7f0000000000)={0x1, 0xcc940d3110009b83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0xf1c7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2, 0x0) write$FUSE_BMAP(r1, &(0x7f00000001c0)={0x18, 0x0, 0x3, {0x8001}}, 0x18) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140)=0x60000, 0x4) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:35 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x132, 0x0) 09:20:35 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) accept$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', r2}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in6=@loopback}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x2000, 0x0) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x400000000000000}, 0x400, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:35 executing program 1: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000200), 0x12) 09:20:35 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r3, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r4 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000840)={{0x0, r5, r6, r7, r6, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f0000000200)={0x90, 0x0, 0x6, {0x1, 0x2, 0x6, 0x2, 0x1, 0x7, {0x2, 0x81, 0x4, 0x3, 0x3, 0x9, 0x7f, 0xffffffc0, 0x3f, 0x5, 0x3, r5, r8, 0x8, 0x10000}}}, 0x90) r9 = syz_open_dev$vcsu(&(0x7f0000000140)='/dev/vcsu#\x00', 0x2, 0x8000) ioctl$KVM_SMI(r9, 0xaeb7) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:35 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) 09:20:35 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0xa, 0x0, 0x60, 0x0) 09:20:35 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000080)) 09:20:35 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x133, 0x0) 09:20:35 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1de, &(0x7f0000000000)=[{&(0x7f0000005440)="2e000000120081aee4050cecdb4cb9040a485e510befccd77f3e9cf0758ef9000600b0eba06ac4000400009effff", 0x2e}], 0x1}, 0x0) 09:20:35 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10890, 0xfffffffffffffffd}, 0x0, 0x0, r1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:35 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x70, 0x4, 0x4, 0x3, 0x6, 0x2, 0x21f, 0x38, 0x13d, 0xff, 0xa3f0, 0x20, 0x1, 0x100, 0x800, 0x88cd}, [{0x5, 0x80000001, 0x2, 0x7f, 0x5, 0x7c4b, 0x6, 0x2}, {0x70000000, 0x3, 0xff, 0x6, 0x1, 0x5, 0x81, 0x1}], "d6988e2442e327367a1dec70cf5bb656af3792ea6c82f414b1af15dff3b5ba5bde00d911007798fed6af2364677ed1131496263be4ee07a79b58f8954f675083718d66db406a24f872584c82d4ff74a73101e6306f5a6088305ecc5cc309f69c83cde8a5dd84aa", [[], [], [], [], []]}, 0x5df) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x7, 0xc, 0x4, 0x200000, 0x9, {0x0, 0x2710}, {0x2, 0x5, 0x3, 0x4, 0x7, 0x85, '\\,>E'}, 0x3, 0x2, @offset=0x7, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000180)={r6}, 0x8) 09:20:35 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x134, 0x0) [ 459.724204][T17665] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. 09:20:35 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000001040)=0x8000, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, 0x0, 0x63a7166b) 09:20:36 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x2, 0x0, 0x60, 0x0) 09:20:36 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001400)={0x4198fe88, 0x5, 0x5, 0x1ff, 0x6, 0x6}) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$cifs(&(0x7f0000000080)='cifs\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x5, &(0x7f0000001340)=[{&(0x7f0000000100)="b3052726bed33b4c19fde9ca70b00e54fad9ebfe4105700203116c7af844722e358f75caa1e2957b63d24882a6fc1f08aa6c154382e14d73a99430c394e63855b86fa63fbccdd1a1bcc648ac4b0808fe", 0x50, 0x6}, {&(0x7f0000000200)="7c5bf0c8cce9fb222bf7a401a8e8292d26e837e530549a34127022feb5d3338314b7a49a8d79c37a63deaeb34da469a5537cfb4a65683e4c23f281d2cd0ea5aac8133e9c99039b4819971dda8f620228a403fefd29c6c73371febf8317b867b9d94192f7c4de517965a47dc1d4e864c72722a0d9317bd604231d300fae3c4a1d96a3d1be81c19b1abce84a46edd4b2e273d98b045f729095fd4759f9660a18b775b2bee94cbeeb72350170ccff33152d4479e972ef6dc5866fe437b139bb595da2d075c4bc5e0cb2ad481fbb66110bc0de747cb350933d648a06ad141745547b88863fbb6a2a4976a9e26cf5d4984175a138da965eaabdbb1db90df7bff60c04c6bf6766648c43e6644c7ededf4956b223e9d2f4338ac9423b5edd4590d6ae61debd3d0ab0543b5be80ab6ddfbbb9c6f03e4c05e1abe522626d42b69aba29721f54ee21b9ab2c216c5f449b468d9ed9d696697a5013021746b7a249a8d5bf2eb305abca00bf58ff09f625d954fd98bd6f3bd4edf10f6f4ea0b6b1d0cc175e4002bd514111f61b10d623dad0ede123afb02a7a007c9a5092eb45cbb3ae0593151dce8bbdce9a3be3189a674cf98fe389b3122ca580dde6488c6f4a50b3eaf894a3568e10c6609073c4a29ca590e530aac28828d216d4835ca38f6186cb68bc816898f820030d6743a5bea732db4c4cffb0c5b734ae0d9cf9d7fd859865f541f07e416a81b089b770e6e22e133b59332591ec3a831d6159a97e03d387c20e4ba58b635554cec77fcf777cbd4a7e6736b2ac5b105c0b1ad734305541ff95fdd081019981484f201f7a7de967a6a25787438debb978e67a2bbc0e8d981e3e496a069f85a2f638ffd534d6b107ccc82b78919d3673fecf4a629a160c1611269835da08e9757db58d47057c9b91f6bb12a1b387d261f7a7a5eadd500e40f7a1c83bc030f4144390a65ee23c5d1374a9de281d655dbe6e5a3b0d72f30482a8b87ffb811ddc31a8f365f57ca2d44b579f3a276b06dd54112883d0d2a597a3879965870a14ff9410fe20862f1b3833c0541696e3cef1494e273c16b7181b5e3da37cd7b45adcb45bf08cb4c059fefa459ba74816380cd889889cd22e6f3a6d31aef0ef0d42993876590e3c748e000f99e8e2ba598cc33e9a6df2adc87fd25e0ebed3aeef4b0046d70eafb231d267249f491a052aa49f32e722fb0bc1461ec8d3a61327d3af74521fb1baa891f0d66b8612c3a49c452ca4e62ee583f8fab49550ca2301868d61072ef40300111ac179f5dce05f360854ff5719aaafa972cf422ca0d484c10875f42b92c3c7472c94998785409202569a6e7456a2cd95a9dea6bc5a68fcdb130117bf1da32a076928dde7a6512d6abce2ba22b852a4963364b5176efd8a3a28581e761743a4b70670788178bd0547349ef010ab4eb36164e6ebd1d5e72ba4b24abf17d8531f2f518f5847cd87068ad687723539d6d5412f944fbe30943bfb6cb61daefa1900a6c10bd00e16efabb1956b7b4f4adc5aeff3ff86db02a57412e284f33197c53643771715294afbd36fb50234e4d4aba99a2f580f8a948b0a737c0f10f360ea6be2b36422043cd938b9bfea077f810b6416a5d45e3d946e793fff9a8173bd9eb50b65a80f13c7f0e5add19dcd0249db4740766cc11fe3ad7160cf899d3e8729152d92da65f474382812acc1eeea95ce8fd5c4c4a2c7d0ef4731980980a7642be7a456a19b6ee7c30a9a1196ffe709803d40138f3a047fdc2b365432507fafff682121c55b602a10a1121c9a5fc62bf210f4b547781a59a47d463b48d290b70a20efce886b85affdf4810260b90952e5c60223d42810b7b91814670830759b2f5378257afbeef8580f32c8c0d74622cafbb64e74936963ade9b0b1397c696fd10b761837cfeae1998933143bc31a7dae8c5e6ec554b8a612b02e3c696e3561996bf38929adab21ec9142804488a9804308db1d20a5d0f52be67b52e850507dcd7fe226a57e47204ec7f6033e24ef666b6734ddc3a6bde776e030be2864dbb20c0d19a79b0c0a39e8d815f00270c03992fa5b3c5bbe1c17ac0bc7870ed1a0953e5070bc305ac59b758b8c6e4cefbf8cf824d268ebf26591f959880b28b5f3ea199158119d7516e4df12338b43997a1a5f98dae073f20c44aed1a98810b5f299f3394d994edf0d6afbb6d3d099cd2943849fcace6544b5feacd917921a2fd6ac8ced3f3b01bbce71e523c4f7113ae8c84fc586dcda826adc7292279ae736ee89d771f236b6f60c2678f52e4fb14a27b82332706d040995c21d3e3b8dc353ab7d8cddddedc71d124facad96b5be9e981c36da9b87c8d7de3f6dd80e08ade372b280f9d9e6fd3eccb090ed8be6de37ab3cd8bd73e1ad8070ec9461ba7b067fbcb4acaeee5bf2ece1b9bad69542e30d39776b963c71a7159095346c441510f5e1ba9575bdcf6e6feaf54055bbb19e7e62bc095506550a7def2404b57b26efb0ad5e41f38a7a67ffca6687a73b15d83b0fcf315a17b4d2ad58b4663fd1cd288220a32f8d3bb5567876346cb18e7b66fb4bb119d90e124c16affcb22d4edd613121552b28f66c69d42c88f946eaae81f12956e9dd00be75063baaad2b78075780dae82060f75c384aac7b7d94beb1fabd62e0aadc3749aed15fb093bf206712520121e91300f8c899b993c6ae309c36dca681439ef1b205e7c4db57b1049ee62439b77fbef00673b7c0363ea0a0cedfe4164dbe47384e7a56a27aaa519eb56337a77c384ec5bba188720a75c785e64e20ed6b410b1db3b0ab930479e912fea1287ed2e35f1f561f42477d3686ec98adba7624b37092ee653f6516dbcbb8a401fefc303beb7bbbc3519e3dec0ab8a94bdf2708b576d15e1115e73146c855537aa3ed0bdc4af1a2b0ecd7418c7c3fe43df8bbb3ad8ac997637280124034488d4d17908a119a853e7d01b225784e8b9bbd20ce1979fd81e26ecf7625d27142036485eb32f841ee9e238bfb0accd0b6cb90c1ab3a810b516b4e348f5b5d271ccf67ed475629f8658628bc3c4b67679fca244b9585c1a3d1763d8e88666cde305abc0d89236e72ca037dd459b9ff2cb825d9defc798cf68bda88ee8442d8564b8805ce7dedcfb07dff44768d1b6fc891500f8affcabea8abd9c5375a8f48a1554949e99e6a392ee8d4c0c2fb3fa2009ec19d3934b5bd7ee6e82dfd81b555348f8a7c207d072e9d57801d21fff5f457b286dbbd2bc4edbfdd293c343e229f9685bf290893c3a793d2c43b02df9217dc0b4850b42b489208bca8c851721badd09140da1fa351396b4a27f75e67d077fbe5e6fbbfc399df17ef8fbc5c25c6daf3657b4c5a7f001d0477f9e239260dcd0d971a3e64552c8d0ff6c14b8c40514aae9ddf5dc174dab7bcb0b7d3b478ec1cdb9283cab3ae512f280aa19cd8a8ee68a63500fb55a0c0bec8103b5a6a0781bd577cc25be55463007f314f09a98ef6d577240fb6b4b72cea7452b415255a01d78708363568af18c9f6fa1cc0943710da803fb3a200bcd8ddbfa174637ecb113d794d8c25e06ae1f93ad0febc95ae42f0b6af84f5c6f0a464bd756a9ffe33b055f6036f6e926e2b4e56dbc1e6bf9c9a57931d15ce73296413b36b7eb1ae3ea3fa158cd3d00663d4cec557837fce07498b2adaac60df970ea7b15edbfb1fcea8929a693f0b504466c1cc49bf575c65339c20aff7d5f7efff855ac3a2d14a8a11c193acb15a73532486ee62890fc96a7cc6226111ce2b6021678eb2b7ae12ddccdd8a82cbd8097512557144242a53d6b9205568ef9b5b3dbffba46677b34efe212cf441f221c97f2ace40aa8efad09fe9f2ff6ae14847285ca4ef1d64caf4b44bc78c42c4d151ef38384bdfa0f89470b728e45670238ccec9112f7d12d90cef9e887a4a540f47968e8cbf35eef2ebe537ef6dd40989af13d964c33e4ec3164fad6fb8ec7953f2407daaf087fe4914311c16918e192ddc802ddbbc46204863dafc52e8e31ca0be4dd81cbf8d20a61c3d87554f6ec6bd7e60acf3b7aa18466b0db95a29fc67d5a585448d8e998cd97cc513ed2214e56f785762f4295c66d15752599b5ea77ba4f1bccdbf52840fd71f7d29a85742c5b9ee370ac869a29d8bdf5b8258d16ac1d5f974022a24278b09103e8b9d6ecb6ceb8b6aae7daf994b8282244eb5163c649f5ef51cd7db3412d3e905d914927f9e5ca0d98c3f363a8cb820de5cf79a1999459d63b55cabb058f10b55feea656b9086562c96f4f903b35561809d92cb681133c1ededf12bd119fb71fb5844bd8b45b9a01855469cea8058fa7d928f6c202feeee121458961237e8420d151493b8932e1b2f3ae20db4ad23a32618932ec7c381dcf54a24d5d916c47f84b58c82ac952d5d872b97be33e0af712d6af092db84b7285069d7c4a656adf4ae0e6ff9aef22ed659f9f1f2e9298b1d3d1b19e0818377cda3a5c9dfeb43267de1a9fcb86465fede55c0711ac145be15c3773f352b22cc2db305d01fed226b9328e6bd237ddb916d081bb37900229ad7c8c11606add6bd2fe22c7ac75ef097e7c5c06f550e125c8f5e7a779b7e156d5dfad76cb143da01afd5607a91bf4a46229da48f58abd7c4b5becb341f535e6bced823897d313399fb688218391d2e173c2ab0f2fbbaf37c7181d98267a38458f9a3284c86afbd0f38dad695e12be550e8d46091ea5d7877173ac70365fadd3cac9dd4a1675899f51d435786b1aead31a45a5efce99eeb4040a6067991f8a213a41e0d2fc6e6abecc3ec03dacd9d26dc94b91cd8d49c5533db01b53d1603797cfd921db75c7302f47f4404ea79f1224dcc2943bc97f9bf6007fb8f520ff033b6f17a3492dfc515244ca662800e3b7751eb9d18c69dfbe8913ccab6cd7a38338d794c7300a98b538126a185aa4d05d99f6feba5f33aec0d5f0482d645c72e3047fa41512f16d0b304094d0ddcfb9b5524da77a32ebf76fdb838baadca1d3f4b29a1a4f675ea1a71c138c7e8ff6b9a6c7eaa4a759254da1cbf04a9e631b184afb04b7aefc73f605a52618e59a4c68a776d6ec2b7bacc150c5dd8b50a0cd07de4163f45dc0aab839305dacc9762c3beebe8829b783a0cf7eee021b438408a65041ec231ed1a650ac2bd2e2ea7224abbe4241efc52cabb1c905bf52922a0c55df6214a273888f9048b4345ff5a5b4f5dfbbb7a12b6a17fefa11e13ba26029f2714d563d4bc62745b8b8c654210653b26c4b33bb6f6c74f74f272bb684e20b3eeeaf87f569dbb9222b310f196a27b63d0e6283b77bc7cbfabba29db10a388837680e6dc8b058684ce53db02ba4cb6311a44be39a43e09838cdf8169d9ce28ae31497af851b6d859e2432b7b4e9abda73faaee42886219f3c5bbded9547b51ff8e3534376b608c302b873ca12114ad90b22c87760bea44c541bcd9b0ec05e522dbe7d568463f78fe9616bc23392fabcc1ab406b3d3c524a6834858c4a5f0a6c6122abac0a624f56b4091ea58b3cc716da88c30397324e8d56877343f07b10ec5df14ddc73748d97a681bd936cbcf13dcaabedf05bac922d6717b927e1d02c0462c8a98594eb41e0a09e4ce616b30e7b14c58c92fb2d1a6016fabcc327bbbb25ded4a68c148e6cdbdfb51c65ecf431bcddacb7fa19c2f7257f7568e12b6c3b88edd4dd3ba593f08efb290396de00b2d79b5c44d1010379d80343e5bc6820c5ca674c146287e471ddea8a11c37dc69cc6425833518011854c432837ff6220c04f5dacd142ab5990b954746e2805efec867d92d952fed6eab684d7", 0x1000, 0x5}, {&(0x7f0000001200)="0fa16d8d72af1158855c616bec8f1808800c25d0b74feeffc5e5f66c0f34cdb173465bbaa59bf4f18548110ad956c413290c505464879cf880f96843ee57df60d58c7bb293a54592fcad8c288ac77894d3c73a08ef214fe76b5f48e30d89f81b0c0ee24d1b564a67987566f158fc68f32151d33d188c105e8fa0672a9abbb5cb55b2afb1cdd36b0d42cd9fad99e067e42015965240391da4e5756ef81600869b3fc05a6ea152876e33aac7d7d0213168a98b7e670faaef890c0a3e393e", 0xbd, 0x6}, {&(0x7f0000000180)="c82bbf90bc093ade6f747836b380cfd2f358682d11b5c84760d1dbb4f2", 0x1d, 0xbde8}, {&(0x7f00000012c0)="8ad7fd5dc03089be73248b75f71120323d7824ee8bffa102573e369cc188d460c3db7f6108f33bb16e0be7df509cfafe4d76732da02f91403d3ced13327c9adf18eaa8c75f586ee1db44d74faf72de59c0f94ea7666d83075c2789546b4a0c7a8dc76201294dec3956e0", 0x6a, 0xffffffffffff8001}], 0x910000, &(0x7f00000013c0)='\x00') clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x10, 0x0, 0x60, 0x0) 09:20:36 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4804c0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xaef, 0x7}, 0x10100, 0x0, 0x10000}, 0x0, 0x8, r1, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200, 0x513e6ab656e7a7d6) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42800040}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x842}, 0x80) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000240)=""/73) 09:20:36 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x135, 0x0) 09:20:36 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="fdffffffffff96c1e9574b31080045000038ffffffff000000007f000001ac1414aa0305907800000800450000000000000000040000ac1414aaa5246a58387fe3fa1562e000"], 0x0) 09:20:36 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = dup2(0xffffffffffffffff, r1) recvmsg$can_j1939(r2, &(0x7f00000006c0)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000400)=""/69, 0x45}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000580)=""/56, 0x38}], 0x7, &(0x7f0000000640)=""/107, 0x6b}, 0x2040) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_adjtime(0x7, &(0x7f0000000080)={0x40, 0xa6dc, 0x3f74, 0xff, 0x100000000, 0x7, 0x8, 0x10001, 0x9, 0x4, 0x224d7814, 0x1, 0x3ff, 0x5, 0x96, 0x0, 0x80, 0x7, 0x3, 0x4, 0x400, 0x1, 0x45fa, 0x87d, 0x2, 0x8}) 09:20:36 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x3, 0x0, 0x60, 0x0) 09:20:36 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000240)={0xb4, 0x5, 0x4, 0xa0fb7e1a6e1cb48b, 0x1, {r3, r4/1000+30000}, {0x3, 0x2, 0x8, 0x0, 0x8, 0x7, "df3c2d6a"}, 0x8001, 0x0, @fd, 0x3ff, 0x0, 0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x400) sendmsg$xdp(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b7ebf94775e8195d650a560e92dffa0cf580cae86bda76300ee915d17a8d7f1510bd9951f9988bd30dd7bbaad8f853bd0fff0a562eda15c0ac26d64957f81ed06ecaca3b8359b7f0b25dfb4eaa51179e62b65b6d3ab856ed32a923d428866bb44bc8284569d077d002898437b15a68c983619b4d8e1f0f6036e643a49fcc499040a1562b4a67369d3063259597698ccd371bcc916e61df87a690a29d7263a91de042eb3654329bfa5438d04cfc8988343fcfd3e793a68eeb3fca371c699fdbbe601b28c226e14f694e76fd4be94fd4655de7338b94be9cc3f2ef9f1c", 0xdc}], 0x1}, 0x44001) r10 = dup(r2) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$MON_IOCG_STATS(r13, 0x80089203, &(0x7f0000000580)) setsockopt$inet_tcp_int(r11, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r11, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r11, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) fstat(r11, &(0x7f00000004c0)) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, 0x8, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r15 = dup(r14) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200) r16 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0xa83be82ea7ce28ad, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r16, 0x40082404, &(0x7f0000000480)) ioctl$VIDIOC_QBUF(r15, 0xc058560f, &(0x7f0000000080)={0x3, 0x8, 0x4, 0xe000, 0x20, {}, {0x93c8e6043092cdc, 0xc, 0x3f, 0x1, 0x2, 0x6, "21651e6a"}, 0x8000, 0x6, @userptr=0x2, 0x1, 0x0, 0xffffffffffffffff}) write$FUSE_OPEN(r17, &(0x7f0000000100)={0x20, 0x0, 0x1, {0x0, 0xf}}, 0x20) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) 09:20:36 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x136, 0x0) 09:20:36 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:36 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x48, 0x0, 0x60, 0x0) 09:20:37 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000000c0)=0x20000, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:20:37 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x137, 0x0) 09:20:37 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101040, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:37 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4, 0x0, 0x60, 0x0) 09:20:37 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="076eb9995e0bcfe8696071") openat$watch_queue(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/watch_queue\x00', 0x202a00, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000280)={0x0, 0x2, @value=0x3f}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$CAPI_GET_FLAGS(r9, 0x80044323, &(0x7f0000000340)) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r7, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r7, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000300)={'team0\x00'}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x4, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, r6}}, 0x38) r10 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3, 0x9, 0x7, 0x3, 0x0, 0x7ff, 0x1800, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffff9, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x10100, 0x401, 0x3, 0x5, 0x8, 0x7, 0x2}, r0, 0xffffffffffffffff, r10, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:37 executing program 3: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x13, 0x1}) r2 = socket(0x1, 0x1, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400001, 0x0) fsmount(r3, 0x1, 0x85) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mknodat(r5, &(0x7f0000000140)='./file0\x00', 0x8e900ffbaa278547, 0x5) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000200)) clone(0x58004800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:37 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4c, 0x0, 0x60, 0x0) 09:20:37 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x138, 0x0) 09:20:37 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000001a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x244) write$binfmt_elf64(r0, &(0x7f0000000740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 09:20:37 executing program 3: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsu\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x2, 0x9, 0x300, 0x70bd2c, 0x25dfdbfc, {0x1e}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x183c}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000080)='wlan0\x00'}, 0x30) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffd30, 0x0, 0x49, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000100)={0x3, 0x101, 0x2c, 0x400, 0x3f, 0x1}) 09:20:37 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x5, 0x0, 0x60, 0x0) 09:20:37 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x139, 0x0) 09:20:37 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept4$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c, 0x800) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000100)={0x2, 0x4, [{0x7, 0x0, 0x1}, {0x4c8, 0x0, 0x10001}]}) 09:20:37 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000001a40)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="b1", 0x1}], 0x1}, 0x8000) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000000), 0x244) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000100)="b4", 0x1}], 0x1) 09:20:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x68, 0x0, 0x60, 0x0) 09:20:38 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x13a, 0x0) 09:20:38 executing program 3: r0 = socket(0x1, 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000180)) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000140)={0x30, 0x79, 0xf94, 0x8, 0x86a}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x9b0000, 0x9, 0x8001, r2, 0x0, &(0x7f0000000080)={0xa10901, 0x4, [], @value=0x1}}) write$cgroup_type(r3, &(0x7f0000000100)='threaded\x00', 0x9) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RRENAME(r5, &(0x7f0000000200)={0x7, 0x15, 0x2}, 0x7) clone(0x50000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:38 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x13b, 0x0) 09:20:38 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6, 0x0, 0x60, 0x0) 09:20:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x8, 0x8}) 09:20:38 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @loopback, 0x6}}, 0x800, 0x8, 0x800, 0xffffffff, 0x2}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={r3, 0x3c, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x5, @loopback, 0x8}, @in={0x2, 0x4e22, @empty}]}, &(0x7f0000000280)=0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_buf(r6, 0x0, 0x1f, 0x0, 0x0) r7 = openat$full(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@empty}}, &(0x7f00000000c0)=0xe4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f00000001c0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe4) r13 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = dup(r14) getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r16}) sendmsg$nl_route(r11, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48001000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08001000b89900000c00090002000109", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4) r17 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe4) r19 = dup(0xffffffffffffffff) getpeername$packet(r19, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r20}) r21 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup(r22) getpeername$packet(r23, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r21, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r24}) sendmsg$nl_route(r17, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48001000}, 0xc, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32=r18, @ANYBLOB="08001000b89900000c00090002000109", @ANYRES32=r20, @ANYBLOB="08f97b00b6168fcdb26fb9d1a455565284f854fce5c9253a8ad2c99087f1494ad8aee3a37020b79440e070f3cf19c0e2e7dccc4fc2171e463e0e899eeff102ff2d4eb057075b2aee5d6d71aa56407fd8617577b0a0398186e1a86f04b8a3f4420cda2ccf7ac945187cc74c2a86800705b7b95fa1df62bc67cb55a759fbbc91f1bfcf15e78d3d8a0f15fe2869492166f775bfb732b4e9de43334e87b86a28839a81d3e8bf614b918cef51fd94e27f99f8ee6b8c62cecabc994385b8b841c899bad1585a3ef73832fdd3", @ANYRES32=r24], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@dev, @remote, 0x0}, &(0x7f0000000280)=0xc) r26 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = dup(r27) getpeername$packet(r28, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) ioctl$sock_inet6_SIOCADDRT(r26, 0x890b, &(0x7f0000000240)={@dev, @ipv4={[0x0, 0x0, 0x8], [], @loopback}, @initdev={0xfe, 0x88, [0xe], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r29}) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x23b67a77341c1cb8, 0x0, 0x20}, @llc={0x1a, 0x29, 0x2, 0x8, 0x1, 0x81}, @ethernet={0x7, @remote}, 0x7b3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0xd29b, 0x4}) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="00042abd7000fbdbdf250200000008000100", @ANYRES32=r10, @ANYBLOB="f80002003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040004000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000100008008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="08000100", @ANYRES32=r25, @ANYBLOB="9000020054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400c6008000001000000600030500000080080004c702000000ff0ff96b0100008038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000008000100", @ANYRES32=r29, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="7c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000600000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000008000100", @ANYRES32=r30, @ANYBLOB="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", @ANYRES32=r31, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040005000000"], 0x3e8}, 0x1, 0x0, 0x0, 0x2000802c}, 0x0) r32 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r33 = dup(r32) ioctl$PERF_EVENT_IOC_ENABLE(r33, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r33, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x4) r35 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r35, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r35, &(0x7f0000000340)={0x11, 0x0, r36, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r35, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r37, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) accept$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) r40 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r40, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r40, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r40, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r40, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r40, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$sock_SIOCGIFINDEX(r40, 0x8933, &(0x7f0000001a80)={'bridge_slave_0\x00', 0x0}) r42 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r42, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r42, &(0x7f0000000340)={0x11, 0x0, r43, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r42, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000006b40)=@framed, &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r44, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000001b40)={@mcast1, 0x0}, &(0x7f0000001b80)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000002500)=0x0, &(0x7f0000002540)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000002800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xd50178ab6e181500}, 0xc, &(0x7f00000027c0)={&(0x7f0000002580)={0x21c, r8, 0x208, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r34}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r37}}}]}}, {{0x8, 0x1, r38}, {0x130, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x867d, 0x3f, 0xff, 0xd016}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r39}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r41}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xe054}}, {0x8, 0x6, r44}}}]}}, {{0x8, 0x1, r45}, {0x7c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x21b7}}, {0x8, 0x6, r46}}}]}}]}, 0x21c}, 0x1, 0x0, 0x0, 0x6000}, 0x800) pipe(&(0x7f0000000080)) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:38 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x13c, 0x0) 09:20:38 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x327}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040), 0x4) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=""/30) r2 = socket$inet6(0xa, 0x2000000000801, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x8) sendto$inet6(r2, 0x0, 0x7d, 0x20000000, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) write$input_event(r4, &(0x7f0000000180)={{r5, r6/1000+10000}, 0x1a957cc8c515cec6, 0x8, 0x7ff}, 0x18) 09:20:38 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6c, 0x0, 0x60, 0x0) 09:20:38 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_ifreq(r0, 0x8947, &(0x7f00000000c0)={'lo\x00', @ifru_data=&(0x7f0000000080)="9a0b8a67edb00e47a8ae2e6ad6100800d43c1ea9518dc25f77f897dfdc049b38"}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000001200)={0x8, 0x0, [{0x3, 0xfffffff7, 0x7, [0x0, 0x3, 0x8001, 0x9, 0x7, 0x100, 0x1, 0x8001]}, {0xfffffffa, 0x4, 0x7e5e1e79, [0xd34, 0x405, 0xe7, 0x20, 0x6, 0x9, 0x20, 0x3]}, {0x1f, 0x2, 0x3, [0x4, 0x8, 0x7, 0x7ff, 0x479, 0x8001, 0x5, 0x100]}, {0xfff, 0x5, 0x8, [0x8001, 0xfffffff9, 0x6, 0x1ff, 0x0, 0x2, 0x2c, 0x2]}, {0x30bd, 0xfffff6a2, 0xbeaa, [0x2000, 0xedd, 0x87b, 0x0, 0x74b4, 0xfffff499, 0x4, 0x8000]}, {0x80, 0x29, 0xd93, [0x4, 0x9, 0xc7d0, 0x18f0, 0xfffffffd, 0x5, 0xfffffffb, 0x91]}, {0x1f, 0x7347, 0x3, [0xffff, 0x1, 0x8, 0xfb2, 0x1f, 0x9, 0x2400, 0xe671]}, {0x6, 0x9, 0x3, [0x7ff, 0x0, 0x7, 0xffffffff, 0x9, 0x4, 0x3682, 0x9]}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f0000000200)=""/4096) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x9, 0x3, 0x1, 0xfb, 0x0, 0x6, 0x4, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xb9, 0xf423}, 0x4, 0x10000, 0x7f, 0x8, 0x80000000, 0x7f, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0xa) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:38 executing program 1: 09:20:38 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x7, 0x0, 0x60, 0x0) 09:20:38 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x13d, 0x0) 09:20:38 executing program 3: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffc70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg$kcm(r2, &(0x7f00000012c0)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/26, 0x1a}, {&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/43, 0x2b}], 0x4}, 0x20000061) 09:20:39 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0080}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6d9e}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x84}, 0x880) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) 09:20:39 executing program 1: 09:20:39 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x13e, 0x0) 09:20:39 executing program 3: openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x800, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:39 executing program 1: 09:20:39 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x13f, 0x0) 09:20:39 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x74, 0x0, 0x60, 0x0) 09:20:39 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x8, 0x0, 0x60, 0x0) 09:20:39 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x80) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff4000/0xc000)=nil) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:39 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x200400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xffffffffffff0000) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) memfd_create(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0) 09:20:39 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x140, 0x0) 09:20:39 executing program 1: 09:20:39 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$l2tp6(r0, &(0x7f0000000080)="b933000d92a9076631a73ba65457a2be0ce52724cfb52a7822a3b4680ecdcfc5440d49351ba02e84289f1eec55a05493ca64211112b77bdd451f2bc2885d952af8d7c85d974287b430c8bf0bc67a022f713d1ed2313328c07d84c6068bd5a4b4c55db0cde619108461e2274c8f127570c5ab65e1868bc96b10ca365b5b0194cfbe54096ec7d12923d804d2f0d63ffe7ee76e135e8c7de432b7712e69c21440d7cae1728dc996d96f86900d2186e8a5cb87c6600adeae6a25dd06cece71aa0be8ad01e226935fcb8e95e5721f54d2804f518125182afb654b468d3294b02e505ba452cde33905d48d13b4d682c3d931fa0a769204b9f2", 0xf6, 0x4000, &(0x7f0000000180)={0xa, 0x0, 0x6, @loopback, 0x79b, 0x1}, 0x20) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:39 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x141, 0x0) 09:20:39 executing program 3: 09:20:39 executing program 1: 09:20:40 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x142, 0x0) 09:20:40 executing program 3: 09:20:40 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x7a, 0x0, 0x60, 0x0) 09:20:40 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x10, 0x0, 0x60, 0x0) 09:20:40 executing program 4: r0 = socket(0x1, 0x1, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = getpid() getpriority(0x1, r1) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x4, 0xffffffffffffffff, 0x0) clone(0x2008000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:40 executing program 1: 09:20:40 executing program 3: 09:20:40 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x143, 0x0) 09:20:40 executing program 1: 09:20:40 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000200)="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") r1 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000080)={0x6, 0x7, 'syz0\x00'}, &(0x7f00000000c0)=0x28) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000100)=0x10001) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:40 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x48, 0x0, 0x60, 0x0) 09:20:40 executing program 1: 09:20:40 executing program 3: 09:20:40 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x144, 0x0) 09:20:41 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x300, 0x0, 0x60, 0x0) 09:20:41 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:41 executing program 1: 09:20:41 executing program 3: 09:20:41 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x145, 0x0) 09:20:41 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000400)={r4, 0x400000000000009d, &(0x7f0000000300)=[0x40000002, 0x8, 0x1], &(0x7f0000000340)=[0x0, 0xfffffffc], 0x30, 0x831aaabbfe9a4fa0, 0xfffffffa, &(0x7f0000000380)=[0x0, 0x2, 0x1, 0x1, 0x0, 0x0], &(0x7f00000003c0)}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000080)={r4, 0x2}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:41 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4c, 0x0, 0x60, 0x0) 09:20:41 executing program 1: 09:20:41 executing program 3: 09:20:41 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x146, 0x0) 09:20:41 executing program 1: 09:20:41 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x400, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:41 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x500, 0x0, 0x60, 0x0) 09:20:41 executing program 3: 09:20:41 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x147, 0x0) 09:20:41 executing program 1: 09:20:41 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x100000890f, &(0x7f00000004c0)="080db5055e0bcfe8696071fb234fef29d58e0b659ef87cb411549167b221d3f3ac3fe59f00000000bc2085351ab0d29b8aefe1cd64250c1fa9348f71f630f727ef472550d19dbd9c93e2950c20db0d0c5a573a53d4f3afb8cbc8257e054fb5c86eccf1b0afffee91608d0e4f067bd1f5c901eab2e065a7898e4386ffdeea3f485502d8bac55bd546d691da1673c48ea02868e50e200707bdbca6ac0a5d6b042c61ac278622dbd92c5563d956ad44058ab10737755c6bc5e20dcf560854a9356b2a99d27fdcd895520b4d34c8d76f0477840cb9053c82c4b6c239a7e8a15e5b9d7f9cb74d09d4736b75215ac46612849b400552f7aa5bb21e4e7925051c4e9c93393f48ce0a619f397853a03f228d02d6854bbdbe1e82f7e423715e77e23a033083ad79fa3c68470996e4ad65b75882ccec2cfe909c6d0e0e81d1bb6cdeaec49cc6d4324816e1dd043abdc207ffbaff204a4dad0d7686ec4dad38538aa5c3351bcf51fcc9556cc31222b6c838198eb3e88e6101543c2cfb84c0d083a98f0164e1f6b5922d3830d320aa9ba81386906cb56a857fb870870ecf90d8afc3294be5d318d15af7a54b15a7aeb06aadb019142925f61bc54b2bd8980ea966b39f") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:42 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x68, 0x0, 0x60, 0x0) 09:20:42 executing program 4: r0 = socket(0x1, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'TPROXY\x00'}, &(0x7f00000000c0)=0x1e) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:42 executing program 3: 09:20:42 executing program 1: 09:20:42 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x148, 0x0) 09:20:42 executing program 1: 09:20:42 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:42 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x600, 0x0, 0x60, 0x0) 09:20:42 executing program 3: 09:20:42 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x149, 0x0) 09:20:42 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6c, 0x0, 0x60, 0x0) 09:20:42 executing program 1: 09:20:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x40}], 0xaaaaaaaaaaaad29, 0x0, 0x0, 0xfffffffffffffff8) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb, 0xe5f]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_PDEATHSIG(0x2, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f00000000c0)={0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 09:20:42 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xb4, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb4}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x90d, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3c}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x120}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000180)) 09:20:43 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x14a, 0x0) 09:20:43 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x1}}, {}], 0x10) bind$can_raw(r0, &(0x7f0000000140), 0x10) [ 466.962264][T18238] IPVS: Error joining to the multicast group 09:20:43 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x100000, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffffffc0, @loopback, 0xfffffffd}}}, 0x90) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:43 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") writev(r1, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000f00), 0x3) 09:20:43 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x74, 0x0, 0x60, 0x0) 09:20:43 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x700, 0x0, 0x60, 0x0) 09:20:43 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x14b, 0x0) 09:20:43 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x58, 0x1, 0x4, 0x400, 0x70bd25, 0x25dfdbfd, {0xc, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x440c}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x6ca6ebf0185823e6}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xd}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x200}, @NFULA_CFG_CMD={0x5}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3a3546f47f386973}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4040081) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001240)={r1, 0x0, 0x1000, 0x3, &(0x7f0000000200)="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", &(0x7f00000000c0)=""/3, 0x8, 0x0, 0xa3, 0x20, &(0x7f0000000100)="bcfd4984a5eadc3f94efad73d58da4acd8d0a76dc2c7e109aad06197d667e69df5e5fb5c8cd6f520c65e4729f3a3a090ddbaef64dac7ebb37d5e9671da1952b1a8290b452f4a847fa35e9ed79ffcb734dce25494da96066e933248b0040878e172f8ce55a53030474691549b75de9153f2ca2228c8ccb522a10af7e0d11aea13be2b07339cda1f591af934441d4d2a6bbb6d2902d0a44163d00b9079ce32e687eb05a0", &(0x7f0000001200)="1e1ea3f1fb9faf21da2fa546678a3f0e4963fd9ed47f7c52443413d9d5ac19a6"}, 0x40) 09:20:43 executing program 3: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x3c, 0x0, "478064fe6b240638b0f2f6bb5d005db1eaeef4bc70be0397e4a64d05a23625729e6fb0d051c488c345c50d2d0bc3e4f80cc95d9298b63e4815f010db84c426e871644936b5e58b5c8443adc402616356"}, 0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) 09:20:43 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x7a, 0x0, 0x60, 0x0) 09:20:43 executing program 4: syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x20040) r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:43 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x14c, 0x0) 09:20:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_delneigh={0x28, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x2, 0xf}, [@NDA_LLADDR={0xa, 0x2, @local}]}, 0x28}}, 0x0) [ 468.015855][T18318] bridge_slave_0: FDB only supports static addresses [ 468.074277][T18324] bridge_slave_0: FDB only supports static addresses 09:20:45 executing program 1: socket$inet(0xa, 0x801, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 09:20:45 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bond\x00', 0x0}) bind$packet(r2, &(0x7f0000000340)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000006c80)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000816efa5261eef5620a50183146c004f8b6e487415709731e9652df51b3f63973f987d61f9f34407392a92f7cf0be4996fe93cfc155a25f1343870517f89194edcc4f52f5415776e518ae84c8d3de6fb429658e6884e9eed11f502d1007e6"], &(0x7f0000006b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={r4, 0x1, 0x6, @broadcast}, 0x10) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) 09:20:45 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x14d, 0x0) 09:20:45 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0xa00, 0x0, 0x60, 0x0) 09:20:45 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000d00ea1100000005000000", 0x29}], 0x1) 09:20:45 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x300, 0x0, 0x60, 0x0) [ 469.590481][T18350] netlink: 'syz-executor.3': attribute type 13 has an invalid length. 09:20:45 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) accept4$tipc(r0, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x41000) 09:20:45 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x14e, 0x0) 09:20:45 executing program 3: r0 = socket$inet(0xa, 0x801, 0x0) listen(r0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x7c15}, 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 09:20:46 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) open_tree(r2, &(0x7f0000000080)='./file0\x00', 0x9101) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f00000000c0)={0x1ff, 0x8, 0x4, 0x4000, 0xa62, {0x0, 0x7530}, {0x4, 0x0, 0x80, 0x3f, 0x3, 0x5, "5f9640ec"}, 0x4, 0x2, @offset=0xfff, 0x81, 0x0, r1}) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x14f, 0x0) 09:20:46 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x500, 0x0, 0x60, 0x0) 09:20:46 executing program 1: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = msgget(0x2, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) 09:20:46 executing program 3: mknod(&(0x7f0000000100)='./bus\x00', 0x80008007, 0x5cc2) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x80184601, &(0x7f0000000080)) 09:20:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x150, 0x0) 09:20:46 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x10ed, 0x0, 0x60, 0x0) 09:20:46 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9, 0x200c80) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:46 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0xc000) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = socket(0x1, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x8) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:46 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000080)=""/83) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:46 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x600, 0x0, 0x60, 0x0) 09:20:46 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x151, 0x0) 09:20:46 executing program 3: mknod(&(0x7f0000000100)='./bus\x00', 0x8000, 0x5dd9) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 09:20:46 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x5) 09:20:47 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r2, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r2, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000002c0)={0x8, 0x9, 0x4, 0x1000, 0x1, {0x77359400}, {0x2, 0xc, 0x5, 0x3f, 0x80, 0x9, "2b5b188d"}, 0x3, 0x1, @offset=0xfff, 0x8001, 0x0, r2}) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000340)) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) sendto$inet(r5, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r5, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d607559441a2a1492bc86146e4a205b0b8db310441cf08c043a775bb5e3a82dbc589f50c52e15266c634790cab6745980751ca698dbd91bc", 0x7f37) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000200)=0x104) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r6, 0x3}, &(0x7f0000000280)=0x8) 09:20:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:47 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x152, 0x0) 09:20:47 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod(&(0x7f00000005c0)='./bus\x00', 0x5eef439bff9b86cf, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) [ 471.256338][T18478] [ 471.258712][T18478] ====================================================== [ 471.265729][T18478] WARNING: possible circular locking dependency detected [ 471.272839][T18478] 5.5.0-rc5-next-20200110-syzkaller #0 Not tainted [ 471.279334][T18478] ------------------------------------------------------ [ 471.286364][T18478] syz-executor.3/18478 is trying to acquire lock: [ 471.292767][T18478] ffff88803cbd7c00 (&ovl_i_mutex_key[depth]){+.+.}, at: process_measurement+0x6f7/0x1850 [ 471.302586][T18478] [ 471.302586][T18478] but task is already holding lock: [ 471.309949][T18478] ffff888094417090 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x22b0 [ 471.320050][T18478] [ 471.320050][T18478] which lock already depends on the new lock. [ 471.320050][T18478] [ 471.330463][T18478] [ 471.330463][T18478] the existing dependency chain (in reverse order) is: [ 471.339479][T18478] [ 471.339479][T18478] -> #3 (&sig->cred_guard_mutex){+.+.}: [ 471.347214][T18478] __mutex_lock+0x156/0x13c0 [ 471.352344][T18478] mutex_lock_killable_nested+0x16/0x20 [ 471.358574][T18478] do_io_accounting+0x1f4/0x820 [ 471.363938][T18478] proc_tgid_io_accounting+0x23/0x30 [ 471.369727][T18478] proc_single_show+0xfd/0x1c0 [ 471.375000][T18478] seq_read+0x4ca/0x1170 [ 471.379757][T18478] do_iter_read+0x4a4/0x660 [ 471.384763][T18478] vfs_readv+0xf0/0x160 [ 471.389421][T18478] do_preadv+0x1c4/0x280 [ 471.394174][T18478] __x64_sys_preadv+0x9a/0xf0 [ 471.399355][T18478] do_syscall_64+0xfa/0x790 [ 471.404358][T18478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.410744][T18478] [ 471.410744][T18478] -> #2 (&p->lock){+.+.}: [ 471.417243][T18478] __mutex_lock+0x156/0x13c0 [ 471.422346][T18478] mutex_lock_nested+0x16/0x20 [ 471.427609][T18478] seq_read+0x71/0x1170 [ 471.432267][T18478] do_iter_read+0x4a4/0x660 [ 471.437409][T18478] vfs_readv+0xf0/0x160 [ 471.442096][T18478] default_file_splice_read+0x4fb/0xa20 [ 471.448162][T18478] do_splice_to+0x127/0x180 [ 471.453188][T18478] splice_direct_to_actor+0x320/0xa30 [ 471.459061][T18478] do_splice_direct+0x1da/0x2a0 [ 471.464414][T18478] do_sendfile+0x597/0xd00 [ 471.469336][T18478] __x64_sys_sendfile64+0x1dd/0x220 [ 471.475055][T18478] do_syscall_64+0xfa/0x790 [ 471.480068][T18478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.486468][T18478] [ 471.486468][T18478] -> #1 (sb_writers#3){.+.+}: [ 471.493304][T18478] __sb_start_write+0x241/0x460 [ 471.498656][T18478] mnt_want_write+0x3f/0xc0 [ 471.503713][T18478] ovl_want_write+0x76/0xa0 [ 471.508736][T18478] ovl_xattr_set+0x53/0x5b0 [ 471.513768][T18478] ovl_posix_acl_xattr_set+0x375/0xa50 [ 471.519727][T18478] __vfs_setxattr+0x11f/0x180 [ 471.524915][T18478] __vfs_setxattr_noperm+0x11c/0x410 [ 471.530708][T18478] vfs_setxattr+0xda/0x100 [ 471.535632][T18478] setxattr+0x26f/0x380 [ 471.540287][T18478] path_setxattr+0x197/0x1b0 [ 471.545378][T18478] __x64_sys_lsetxattr+0xc1/0x150 [ 471.550913][T18478] do_syscall_64+0xfa/0x790 [ 471.555918][T18478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.562310][T18478] [ 471.562310][T18478] -> #0 (&ovl_i_mutex_key[depth]){+.+.}: [ 471.570098][T18478] __lock_acquire+0x2596/0x4a00 [ 471.575456][T18478] lock_acquire+0x190/0x410 [ 471.580460][T18478] down_write+0x93/0x150 [ 471.585206][T18478] process_measurement+0x6f7/0x1850 [ 471.590912][T18478] ima_file_check+0xc5/0x110 [ 471.596001][T18478] path_openat+0x1356/0x34d0 [ 471.601091][T18478] do_filp_open+0x192/0x260 [ 471.606098][T18478] do_open_execat+0x13b/0x6d0 [ 471.611287][T18478] __do_execve_file.isra.0+0x1702/0x22b0 [ 471.618550][T18478] __x64_sys_execve+0x8f/0xc0 [ 471.623727][T18478] do_syscall_64+0xfa/0x790 [ 471.628732][T18478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.635120][T18478] [ 471.635120][T18478] other info that might help us debug this: [ 471.635120][T18478] [ 471.645415][T18478] Chain exists of: [ 471.645415][T18478] &ovl_i_mutex_key[depth] --> &p->lock --> &sig->cred_guard_mutex [ 471.645415][T18478] [ 471.659115][T18478] Possible unsafe locking scenario: [ 471.659115][T18478] [ 471.666561][T18478] CPU0 CPU1 [ 471.671915][T18478] ---- ---- [ 471.677276][T18478] lock(&sig->cred_guard_mutex); [ 471.682294][T18478] lock(&p->lock); [ 471.688607][T18478] lock(&sig->cred_guard_mutex); [ 471.696139][T18478] lock(&ovl_i_mutex_key[depth]); [ 471.701231][T18478] [ 471.701231][T18478] *** DEADLOCK *** [ 471.701231][T18478] [ 471.709363][T18478] 1 lock held by syz-executor.3/18478: [ 471.714794][T18478] #0: ffff888094417090 (&sig->cred_guard_mutex){+.+.}, at: __do_execve_file.isra.0+0x376/0x22b0 [ 471.725286][T18478] [ 471.725286][T18478] stack backtrace: [ 471.731173][T18478] CPU: 1 PID: 18478 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 471.741048][T18478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.751080][T18478] Call Trace: [ 471.754357][T18478] dump_stack+0x197/0x210 [ 471.758672][T18478] print_circular_bug.isra.0.cold+0x163/0x172 [ 471.764721][T18478] check_noncircular+0x32e/0x3e0 [ 471.769654][T18478] ? print_circular_bug.isra.0+0x230/0x230 [ 471.775452][T18478] ? mark_lock+0xc2/0x1220 [ 471.779864][T18478] ? alloc_list_entry+0xc0/0xc0 [ 471.784697][T18478] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.790918][T18478] ? find_first_zero_bit+0x9a/0xc0 [ 471.796022][T18478] __lock_acquire+0x2596/0x4a00 [ 471.800852][T18478] ? lock_downgrade+0x920/0x920 [ 471.805686][T18478] ? mark_held_locks+0xf0/0xf0 [ 471.810433][T18478] lock_acquire+0x190/0x410 [ 471.814947][T18478] ? process_measurement+0x6f7/0x1850 [ 471.820347][T18478] down_write+0x93/0x150 [ 471.824681][T18478] ? process_measurement+0x6f7/0x1850 [ 471.830153][T18478] ? down_write_killable_nested+0x170/0x170 [ 471.836050][T18478] ? ima_get_action+0x7e/0xa0 [ 471.840718][T18478] process_measurement+0x6f7/0x1850 [ 471.845928][T18478] ? __kasan_check_read+0x11/0x20 [ 471.850935][T18478] ? __lock_acquire+0x8a0/0x4a00 [ 471.855859][T18478] ? mmap_violation_check+0x200/0x200 [ 471.861228][T18478] ? aa_get_task_label+0x587/0x9b0 [ 471.866325][T18478] ? rcu_read_lock_held+0x9c/0xb0 [ 471.871330][T18478] ? __kasan_check_read+0x11/0x20 [ 471.876336][T18478] ? aa_get_task_label+0x5a9/0x9b0 [ 471.881431][T18478] ? ovl_open_realfile+0xe3/0x120 [ 471.886436][T18478] ? aa_capable+0xcb0/0xcb0 [ 471.890923][T18478] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.897147][T18478] ? ovl_open+0xce/0x270 [ 471.901459][T18478] ? security_file_open+0x87/0x300 [ 471.906623][T18478] ? file_ra_state_init+0xc9/0x1e0 [ 471.911727][T18478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.917962][T18478] ? apparmor_task_getsecid+0xd2/0x120 [ 471.923406][T18478] ima_file_check+0xc5/0x110 [ 471.927995][T18478] ? process_measurement+0x1850/0x1850 [ 471.933447][T18478] ? inode_permission+0xb4/0x520 [ 471.938365][T18478] path_openat+0x1356/0x34d0 [ 471.942942][T18478] ? path_lookupat.isra.0+0x8c0/0x8c0 [ 471.948307][T18478] ? security_prepare_creds+0x11d/0x190 [ 471.953879][T18478] ? prepare_exec_creds+0x12/0xf0 [ 471.958888][T18478] ? __do_execve_file.isra.0+0x393/0x22b0 [ 471.964589][T18478] ? __x64_sys_execve+0x8f/0xc0 [ 471.969422][T18478] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.975497][T18478] ? __kasan_check_read+0x11/0x20 [ 471.980500][T18478] ? __lock_acquire+0x8a0/0x4a00 [ 471.985422][T18478] do_filp_open+0x192/0x260 [ 471.989915][T18478] ? may_open_dev+0x100/0x100 [ 471.994580][T18478] ? mark_lock+0xc2/0x1220 [ 471.998982][T18478] ? __kasan_check_read+0x11/0x20 [ 472.004006][T18478] ? __do_execve_file.isra.0+0x7d4/0x22b0 [ 472.009724][T18478] do_open_execat+0x13b/0x6d0 [ 472.014393][T18478] ? unregister_binfmt+0x170/0x170 [ 472.019485][T18478] ? lock_downgrade+0x920/0x920 [ 472.024313][T18478] ? lock_downgrade+0x920/0x920 [ 472.029160][T18478] ? do_raw_spin_unlock+0x181/0x270 [ 472.034361][T18478] __do_execve_file.isra.0+0x1702/0x22b0 [ 472.040012][T18478] ? copy_strings_kernel+0x120/0x120 [ 472.045287][T18478] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.051510][T18478] ? getname_flags+0x277/0x5b0 [ 472.056256][T18478] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.062318][T18478] __x64_sys_execve+0x8f/0xc0 [ 472.067005][T18478] do_syscall_64+0xfa/0x790 [ 472.071498][T18478] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.077373][T18478] RIP: 0033:0x45af49 [ 472.081255][T18478] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.100841][T18478] RSP: 002b:00007fa06d621c78 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 472.109232][T18478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 472.117198][T18478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 472.125151][T18478] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 472.133190][T18478] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa06d6226d4 [ 472.141143][T18478] R13: 00000000004c198f R14: 00000000004d6b10 R15: 00000000ffffffff 09:20:48 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x1f00, 0x0, 0x60, 0x0) 09:20:48 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000200)={@ipx={0x4, 0x80, 0x6, "b410c4541f24", 0x6}, {&(0x7f00000000c0)=""/59, 0x3b}, &(0x7f0000000100), 0x1}, 0xa0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x2) 09:20:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x153, 0x0) 09:20:48 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mknod(&(0x7f00000005c0)='./bus\x00', 0x5eef439bff9b86cf, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 09:20:48 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x700, 0x0, 0x60, 0x0) 09:20:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:48 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x154, 0x0) 09:20:48 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x155, 0x0) 09:20:48 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x702, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1f, 0x0, @perf_config_ext={0x400}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x7, @remote, 0x9}}, 0x24) r2 = socket(0x21, 0x3, 0x3) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x80000}, r6, 0xb, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x6, 0x3, 0x6, 0x7, 0x0, 0x311c, 0x3e4bc19ed158c7a6, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000240), 0x7cb3ba7bd2087372}, 0x20000, 0x401, 0x3, 0x1, 0x8, 0x5, 0x1}, r6, 0x5, r10, 0x8) ioctl$BLKALIGNOFF(r8, 0x127a, &(0x7f0000000200)) 09:20:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:49 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x2000, 0x0, 0x60, 0x0) 09:20:49 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x10ed, 0x0, 0x60, 0x0) 09:20:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x156, 0x0) 09:20:49 executing program 4: r0 = socket(0x1, 0x1, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x2, 0x1, 0x4, 0x20000000, 0x1, {r1, r2/1000+30000}, {0x3, 0xd9d2526a5cbf4f9a, 0xff, 0x8d, 0x80, 0x3, "5b9f1a8b"}, 0x6, 0x1, @userptr=0x80000001, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000140)={0xfff, 0x7ff, 0x9, 0x7ff0, 0x1ff, 0x400, 0x7fff}) 09:20:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x157, 0x0) 09:20:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xb4, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xa0, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x24}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xb4}}, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21020010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x148, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x884}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xd3d0470a50ce9883, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffe1}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x31, 0x6}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x617e40dd4d316496}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x75}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x36}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffe01}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}]}, 0x148}, 0x1, 0x0, 0x0, 0x24040080}, 0x800) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:20:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:49 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x158, 0x0) 09:20:49 executing program 4: r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x1, 0x48000) recvfrom$inet(r1, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) times(&(0x7f0000000180)) fstat(r1, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, r5, r4, 0x0, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@mcast2, @in=@local, 0x4e21, 0x81, 0x4e24, 0xff, 0xa, 0x77aaed207e41bdd8, 0x10, 0x0, 0x0, r5}, {0x9, 0x2, 0x6, 0x2, 0x5, 0x2, 0x80000001, 0x3}, {0x7, 0xfff, 0x7, 0xfb}, 0x8, 0x6e6bb1, 0x1, 0x0, 0x6, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4d6, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x3507, 0x0, 0x2, 0x81, 0x1380, 0x4916, 0x2}}, 0xe8) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x37}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 473.526805][T18602] IPVS: Error joining to the multicast group [ 473.566679][T18604] IPVS: Error joining to the multicast group 09:20:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:50 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x3f00, 0x0, 0x60, 0x0) 09:20:50 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x1f00, 0x0, 0x60, 0x0) 09:20:50 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x159, 0x0) 09:20:50 executing program 4: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x3f365342, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0xd4) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000)=0x6bc, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 09:20:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)) 09:20:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:50 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x15a, 0x0) 09:20:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:50 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x15b, 0x0) 09:20:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) [ 474.543514][ T28] audit: type=1804 audit(1578820850.636:55): pid=18670 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir551898644/syzkaller.BJi0nm/165/bus/file0" dev="sda1" ino=17511 res=1 09:20:50 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:51 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4000, 0x0, 0x60, 0x0) 09:20:51 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x2000, 0x0, 0x60, 0x0) 09:20:51 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x15c, 0x0) 09:20:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_submit(0x0, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="da", 0x1}]) 09:20:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) 09:20:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) [ 475.159144][ T28] audit: type=1804 audit(1578820851.246:56): pid=18700 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir551898644/syzkaller.BJi0nm/166/bus/file0" dev="overlay" ino=16690 res=1 09:20:51 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x15d, 0x0) 09:20:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 09:20:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="da", 0x1}]) [ 475.541173][ T28] audit: type=1804 audit(1578820851.626:57): pid=18728 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir551898644/syzkaller.BJi0nm/167/bus/file0" dev="overlay" ino=16657 res=1 09:20:51 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:51 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x3f00, 0x0, 0x60, 0x0) 09:20:51 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x15e, 0x0) 09:20:52 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4800, 0x0, 0x60, 0x0) 09:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="da", 0x1}]) 09:20:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:52 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x15f, 0x0) [ 476.043287][ T28] audit: type=1804 audit(1578820852.136:58): pid=18749 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir551898644/syzkaller.BJi0nm/168/bus/file0" dev="overlay" ino=16691 res=1 09:20:52 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:52 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x160, 0x0) 09:20:52 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000180)="da", 0x1}]) 09:20:52 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:52 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x161, 0x0) 09:20:52 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4000, 0x0, 0x60, 0x0) 09:20:52 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:53 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4c00, 0x0, 0x60, 0x0) 09:20:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) 09:20:53 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x162, 0x0) 09:20:53 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:53 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x163, 0x0) 09:20:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:53 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:53 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4800, 0x0, 0x60, 0x0) 09:20:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) 09:20:54 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6800, 0x0, 0x60, 0x0) 09:20:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x164, 0x0) 09:20:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:54 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) 09:20:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x165, 0x0) 09:20:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:54 executing program 1: r0 = open(0x0, 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) 09:20:54 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x166, 0x0) [ 478.371985][T18915] FAT-fs (loop3): bogus number of reserved sectors [ 478.380720][T18915] FAT-fs (loop3): Can't find a valid FAT filesystem 09:20:54 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x4c00, 0x0, 0x60, 0x0) 09:20:54 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:55 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6c00, 0x0, 0x60, 0x0) 09:20:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) 09:20:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x167, 0x0) 09:20:55 executing program 1: r0 = open(0x0, 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) 09:20:55 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) [ 479.238503][ T28] audit: type=1804 audit(1578820855.326:59): pid=18948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir551898644/syzkaller.BJi0nm/177/file0" dev="sda1" ino=16835 res=1 [ 479.263632][T18951] FAT-fs (loop3): bogus number of reserved sectors 09:20:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x168, 0x0) 09:20:55 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x169, 0x0) 09:20:55 executing program 1: r0 = open(0x0, 0x141042, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) [ 479.312375][T18951] FAT-fs (loop3): Can't find a valid FAT filesystem 09:20:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) [ 479.488838][ T28] audit: type=1804 audit(1578820855.576:60): pid=18975 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir551898644/syzkaller.BJi0nm/178/file0" dev="sda1" ino=16741 res=1 [ 479.572773][T18978] FAT-fs (loop3): bogus number of reserved sectors [ 479.598109][T18978] FAT-fs (loop3): Can't find a valid FAT filesystem 09:20:55 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6800, 0x0, 0x60, 0x0) 09:20:55 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x16a, 0x0) 09:20:56 executing program 0: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x7400, 0x0, 0x60, 0x0) 09:20:56 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) 09:20:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) 09:20:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x16b, 0x0) [ 480.390094][ T28] audit: type=1804 audit(1578820856.476:61): pid=19010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir551898644/syzkaller.BJi0nm/179/file0" dev="sda1" ino=16526 res=1 [ 480.417470][T19006] FAT-fs (loop3): bogus number of reserved sectors 09:20:56 executing program 4: open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3}) 09:20:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x16c, 0x0) [ 480.449338][T19006] FAT-fs (loop3): Can't find a valid FAT filesystem 09:20:56 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000180)="da", 0x1}]) 09:20:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) 09:20:56 executing program 5: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000095c0)=[{{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f0000001380)=""/33, 0x21}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') exit(0x0) preadv(r0, &(0x7f0000000500), 0x16d, 0x0) [ 480.708409][T19035] FAT-fs (loop3): bogus number of reserved sectors [ 480.720997][T19035] FAT-fs (loop3): Can't find a valid FAT filesystem 09:20:57 executing program 2: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='binder\x00', 0x0, 0x0) syz_mount_image$minix(0x0, &(0x7f0000001500)='./file0\x00', 0x0, 0x6c00, 0x0, 0x60, 0x0) 09:20:57 executing program 4: open(0x0, 0x141042, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)={0x0, 0x0, 0x3})