eadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/72, 0x48}, {&(0x7f00000000c0)=""/255, 0xfffffffffffffdd2}, {&(0x7f00000001c0)=""/204, 0xcc}], 0x3, 0x0) ioctl(r1, 0x800, &(0x7f0000000300)="9ccfa97570bb4a7643234bbca7d88e1853a46c88136a280807d91341dff4959af35da9083de9f1bc0df927bd4ab1c78618fdbd925e20a107e5419d07f613d1d8e5985a4ef0ccc09ffc4469af3df870d114cd05c16f0e63b69033d6b761914822bba2bc0510117dbad2813beb7042c21a2780e9fdc794a329525f0278569452f18b24258eaf65f56b50e72b1b31a3f53c68a3e66203d89f76d95db534a46f4e4e10f1fbbc03f30d0c888550abdd25c7dfec291b55948fb410e1f23ff86e8cd1b471508cd1cf4432abef15c3e037a769d093bf17097d") ptrace$cont(0xffffffffffffffff, r0, 0x2, 0x9) preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:01 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x208000, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x9) r1 = socket$l2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') close(r1) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) 18:47:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 133.666691][ T9639] do_preadv+0x200/0x350 [ 133.678176][ T9639] ? do_writev+0x560/0x560 [ 133.678187][ T9639] ? __mutex_unlock_slowpath+0x18c/0x630 [ 133.678197][ T9639] ? mutex_unlock+0x10/0x10 [ 133.678205][ T9639] ? __sb_end_write+0xde/0x120 [ 133.678219][ T9639] ? kasan_check_write+0x14/0x20 [ 133.687363][ T9639] ? fput_many+0x47/0x1a0 [ 133.687380][ T9639] ? debug_smp_processor_id+0x1c/0x20 [ 133.687390][ T9639] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 133.687404][ T9639] ? prepare_exit_to_usermode+0x1e1/0x4f0 [ 133.687413][ T9639] ? __x64_sys_clock_gettime+0x1c5/0x220 [ 133.687425][ T9639] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 133.710293][ T9639] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 133.710310][ T9639] __x64_sys_preadv+0x9e/0xb0 [ 133.720096][ T9639] do_syscall_64+0xfe/0x140 [ 133.720110][ T9639] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 133.720119][ T9639] RIP: 0033:0x459519 [ 133.720129][ T9639] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 133.720134][ T9639] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 133.720142][ T9639] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 133.720147][ T9639] RDX: 0000000000000002 RSI: 0000000020000240 RDI: 0000000000000003 [ 133.720156][ T9639] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 133.729388][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 18:47:01 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) [ 133.729394][ T9639] R13: 00000000004c6631 R14: 00000000004db438 R15: 0000000000000004 18:47:01 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8c08, 0x1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffff9c, 0x0, 0x29, &(0x7f00000000c0)='vmnet1wlan1*$\x80:cpusetbdev##:eth0trusted!\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:01 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x40000, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000100), &(0x7f0000000180)=0x4) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = dup2(r1, r2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000280)={{0x1, 0x0, 0x10000, 0x8, 'syz0\x00', 0xfffffffffffffffe}, 0x1, [0x5, 0x2, 0x80, 0x101, 0xffffffffffffff5b, 0x8001, 0xe, 0x2a6, 0x9, 0x5, 0x100000000, 0xff, 0x1f, 0x5, 0x0, 0x4, 0xfffffffffffffffe, 0xae16, 0x401, 0x81, 0x5, 0xffffffffffffa28a, 0x4, 0x7ff, 0x5, 0x14000, 0x7, 0x6, 0x1, 0x6, 0xe66, 0x71d, 0x8000, 0x1, 0x7fff, 0x9, 0xfff, 0x5, 0x101, 0x48000000000000, 0x1, 0x3, 0x8, 0x1, 0x88, 0x100000001, 0x0, 0x5, 0x3f, 0x7ff, 0x9, 0xffffffff, 0x4, 0x2, 0x1ff, 0x8, 0x5, 0xfff, 0x95, 0xfd1, 0x1, 0x9, 0xbc7200000000000, 0x7fffffff, 0x6, 0x1, 0x8, 0x12, 0x9, 0x100000001, 0x8001, 0xffffffff80000001, 0x7, 0x31a, 0x0, 0x7, 0x401, 0xffffffffffff0000, 0x5, 0x3, 0x1, 0x0, 0x20, 0x80, 0x0, 0x2, 0x4, 0x9, 0xfff, 0x8, 0x3a9, 0xffff, 0x101, 0x100000001, 0x9, 0x1, 0x1, 0x4, 0x6, 0xe58, 0x7fffffff, 0x0, 0x100000000, 0x8001, 0x401, 0x7fff, 0x3, 0x100000000, 0x0, 0xfffffffffffffffd, 0x1, 0x1dd, 0xaa5a, 0x6, 0x0, 0xffff, 0x1f, 0x81, 0x7, 0x4e, 0x1, 0x8, 0xfff, 0x8, 0x3ff, 0x3, 0x7f, 0x80000001], {r4, r5+30000000}}) writev(r2, &(0x7f00000023c0), 0x0) 18:47:01 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@dev, @in6}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) 18:47:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:01 executing program 0: syz_open_procfs$namespace(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:01 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000003880)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000038c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000011c0)={'ipddp0\x00', &(0x7f0000003900)=@ethtool_per_queue_op={0x4b, 0x3, [0x3, 0x6, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x3, 0x9, 0x5c7a7eef, 0x9, 0x3, 0x6, 0x3ff, 0x2, 0x4, 0x8, 0x6, 0x66d, 0x101, 0x6, 0x6, 0x600000000000000, 0x3, 0x80000000, 0x100000001, 0x10000, 0x100000001, 0x4, 0x8e0, 0x4, 0x100, 0xb9c, 0x5, 0x3, 0xfffffffffffffffb, 0xd43c, 0x6, 0x4, 0x7, 0x0, 0x3ec, 0x80, 0x1f9, 0x3c69, 0x100000000, 0xffff, 0x3f, 0x2, 0x3ff, 0x34, 0x1, 0x2, 0x458d43d0, 0x10001, 0x1, 0x1ffe00000000000, 0x7, 0x81, 0x10000, 0x0, 0x6, 0xffff, 0x8000, 0x8, 0x0, 0x401, 0x5, 0x5, 0x393cb4e9, 0xff, 0x8, 0x10000, 0xffff, 0x100000000, 0x9, 0x7, 0x80000, 0x7f, 0x80, 0x8a9, 0x5f4, 0x4, 0x2, 0xb723, 0x5, 0x3, 0xfffffffffffff800, 0xfe, 0x8, 0xfffffffffffffc00, 0x1a0a, 0x4, 0x4, 0x4, 0x8, 0x3, 0xffffffff, 0x6, 0x5, 0x0, 0x6, 0x1, 0x10001, 0x800, 0x6, 0x5, 0x7, 0x20, 0xffffffff00000001, 0x81, 0x7fff, 0x9e9b, 0x200, 0x6, 0x9, 0x100000000, 0x3, 0x3ff, 0x6, 0x1000, 0x0, 0x7, 0x3, 0x1, 0x6, 0x5, 0x4f, 0xfffffffeffffffff, 0x91f, 0x1f, 0x8, 0x8000, 0x1, 0xffff, 0x2, 0x3, 0x7, 0x10001, 0x3, 0x7, 0x6, 0x6, 0x7, 0x6, 0x9e66, 0x9, 0x4, 0xfff, 0x9, 0x8000, 0x80000000, 0x7ff, 0x6, 0xfff0000000000000, 0x0, 0x4, 0x10001, 0xfffffffffffffffb, 0x3e, 0x0, 0x7, 0x2, 0x0, 0x40, 0x8, 0xffff, 0x1f9f, 0xcb2, 0x2, 0xffffffff80000001, 0xffffffffffffff62, 0x9, 0x8, 0x8, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffffa, 0x7f, 0x3, 0x101, 0x80, 0x1, 0x7fff, 0x4, 0x4, 0x7, 0x6, 0x8001, 0x3, 0x1ff, 0x7f, 0x5, 0x28a2, 0x0, 0x8, 0x99449c0000000000, 0x9, 0x9, 0xffffffff00000001, 0x9, 0x3ff, 0x0, 0x80, 0x940, 0x7, 0x1, 0x6, 0x5, 0xffff, 0x100000001, 0x80000001, 0x10001, 0xe29, 0xfff, 0x3, 0xfff, 0x6, 0x5, 0x8, 0x5a4, 0x80, 0xffffffffffffffc0, 0x101, 0x9, 0x3, 0xfffffffffffffff9, 0x0, 0x0, 0x5, 0x1, 0x8, 0x5, 0x2d88, 0x2, 0x9, 0x3, 0x6, 0xffffffffffff3c5d, 0x8, 0x0, 0x1f, 0x1, 0x7, 0x9, 0xfffffffffffffffb, 0x3ff, 0x3, 0x5f, 0x94ef, 0xfffffffffffffff9, 0x3f, 0x0, 0x7ff, 0x2, 0x7, 0xffff, 0xfd, 0x0, 0xe1, 0x3, 0x7fffffff, 0x40, 0xb9, 0x7, 0x80ac, 0x9, 0x100000000, 0x7, 0xfff, 0x80, 0x8, 0x7, 0x8, 0x7f, 0x8, 0x1, 0x5, 0x101, 0x7ff, 0xd5ad, 0x14, 0x10000, 0x380000, 0x4, 0x7, 0x74f8, 0x1042, 0xbc92, 0x3a4d, 0xfffffffffffffff7, 0x4, 0x4, 0x89, 0x2, 0xadae, 0x0, 0x0, 0x9, 0x2, 0x6, 0x4f46e7c, 0x1000, 0x0, 0x6, 0x81a, 0xfffffffffffffff8, 0xfff, 0x0, 0x1, 0x5, 0x9, 0x800, 0xf84, 0x2, 0x8, 0x9, 0x8, 0x1, 0x77c1, 0x7, 0x80000001, 0x9f8, 0xc7, 0x3ff, 0x101, 0x1, 0x7fffffff, 0x5, 0x0, 0x0, 0x9, 0x20, 0x7, 0x0, 0x20, 0x4, 0x1200000000000000, 0x3, 0x3, 0x4, 0x10000, 0xd8bf, 0x4, 0x0, 0x80000000, 0x1000, 0x10000000000000, 0x5, 0x2, 0x8, 0xf8, 0x100, 0x4, 0x7, 0x1, 0x8, 0x1, 0x3, 0x8, 0x1ff, 0x3, 0x8, 0x8000, 0x5, 0x1, 0x6, 0x5, 0x61, 0x401, 0x400, 0x2, 0x8, 0xfff, 0x4, 0x2, 0x6, 0x3, 0x1000, 0x7c59fa02, 0x1ff, 0x7, 0x0, 0x955, 0x34, 0x8001, 0x1, 0x4, 0x6, 0x4, 0xffffffff, 0x5, 0x9, 0x7, 0x2, 0xabd, 0x49, 0x592, 0x802, 0x1ffc000000, 0x8, 0x3ff, 0x3000, 0xff, 0x6, 0x8, 0x3, 0x8, 0x0, 0xfff, 0x0, 0x9, 0x7fffffff, 0x1, 0xffffffff, 0xffffffffffff0000, 0x0, 0x3, 0x1, 0xd2, 0x1, 0x51, 0x6, 0x100000000, 0xfffffffffffffffd, 0x1, 0x0, 0x8, 0x6, 0x0, 0x74b939d, 0x3ff, 0x6, 0x5, 0xe3f, 0xa38, 0xe, 0x5, 0x40, 0x4, 0x0, 0x2, 0x8, 0x100000001, 0xa9, 0x2, 0xa44, 0x7, 0x3ff, 0x1f, 0x3e29, 0x100000001, 0x81, 0xd1b, 0x3, 0x6, 0xfffffffffffffff8, 0x9, 0xda2, 0x1, 0x6, 0x10000, 0x4db5, 0x5, 0x6, 0x6, 0x2, 0xbc3, 0x3, 0x1e5f373b, 0x7fff, 0x8, 0xe4d7, 0x3, 0x10000, 0x0, 0x41, 0xffffffff, 0x7, 0x1f, 0x1, 0xffff, 0x80000001, 0x4, 0x100, 0x6, 0x0, 0x6, 0xfffffffffffff001, 0x1, 0x81, 0x8, 0x1, 0x8, 0x4, 0x200000004000, 0x3, 0x4, 0x0, 0x5, 0xfffffffffffffc01, 0x4, 0x0, 0x9, 0x8, 0x8, 0xb5, 0x7, 0xff, 0x6, 0xffffffffffffff7f, 0xffffffff7fffffff, 0x1, 0x0, 0x101, 0x2, 0xfffffffffffffffe, 0x100000001, 0x179f3862, 0x1, 0x5, 0x8, 0x4, 0x3d, 0x7, 0x7, 0x5, 0x4, 0x7, 0x3, 0x200, 0x9, 0x8, 0x101, 0x31, 0xffffffffffffffc1, 0x1f, 0x3, 0x7a, 0x7, 0x37, 0x8, 0x4, 0x0, 0x1, 0x7, 0x100000000, 0xff, 0x5, 0x200, 0xffff, 0x1f, 0x5, 0xffffffffffff307b, 0x0, 0x9, 0x0, 0xffff, 0x99a, 0x1, 0x8, 0x9, 0xffff, 0x6, 0x3, 0x401, 0x4, 0x4, 0x1, 0x8, 0x2, 0x100000001, 0x5, 0xffffffffffffffb9, 0x3c, 0x2, 0x0, 0x1, 0x2, 0x40, 0xa1, 0x3, 0x9, 0x7, 0x400, 0x9, 0x3ff, 0x10001, 0x3, 0x0, 0x80000000, 0xffffffff, 0x4, 0x4, 0x7, 0xaa, 0x6, 0x10001, 0x5, 0x10001, 0x3, 0x46, 0x20, 0x7ff, 0x401, 0x2, 0x756a, 0x7, 0xffffffffffffffdf, 0xffffffffffffffe1, 0x8, 0x200000, 0x888, 0x2, 0x6, 0x100, 0xffffffff, 0x3, 0x1, 0x3, 0x0, 0x5, 0x5, 0x6, 0x0, 0x400, 0x9, 0xff, 0x56, 0x3ff, 0x0, 0x593, 0x3, 0x9, 0x101, 0x80000000000, 0x8, 0x5, 0x1b9e, 0x1, 0x4, 0x8b, 0x4eee870e, 0x6, 0x0, 0x10000, 0x694, 0x2, 0x6, 0x0, 0x2, 0x8001, 0x6, 0x1, 0x3ff, 0x8, 0x9, 0xffffffffffffff68, 0xd93, 0x8, 0x1, 0x399, 0x7, 0x6, 0x5b22, 0x0, 0x400, 0x80000001, 0x0, 0x2, 0x2, 0x2, 0x8000, 0x1ff, 0x400, 0x69, 0x10001, 0x65f9, 0x6, 0x3, 0x3, 0x80, 0xc244, 0x401, 0x7, 0x8, 0x4, 0x1, 0x6, 0x9, 0x3f, 0x2, 0x3, 0x3f, 0x9, 0x3, 0x2, 0x7fff, 0x3, 0x0, 0x9, 0x7fff, 0xffff, 0x10001, 0x0, 0x6, 0xfffffffffffffffe, 0xe2, 0x100, 0xb05, 0x6, 0x1df6e0, 0x0, 0x8, 0x5, 0x20, 0x9, 0xfffffffffffffff9, 0x80000001, 0x100, 0x2, 0x2, 0x6, 0x1, 0x1, 0xffffffff, 0x8, 0x1, 0x5, 0xa, 0x1, 0x4040000000000000, 0x3f, 0x554f, 0xc548, 0x4, 0x80000000, 0xfff, 0x3cbd, 0x5, 0x7fffffff, 0xc0000000000, 0x0, 0x5d, 0x8, 0xcfb5, 0xff, 0xac, 0x1, 0x0, 0x5, 0x7, 0x7, 0x825c, 0x0, 0x6, 0x8000, 0x2, 0x400, 0x73ccf805, 0x8000, 0x81, 0x7, 0x8001, 0x20, 0x5, 0x1, 0x100, 0x3, 0x1, 0xffffffffffff8001, 0xa84, 0xfffffffffffffffc, 0xffffffff, 0xd6, 0xfff, 0x6, 0xde9, 0x1716e0000, 0x1, 0x8, 0x3, 0x0, 0x2951, 0x1, 0xb2, 0x1, 0x2659a121, 0x0, 0x3, 0x2, 0x0, 0x9, 0xff, 0x6, 0x0, 0xd8a, 0x8, 0x3f, 0xfffffffffffffffa, 0xf1, 0x6, 0x9e9, 0x1, 0xec, 0x7fffffff, 0xb52, 0xffffffff, 0xe0, 0x74d, 0x0, 0xffffffff, 0xb7ac, 0x7ff000000000000, 0x4, 0xdd, 0xfffffffffffff801, 0x2, 0x100000000, 0x100000000, 0x0, 0x10000, 0x2b1100000, 0x3f, 0xffff, 0xdb4, 0x100, 0x3, 0x800, 0x4, 0x0, 0x9, 0x6, 0xffffffffffffff80, 0x4, 0x7, 0xffff, 0x50ae65dd00000, 0xffff, 0x100000000, 0x5, 0x20, 0x8, 0x4, 0x132fb064, 0xfffffffffffffff7, 0x9, 0x1, 0x100000000, 0x9, 0xffffffffffffffc0, 0xfff, 0x0, 0xffff, 0x0, 0xffffffffffffaf13, 0x8, 0xdb, 0x5, 0x8, 0x5, 0x800, 0x3, 0x0, 0x5, 0x80, 0x80000001, 0x2, 0xffffffff00000000, 0x7, 0x4, 0x1f, 0x9, 0x3, 0x5, 0x0, 0x9, 0x3, 0x3, 0x9, 0x8, 0x1, 0x0, 0x10001, 0xd489, 0x6, 0xfffffffffffffffc, 0x100000000, 0x0, 0x0, 0x8, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x9, 0x6, 0xffffffffffffffff, 0x2, 0x7fffffff, 0x3e1, 0xc62, 0x5, 0x6b2db479, 0x6, 0x0, 0x1, 0xffffffffffff0001, 0x400, 0xef73, 0x1, 0x3f, 0x4, 0x0, 0x100, 0x200, 0x1, 0x96, 0x3, 0x6, 0x0, 0x6, 0x4, 0x3, 0x9, 0x3, 0x1f, 0xffffffffffffffe1, 0x1ff, 0x7ff, 0x1, 0xef, 0x6, 0x6, 0xa, 0x0, 0x4, 0x0, 0x6, 0x3c7b, 0xea, 0x0, 0xfffffffffffffffd, 0x6, 0x7ff, 0xfffffffffffff0c2, 0x3ff, 0xfffffffffffffffc, 0x27e2, 0x8000, 0x5, 0x7, 0x6, 0xfffffffffffffff8, 0x0, 0x81, 0xdc, 0xffffffffffffff35, 0x5, 0x401, 0x985, 0x200, 0x3, 0x1, 0x8, 0x5, 0x100000001, 0x3, 0x7, 0x7, 0x1, 0x51, 0x400, 0x3d0e0603, 0x98, 0x0, 0x800000000000, 0x10001, 0x2, 0x9, 0x193, 0x8, 0x51fc, 0x96bc, 0x4, 0x6, 0x3, 0x8000, 0x1, 0x8, 0xc2, 0xa0a, 0x9, 0x5, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xfffffffffffffffa, 0x80, 0x6, 0x6, 0x6, 0x400, 0x8, 0x8, 0xffffffffffff7fff, 0x46, 0x4, 0x1f, 0xfffffffffffffffc, 0x400, 0x3, 0xa000000000000, 0xd9, 0x2fc, 0xd0, 0xffffffffffffff79, 0x3, 0x5, 0x401, 0x2, 0x5, 0xfffffffffffffff7, 0x1ff, 0x9, 0x3, 0x2, 0x1, 0x6, 0x92a3, 0xfffffffffffff590, 0x3ff, 0xf8, 0x1, 0x6, 0xfffffffffffffffd, 0x20, 0x8000, 0xba, 0x8, 0x101, 0x4, 0xffffffff, 0x5, 0x76, 0x4, 0x3018, 0x1, 0xffffffff, 0x0, 0x1c5, 0x0, 0x2, 0x7, 0x100000001, 0x7, 0xc85, 0x4, 0x6180, 0x7fff, 0x400, 0x4a25, 0x4, 0x7, 0xa0, 0x2, 0x1, 0x80, 0x7, 0x8, 0x401, 0x0, 0x8, 0x62, 0xd40, 0x4, 0x4, 0x1, 0x9, 0x1032, 0x1, 0x1, 0x5, 0x6b1, 0x8, 0x2, 0x1, 0x100000000, 0x1, 0x1ff, 0x7, 0x5, 0x1, 0x4, 0x4, 0xf7, 0xdcc, 0x0, 0x73, 0x9059, 0x9, 0x6, 0x22f0, 0x80000001, 0x2, 0x8, 0x0, 0xfffffffffffffff8, 0x2, 0xcf7c, 0xaa5f, 0x8001, 0x100000000, 0x1, 0x4, 0x1f, 0x4, 0x5, 0x0, 0xd9f, 0x100, 0x6, 0xff, 0x8001, 0x8, 0x2, 0x8, 0x7, 0x7fff, 0x1, 0x800, 0xb8bf, 0x1, 0x800, 0x1fba, 0xfbbe, 0x7fffffff, 0x9, 0x80000001, 0x4, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x6, 0x0, 0x6, 0x5, 0x81, 0x7fff, 0x2, 0x7f, 0xb4, 0x2, 0x400, 0xfff, 0x3, 0x2, 0xfffffffffffffffd, 0x100000001, 0x2, 0x4, 0x7, 0x9, 0x0, 0x7, 0x7fffffff, 0x7b62b7d1, 0x9, 0x0, 0x100000001, 0x8, 0x8, 0x401, 0xfffffffffffffffc, 0x8, 0xffffffffffff0001, 0xffffffff00000000, 0x96, 0x2, 0x1, 0x9, 0x4, 0x79, 0x7, 0x6, 0x800000, 0x6, 0x8, 0x2, 0x100, 0xe80e, 0x100000001, 0x4, 0x400, 0xffff, 0x8, 0xfff, 0x2, 0x8000, 0x69, 0x8, 0x10001, 0x6, 0x7, 0x0, 0x6, 0xfff, 0x44, 0xad08, 0x200, 0x92, 0x7f, 0xffff, 0x2, 0x9, 0xe3, 0x10001, 0x8, 0x40, 0x2, 0xece, 0x208, 0x4, 0xae, 0x7fffffff, 0x8, 0xffffffff, 0x5, 0x3, 0x9, 0x0, 0xfffffffffffffff9, 0xffffffffffff4722, 0x7fff, 0x7, 0x101, 0x5a0, 0x1f, 0x7f, 0x7, 0x9, 0x9a2, 0xad, 0x7, 0x6, 0xfffffffffffffc01, 0x4000000000, 0xa4a, 0x4, 0x6, 0x7457, 0x3, 0x1000, 0x1, 0x4, 0x1, 0x9, 0x4c1, 0x2, 0x401, 0x7f, 0x8, 0x1bc, 0x1, 0x200, 0x8001, 0x13, 0x3, 0x8, 0x5, 0x1, 0x5, 0x7fffffff, 0x4, 0x7fff, 0x3, 0x7, 0x9, 0x3, 0xffffffffffffffff, 0xa000000000000, 0x200, 0x6, 0xd08, 0x0, 0x4, 0x42b8, 0x6, 0xcd0a, 0x8001, 0x9, 0x7, 0x7f, 0x33d, 0x8000, 0x3c8, 0xe49, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffff24e9, 0x80, 0xfffffffffffffffe, 0x9, 0x80, 0x3a01, 0x3, 0x8, 0x4a2, 0x0, 0xb18, 0x140000000, 0x101, 0x7, 0x7, 0x5ec, 0x7, 0x100000000, 0x8, 0x0, 0x4, 0x9, 0x1, 0x4481, 0x2, 0x7, 0x3, 0x4, 0x81, 0xff, 0x0, 0x7fffffff, 0x58, 0x7, 0x401, 0x3f, 0x9, 0x401, 0x4, 0x7, 0x2, 0x1, 0xfffffffffffff9a0, 0x2, 0x6, 0x7fffffff, 0x37, 0x0, 0x8, 0x3, 0x8, 0x3, 0x3, 0x3e4052bf, 0x7fffffff, 0x4, 0x2, 0x101, 0x1, 0x7ad, 0x100000001, 0x682f, 0x4, 0x9, 0x5, 0xb3b5, 0x8, 0x200, 0x7, 0x6, 0x800, 0xb7ac, 0xffffffff, 0x3, 0x8000, 0x8, 0x4, 0x20, 0x7, 0x8ca, 0x100000001, 0xfffffffffffffffb, 0x0, 0x223f, 0x2, 0xdd15, 0xff, 0x21, 0x8, 0x6, 0x0, 0x10000, 0x3, 0x635c60fe, 0x81, 0x0, 0x80, 0x0, 0x200, 0x1, 0x1d0, 0x0, 0x6, 0xdd1, 0xffff, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x100000001, 0xd0, 0xdb75, 0x0, 0x6, 0x5, 0x8001, 0x8000, 0x1ff, 0x2, 0x2, 0x6, 0x8, 0x52, 0x10000, 0x9652, 0x7ff, 0xfffffffffffffffb, 0x7e8b, 0x3ff, 0x8, 0x0, 0x560a, 0x9, 0xab, 0x8, 0x2, 0xf6de, 0x7, 0x800, 0x3, 0xc83, 0xffffffffffff8001, 0x8, 0x3, 0x4, 0x4, 0x10001, 0x2c, 0x4, 0x8, 0x1f, 0x8, 0x10000, 0x1, 0x2, 0x5, 0x2, 0xeddf, 0x20000000000000, 0x7, 0x0, 0x4, 0x2, 0x4, 0x1, 0x8, 0x3, 0x5, 0x1, 0x0, 0x10, 0x9, 0xd0, 0xfffffffffffffffa, 0x2, 0x9d, 0x1, 0xdc000, 0x5, 0x0, 0x1, 0x3ff, 0xffffffffa939d487, 0x4, 0x0, 0x8, 0x6, 0x1, 0x8, 0x100000000, 0x7, 0x3, 0xcf5c, 0x40, 0x3, 0x4, 0x8001, 0x4, 0x7ff, 0x2, 0x8, 0x0, 0x9, 0x5, 0x9, 0x0, 0x2, 0x0, 0x9, 0x3, 0x9, 0x5, 0x7f, 0x24000, 0x4, 0x0, 0x3f, 0xffff, 0x7, 0x6, 0x6, 0x2, 0x2, 0x5, 0xc68, 0x3, 0x1, 0x94, 0xa354, 0x78, 0x0, 0x4f, 0xc6, 0x759, 0x80000000, 0x1000, 0xfffffffffffffcce, 0x400, 0x9, 0x3000000000, 0xffffffffffffffca, 0x7f, 0x6, 0x645, 0x8, 0x4, 0x7, 0x800, 0x2c0, 0x8000, 0xd8f244d, 0x1, 0x1, 0x0, 0x6, 0x1, 0x1, 0x1, 0x652, 0x1, 0x7fff, 0x1, 0x2, 0xa7b, 0x1, 0x3, 0x1, 0x2, 0x97f, 0x20, 0x6, 0x8, 0x5f8, 0x4, 0x7fffffff, 0x8, 0xfffffffffffffff8, 0x4, 0x8, 0x1, 0x7, 0x3, 0x8, 0xe6a2, 0x6, 0x6, 0x7, 0x1ff, 0x6, 0xffffffffffffffff, 0x8, 0x100, 0xd3c, 0xfffffffffffffeff, 0x1, 0xfffffffffffff800, 0x7, 0x8, 0x7ff, 0x5c58, 0xfffffffffffffffc, 0x7, 0x7, 0x9, 0x3, 0x7, 0x7ff, 0x400, 0x10001, 0xfffffffffffffffa, 0x7, 0x84a, 0x3, 0x7fffffff, 0x7, 0x80000000, 0x80000000, 0x4, 0x3, 0xa86f199, 0x100000000, 0x4, 0x367, 0x6, 0x4, 0x6, 0x4c, 0x3, 0x100000001, 0x3, 0x9, 0xe2e, 0x1, 0x9, 0x5, 0x0, 0x0, 0x4, 0x7, 0xb9, 0x80000001, 0x4, 0x10001, 0xebb, 0x3, 0xffffffffffff139c, 0x9, 0x80, 0x1f, 0x9, 0x2, 0x7, 0x2, 0x1, 0x4, 0xfffffffffffff262, 0x172, 0x3b29, 0xff, 0x8000, 0x48b76043, 0x0, 0x8, 0x0, 0x4, 0x4, 0x7, 0xffffffffffffffff, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x3f, 0x6, 0x7, 0xfffffffffffffff7, 0x401, 0x6, 0x9, 0x1, 0xffffffff, 0x6, 0xffffffff, 0x7, 0x6, 0x8, 0x3, 0x2, 0x5, 0x14a, 0xa353, 0x400, 0x8000, 0x2, 0x8, 0x1ff, 0x2, 0x2, 0x100000000, 0x2, 0x0, 0x9, 0xfffffffffffff8b7, 0x6, 0x2, 0x0, 0x1000, 0x6, 0x7fff, 0x9, 0x7, 0x401, 0x6, 0xffffffffffffffb7, 0x5, 0x7, 0x5, 0xffff, 0x9, 0x4, 0xfff, 0x0, 0x1, 0x101, 0x401, 0x9, 0x1, 0xfffffffffffffffb, 0x7, 0x2, 0x80000000, 0x5, 0x6, 0x56a, 0x1, 0x200, 0x4bfecc5b, 0x3f85, 0x0, 0x9, 0x0, 0x9, 0x7, 0xffffffff, 0x8, 0x4, 0x81, 0x37, 0x2, 0x4, 0x6, 0x20, 0x401, 0x0, 0x100, 0x6, 0x5, 0xffff, 0xffff, 0x3d87, 0x100000000, 0x276, 0x7995, 0x44, 0xffffffffffffff7f, 0x9, 0x3, 0x1000, 0x6, 0x6, 0x9, 0x5, 0x4, 0x80000000, 0x7fffffff, 0x8, 0x7, 0x8, 0x47, 0x4, 0x10000, 0x1f, 0x8001, 0x80000000, 0x9, 0x44, 0x6, 0x7, 0x1, 0x7, 0x4, 0x8, 0x4c, 0x7, 0x8, 0x81, 0x2, 0x80, 0x3, 0x7, 0x0, 0x3, 0x3, 0x100000001, 0x66b19b9, 0x0, 0x101, 0x5, 0xfffffff800000000, 0x2, 0x7, 0x5, 0x81, 0x3f3, 0x0, 0x362, 0x0, 0x1, 0x777, 0x2, 0x400, 0x2, 0x6, 0x0, 0xffffffffffffff37, 0xffff, 0x8, 0xffffffffffffffff, 0xdf7, 0x4, 0x1, 0x8c9, 0x5, 0x2, 0x23f, 0x3, 0x29a3, 0x8001, 0x8, 0x1, 0x0, 0x4, 0x9, 0x9, 0x9, 0x6, 0x1ff, 0xffff, 0x100000000, 0x10000, 0x1, 0x40, 0x7fff, 0x0, 0xff, 0x800, 0xa6, 0x1, 0x1, 0xfffffffffffffffc, 0x5, 0x0, 0x200, 0x1, 0x7fffffff, 0x20, 0x3ff, 0x3f, 0x3, 0xffffffffffffffff, 0x79e, 0x7df000000000, 0xa65, 0x6, 0x5, 0x100000001, 0x0, 0x0, 0x8, 0x100000000, 0x80000000, 0xffffffffffff8001, 0x3, 0x5c58, 0x6, 0x681, 0x4, 0x7, 0x3, 0xffff, 0x800, 0x9, 0xfff, 0x8, 0x8, 0x4, 0x4, 0x9d0, 0x0, 0x38, 0x7fffffff, 0xfffffffffffffffa, 0x3, 0x40, 0x2, 0x5, 0x80000001, 0x6, 0x55e, 0x100, 0x1, 0x200, 0xdff, 0x7, 0x0, 0x0, 0x200, 0x100e, 0x100, 0x9, 0xea4, 0x80000000, 0x8000, 0x2, 0x6, 0x0, 0x3, 0x3, 0x8, 0x80, 0x2, 0x0, 0xb50f, 0x0, 0xe2ec, 0xea, 0xffffffffffffffff, 0x5, 0x9, 0xfffffffffffffffc, 0x9, 0x2, 0x9, 0x0, 0x0, 0x2, 0x800, 0x1, 0x40, 0x4, 0xffffffff9e6c10f5, 0x4, 0x81, 0x5, 0x4, 0x100, 0x0, 0x7, 0x8, 0x8, 0xe6d, 0x20, 0x0, 0xffffffffffff8000, 0x6, 0x2, 0x100000000, 0x8f, 0x9, 0x6, 0x3, 0x3, 0x1, 0x6, 0x3, 0x100, 0x80, 0xfffffffffffffff7, 0x4, 0x5, 0x5, 0x8, 0xba, 0x491, 0x1d6, 0x4, 0x2, 0x3, 0x976, 0x4000000, 0x1, 0x7fff, 0x9, 0x3800000000, 0x1, 0x85, 0x1f, 0x8, 0xffffffffa3ee826d, 0x7, 0x0, 0x9, 0x2, 0x7, 0x10000, 0x2, 0xfffffffffffffffd, 0x80000001, 0xc028, 0x845, 0x3, 0x0, 0xffffffff, 0x2, 0x7, 0x7, 0x4, 0x339, 0xfffffffffffffff9, 0x7, 0x5, 0x3f, 0xfffffffffffffc00, 0x3, 0x1, 0x6, 0xfff, 0x6, 0x7, 0x7, 0x0, 0x9, 0x4, 0x316, 0xffff, 0x4, 0x1f, 0x0, 0x6, 0x7fff, 0x4, 0x6, 0x80000000, 0x5, 0x2, 0xc99, 0x3, 0x7fff, 0x8, 0x2, 0x5, 0x7, 0x8, 0x9, 0x7, 0x8001, 0xf96, 0x7, 0x7, 0x2, 0x80, 0x5, 0x7fff, 0x100000001, 0xffff, 0x80, 0x40, 0x4, 0x6, 0x8, 0x3, 0x6, 0x7, 0x953a, 0x6, 0xfffffffffffffffc, 0xbd0c, 0x4, 0x3, 0x5, 0x800, 0x2, 0x9, 0x0, 0xf314, 0x9, 0x6, 0x7, 0x3, 0x8000, 0x8, 0x5, 0x4, 0x0, 0xffff, 0x0, 0x9, 0x6e8b3aa, 0xffffffffffff8000, 0x9, 0x9, 0xffff, 0xfffffffffffffffd, 0x0, 0x6, 0x8001, 0x8, 0x0, 0x7, 0x5, 0x8001, 0x0, 0x0, 0x3cf6cd15, 0x2, 0x81, 0x0, 0x6, 0x0, 0x9, 0x99d, 0x3, 0x7f, 0x9, 0xea, 0x81, 0xa12, 0xffff, 0x8180000, 0x7fffffff, 0x31, 0x8000, 0xffffffff, 0x400, 0x9, 0x1, 0x1, 0x3, 0xff, 0x80, 0x1, 0x33abc510, 0x80000000, 0x100, 0x40, 0xffffffff, 0x7, 0x4, 0x401, 0x7, 0x2, 0x1, 0x1, 0x1, 0x7fff, 0x0, 0x1, 0x5, 0x1000, 0x100000000, 0x8000, 0x4, 0x9, 0x401, 0x200, 0x5, 0x7f, 0xff, 0x8, 0x7b, 0xecfc, 0xae, 0x9, 0x100000000, 0x1, 0x63, 0x3f, 0x80000001, 0x10000, 0x3, 0x3, 0x5, 0x19, 0x101, 0x80000000, 0xa7, 0xfffffffffffffff7, 0x6, 0x10000, 0x2, 0x2, 0x8000, 0x80, 0x39, 0xff, 0x14f, 0x6, 0x7, 0x3, 0x1000, 0xf6, 0x9, 0x9, 0x1, 0x5, 0xa8, 0xfffffffffffffffb, 0x809, 0x5, 0x80000001, 0x10000000200000, 0x8, 0x7ff, 0x6, 0x0, 0x3ba7, 0x9, 0x7f, 0x0, 0x20, 0x6, 0x10001, 0x6, 0xb77c, 0x4, 0xffffffffffffffff, 0x4, 0x6, 0x8, 0x1, 0x8, 0x0, 0x8, 0x3ff, 0xfffffffffffffffe, 0x101, 0x10000, 0x1, 0x7fffffff, 0x7, 0x4, 0xffffffffffffffff, 0x7ff, 0x4, 0x10000, 0x80, 0x1, 0x8, 0x8, 0x0, 0x8, 0x4, 0x10001, 0x100000001, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x2be, 0x9, 0x6, 0x3, 0x6, 0x6f4e3765, 0x9e73, 0xff, 0x3f, 0x7b, 0x8, 0x1ff, 0xfff, 0x4, 0xd6, 0x0, 0xbe95, 0xfff, 0x9, 0x3729, 0x20, 0x7fffffff, 0x2, 0xfffffffeffffffff, 0x3, 0x6, 0x7fff, 0x9, 0x0, 0x3, 0x5, 0x127, 0x3f, 0x1, 0x100000001, 0x8, 0x200, 0x8, 0x7, 0x3ff, 0x80000001, 0x200, 0x400, 0x0, 0x0, 0x4, 0x2, 0x8, 0x10001, 0x100, 0x3, 0x8, 0x10000, 0x8, 0x0, 0x8, 0x7, 0x1ec, 0x40, 0x8, 0x1f, 0x1, 0x5, 0x362a, 0x40ee, 0x2, 0x10001, 0x7, 0x40, 0x9, 0x1, 0x7f, 0x8, 0x0, 0x7, 0x800, 0x9, 0xfffffffffffffff2, 0x0, 0x4, 0xa81, 0xc7d7, 0x3, 0x10000, 0x3, 0x3, 0x2, 0x0, 0xd, 0x1, 0xad4, 0x3f, 0xa1e, 0x3ac0, 0x1, 0x5, 0x8, 0x5, 0x8, 0x200, 0x10001, 0x7, 0x5, 0x3, 0xa000000000000000, 0x4, 0x2, 0x9, 0x80, 0x9, 0x7ff, 0x62038ad9, 0x4, 0x401, 0x7fff, 0x27, 0xffffffffffffff81, 0x7, 0x3f, 0xffffffff80000000, 0x16, 0x1d, 0x9, 0x1, 0x7fff, 0x5, 0x400, 0x7, 0x7fffffff, 0xe7, 0x1, 0x4, 0x6, 0x0, 0x3, 0x8, 0x3, 0x20, 0x7fffffff, 0x7fff, 0x1, 0x5, 0x400, 0x0, 0x80000000, 0x20, 0x800000, 0x7, 0x1000000000000, 0x100000000, 0x8, 0x0, 0x6, 0xd3e, 0x9, 0x82, 0xb0dff48, 0x9, 0x8, 0xe8e, 0x80, 0x80000000, 0x2, 0x3, 0x80000000, 0xffff, 0x381, 0x3, 0x3, 0x919, 0x1000, 0x6, 0x2, 0x2, 0x5, 0xffffffffffffff80, 0x3, 0x8a1, 0x80, 0x9, 0x1, 0x8, 0xc2, 0x3f, 0xc6, 0x1, 0x7, 0xe33, 0x1, 0xe5, 0x7ff, 0x8, 0x7, 0x200, 0x5, 0x4, 0xddb6, 0x4, 0xfffffffffffffffd, 0x6, 0x7, 0x4, 0x3, 0x0, 0x8b, 0x4, 0x863, 0x4, 0x8, 0x9d5, 0x9, 0x1f, 0xffffffff, 0x1ff, 0x464e, 0x5, 0x200, 0x1000, 0x1, 0x9, 0x4, 0x80000001, 0x1f, 0x2, 0x5, 0x7ff, 0x7a, 0x4, 0xc60, 0x3, 0x9, 0x7ff, 0x95a5, 0x5, 0x6, 0x6, 0x8, 0xfffffffffffffffc, 0x4, 0x3, 0x401, 0x9, 0x3461, 0x1, 0x8, 0x1, 0x6, 0x0, 0x80000000, 0x10, 0x80000000, 0x7, 0x5, 0x200, 0x4, 0x40, 0x8, 0x9, 0x3, 0x2d, 0xd50, 0x7, 0x4, 0x231, 0x2, 0x3b, 0xeb32, 0x7ff, 0xffffffff, 0x4, 0x4, 0x4, 0x9, 0x3, 0x2, 0x1ff, 0xce7, 0xd6, 0x2b7, 0x97, 0x100000000, 0xfffffffffffffffc, 0x9, 0x7, 0x3, 0x3, 0x2bc, 0x403a, 0x3, 0x5, 0x3, 0x6, 0x8, 0x100000001, 0xff, 0x7, 0x6, 0x8, 0x200, 0x0, 0x9, 0x3c, 0x4, 0xfffffffffffffffb, 0x3, 0x80000001, 0x0, 0x0, 0xe20a, 0xffffffffffffffff, 0x100000000, 0x1000, 0xd6, 0x80000000, 0x3, 0x401, 0x5, 0xc5, 0x5, 0x20, 0x3, 0x4, 0x6, 0x5, 0x4, 0x78, 0xd5, 0x3, 0x7f5b, 0xd, 0x0, 0xff, 0x4f9, 0x101, 0x1, 0x101, 0x0, 0x81, 0x9, 0x2, 0xb1c, 0xa72, 0x0, 0x9, 0xffffffffffffffff, 0x3, 0x10000, 0x9, 0x5, 0x7, 0x4, 0x1, 0xa3, 0x3, 0x8, 0x6, 0x2, 0x9, 0x7, 0xa3, 0xffffffffffff0000, 0x80000000, 0x3, 0x401, 0x8, 0x8, 0x7, 0x1, 0x5, 0x95, 0x3, 0x100, 0x100000001, 0x9, 0x81, 0x7, 0x2, 0x6, 0xfffffffffffffffb, 0x1ff, 0xfffffffffffffffe, 0x6, 0x4, 0xffffffffffffffc0, 0x881, 0x200, 0x4, 0x1, 0x2, 0x0, 0x3, 0x7df80564, 0x4, 0xfffffffffffffffd, 0x0, 0x6, 0x200, 0x3, 0x800, 0xffff, 0x0, 0x8, 0x101, 0x1f, 0x7f, 0x800, 0x6, 0xfffffffffffffffc, 0x7, 0x81, 0x7fffffff, 0x9, 0x401, 0x0, 0x1, 0xe74, 0x9, 0xfff, 0x65, 0x5, 0x5, 0x8000, 0x6, 0x7ff, 0xfffffffffffffff8, 0xffffffff, 0x1, 0x1280, 0x5, 0x81, 0x2, 0xfffffffffffffffc, 0x7fffffff, 0x58, 0x80, 0x9, 0x7fffffff, 0x8, 0xa9e, 0x1ff, 0x100, 0x3, 0x3f7, 0x1000, 0x9, 0x6, 0x7, 0x800000000, 0xffff, 0x800, 0x7, 0x5, 0xcc3, 0x7, 0x1, 0x0, 0x7fffffff, 0x7, 0x6, 0x5, 0x9, 0x3, 0xff, 0x7fc000000000, 0xf000000000000000, 0x7, 0x0, 0x0, 0x31, 0x5, 0x70000000000000, 0xfff, 0x2, 0x3, 0x0, 0x7fffffff, 0x2, 0x2, 0x8, 0x7, 0x8001, 0x100000000, 0x7, 0xea8, 0x6, 0xd0d, 0x2, 0x2, 0x7, 0x4, 0xfffffffffffffeff, 0xd63, 0x192, 0x5, 0xfff, 0xe50, 0x44, 0xe2, 0x1ff, 0x10000, 0x3ff, 0x20, 0x5, 0x5, 0x6, 0xffffffffffffff0e, 0x219, 0x401, 0xc5f3, 0x0, 0x5, 0x3d, 0x20, 0x6, 0x10001, 0x6, 0x1, 0x14d9c0, 0x9, 0x1, 0x100, 0x5, 0xffffffff, 0x7fff, 0x7, 0x7fffffff, 0x4, 0x13d, 0x80000000, 0x2, 0xcc3, 0x7ff, 0x8, 0x0, 0x1f, 0x1000, 0x80, 0x1, 0x0, 0x1000, 0x3f, 0x10000, 0xfa, 0x7, 0x7, 0xfff, 0x6, 0x7fffffff, 0x9, 0x22, 0x8, 0x5fea, 0x20, 0x81, 0x9, 0x2, 0x13, 0x738, 0x1, 0x1, 0x7f, 0x200, 0x1ff, 0x30c5, 0x400, 0x6, 0xdb, 0x10001, 0x400, 0x4, 0x80000000, 0xffff, 0xe4, 0x4, 0x1, 0x465, 0x7fffffff, 0x100, 0x4, 0x295, 0x0, 0x5, 0x10000, 0x2, 0x3f, 0x8, 0x101, 0x5, 0xfffffffffffffff8, 0x9, 0x8000, 0x7, 0xa7, 0x80, 0x3ff, 0x0, 0x2, 0x6, 0x8, 0x6, 0x4, 0x16e, 0x28, 0x1, 0x800, 0x5, 0x1884, 0x4, 0x1f, 0x7, 0xe6f, 0x4, 0x5cfb1d40, 0x29c0, 0x8, 0x80, 0x80, 0x6, 0xae0a, 0x27da, 0x4, 0x0, 0x3ff, 0x3ff, 0x6, 0x2, 0x0, 0x1, 0x2, 0x0, 0x6, 0x8a, 0x0, 0x1000, 0x7, 0xf5a, 0x5, 0x1, 0x2, 0x7, 0x6, 0x1ff, 0xfffffffffffff984, 0x5, 0x5, 0x101, 0x34e7, 0x2, 0x80000000, 0x0, 0xfff, 0x9, 0x1ff, 0x3, 0x6, 0x4, 0x8000, 0x5, 0x7, 0x7, 0xffffffffffff8000, 0xffffffff, 0x8ad, 0x3f, 0x8, 0x49, 0x7, 0x9, 0x3, 0x400, 0xff, 0x1, 0x1, 0x401, 0x400, 0x0, 0x9, 0x80, 0x8e4c, 0x7, 0x101, 0x8000, 0x1f, 0x8, 0x2, 0x1, 0x39, 0xff, 0xbd, 0x2, 0x10000, 0x0, 0xffffffff80000001, 0x100, 0x7, 0x4, 0xfd2e, 0x2, 0x3, 0x2, 0x1, 0xfd0, 0x4, 0x82, 0x3, 0x0, 0x400, 0xfffffffffffffffd, 0xe11, 0x8001, 0xfffffffffffffffd, 0x3, 0xe85, 0x80, 0x7ff, 0x80, 0xffffffff, 0x9, 0x1ff, 0x80, 0x6b2, 0x2990, 0xfffffffeffffffff, 0x1, 0x0, 0xffffffff, 0x4, 0x8e, 0x101, 0xe50, 0x176000000000, 0x2, 0x4, 0x7fff, 0x7, 0x1, 0x10001, 0x3f, 0x1, 0x19, 0x6, 0x6, 0x8, 0x1, 0x6, 0xfffffffffffffff9, 0x7, 0x10001, 0x9c8, 0x6, 0x3f, 0x4, 0x5, 0x2, 0xe0, 0xffff, 0xffffffffffffffc2, 0x1, 0x7, 0x9, 0x1c0, 0x84, 0x4, 0x4, 0x622a, 0x200, 0xffff, 0x7a18, 0x7fffffff, 0xa735, 0xfea, 0x401, 0x10001, 0x2, 0xffffffff, 0x7f, 0xffffffff80000001, 0x20, 0x8, 0xfffffffffffff800, 0x1, 0x1, 0x100000001, 0x8000800000000, 0x0, 0x6, 0x8001, 0x1, 0x7, 0x40, 0x2897, 0x7f, 0x8, 0x7, 0x7, 0xf9b7, 0x0, 0x8, 0x8, 0xffff, 0xe29d, 0x1, 0x2, 0x10001, 0x1, 0x400000000, 0x1000, 0x1, 0x80000001, 0x3ff, 0x42, 0xfff, 0x9, 0x1, 0x772, 0xfb, 0x1, 0x100000000, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0xee0, 0x541f, 0x8001, 0x1f, 0x3f4, 0x6, 0x10000, 0x0, 0x8, 0x3, 0xf27, 0x7f, 0x2, 0xdb, 0x100000000, 0x1ff, 0xa8, 0x1000, 0x8, 0x100, 0x54, 0x7, 0x524, 0x2, 0x0, 0x0, 0x80000000, 0x3a, 0xff, 0x6, 0x4, 0xff, 0xe6, 0x7fff, 0x200000, 0x9, 0x1, 0x0, 0x6, 0x2, 0x7, 0x0, 0xffff, 0x0, 0x6, 0x80000001, 0x800, 0xffffffffe6cfb23e, 0x6, 0x7fffffff, 0x4, 0x1, 0x100, 0x0, 0x200, 0x100, 0x8, 0x40, 0x6, 0x40, 0x9, 0x1, 0xffffffffffff7fff, 0x4b, 0x2, 0x0, 0x101, 0x4, 0x7f, 0x7, 0x1f, 0x2, 0x9, 0x5, 0xfffffffffffffff7, 0x8, 0x1, 0x3, 0x100000000, 0x0, 0x4, 0x8, 0x0, 0xfffffffffffffffc, 0x2c9b, 0x9, 0x4, 0x2, 0x9, 0x100000000, 0x3, 0x5, 0x7fff, 0x9, 0x8000, 0x5, 0x400, 0xaf, 0x9, 0xaf, 0x4, 0x3, 0x1, 0x20000000200000, 0x14c, 0x7, 0x3, 0x400000000000, 0x1, 0xfffffffffffeffff, 0x8, 0x9, 0x4, 0x2266, 0x800, 0x61a16b0d, 0x8, 0x4, 0x8, 0x7, 0x0, 0x4, 0xe000000000000000, 0x3, 0x80000001, 0x8, 0xfffffffffffffff9, 0x3ff, 0x1, 0x1, 0x993, 0x3, 0x5b, 0x9, 0x4, 0x9d0, 0x206, 0x1, 0x80, 0x800, 0x0, 0x1ff, 0x3, 0x1, 0x7, 0x6, 0x200, 0x3, 0x1f, 0x59843353, 0x6444d08a, 0xffffffff00000000, 0x20000000000, 0x7, 0x4, 0x7f, 0x5, 0x2, 0x0, 0x81, 0x9, 0x3ff, 0x8001, 0x8, 0x2f338daf, 0x1ff, 0x0, 0x80, 0x5, 0xffff, 0x80000001, 0x1, 0xfffffffffffff82a, 0x6, 0x5, 0xfffffffffffffff9, 0xce, 0x10000, 0x0, 0xe182, 0x80, 0xffffffff, 0xfffffffffffffffa, 0x3, 0x1400000000000, 0x0, 0x5, 0x9, 0x9, 0x7, 0xfffffffffffffff9, 0x0, 0x9, 0x9a, 0xe, 0x8, 0x5, 0x7, 0x40, 0x3, 0x3, 0xacf9, 0x3ff, 0x400, 0x401, 0xb55, 0x3, 0x401, 0x2, 0x6, 0x2849, 0x10000, 0x20, 0x6, 0x3, 0x0, 0x1, 0x8, 0x5, 0x1, 0x0, 0x4, 0x6, 0x100000001, 0x353b, 0x80, 0x0, 0xffffffff, 0x1, 0xfffffffffffffff8, 0x100000000, 0x7, 0x0, 0x8, 0x8, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffff, 0x0, 0xe8a8, 0x3, 0x7f, 0x3, 0x0, 0x3, 0x6, 0x1f, 0x3, 0x9, 0xfffffffffffff97d, 0x3, 0x10000, 0x8, 0x401, 0x4, 0x3ff, 0xfff, 0x8, 0x800, 0x7, 0x80000001, 0x6, 0x100000001, 0x3, 0x101, 0x0, 0x0, 0x1, 0x6, 0x24d, 0x6, 0x0, 0x5, 0x0, 0x5, 0xffffffff, 0x2, 0x10000, 0x2, 0xffffffff, 0x2, 0xf6, 0xff, 0xffff, 0x8, 0x1, 0xd71b, 0x0, 0xff, 0x2e085684, 0x8001, 0x6b57, 0xb15, 0x8, 0xcb, 0x800, 0xfffffffffffff70d, 0x3, 0x10001, 0x7fffffff, 0x2, 0x20, 0x0, 0xffffffffffffffb1, 0x5, 0x9, 0xfffffffffffffeff, 0x4, 0x2000000000, 0x4, 0xd077, 0x4f1f, 0x800, 0x9, 0xe0, 0x2, 0xfffffffffffffff9, 0x3, 0x7, 0x7, 0x3f, 0xab17, 0x9, 0x1, 0x80000000, 0x7, 0x7, 0x1, 0xffff, 0x2, 0x1000, 0x80000000, 0x6, 0x2, 0x6, 0x7, 0x800, 0x1, 0xff, 0xffffffff, 0x7, 0x3, 0xffffffff, 0x2, 0x9, 0x0, 0x6, 0x2, 0x9, 0x2, 0xa2d, 0x80000001, 0x0, 0x5, 0xa0af, 0x1c0000, 0x9, 0x3ff, 0x8000, 0x0, 0x100000001, 0x2, 0xd519, 0xfffffffffffffff8, 0x8f0, 0x3, 0x5, 0xedd8, 0x1, 0x81, 0xff, 0x6, 0x80000001, 0xffffffff, 0x10001, 0x3, 0x0, 0xfff, 0x0, 0x6, 0x7fffffff, 0xffff, 0x0, 0xfff, 0x0, 0x0, 0x9, 0xffffffff, 0x800, 0x3ff, 0x4, 0x5, 0x20, 0x5, 0x0, 0xfff, 0x10000, 0x5, 0x7f, 0xfffffffffffffffb, 0xffff, 0xeb5, 0x100, 0xffffffffffffffff, 0xffffffffffffc9e0, 0x1, 0x8, 0x4de7, 0x100000001, 0xffffffffffffff01, 0x8, 0xa0a, 0xfffffffffffffffa, 0x1, 0x1, 0x2, 0x7, 0x8b, 0x100000000, 0x3, 0x100000000, 0x0, 0x1000, 0x3, 0x912, 0x1ff, 0xfffffffffffffffc, 0x1, 0x8001, 0x1, 0x5, 0x80000000, 0x80000000, 0x80000001, 0x281, 0x0, 0x7, 0x3, 0xbc7, 0x7, 0x8000, 0x6, 0x12, 0x5, 0x6, 0x8, 0x5, 0x4b, 0x3, 0xfffffffffffffff9, 0xd3, 0x80000000, 0x0, 0x7ff, 0x4, 0x3, 0x3f, 0x6f267a0b, 0x1ff, 0x7, 0x1, 0xdd, 0x8, 0x9, 0x20, 0x36, 0x6, 0x8000, 0x9e979a3, 0x1, 0x7, 0x3, 0x8000, 0x20, 0x1, 0xd961, 0x283, 0x7fffffff, 0x5, 0x6d8, 0x719, 0xcb, 0x5, 0xfffffffffffff594, 0x101, 0x532, 0x800, 0xff, 0x7f, 0x1, 0x3, 0x6, 0x3ff, 0x0, 0x3, 0x5, 0x9, 0x40000000000, 0x7fff, 0x10000, 0x5, 0x4, 0x20, 0x4, 0x5, 0x8, 0x9, 0x7, 0x10001, 0x3, 0x7f, 0x8000, 0x1000, 0x7, 0xfffffffffffffff9, 0x4, 0x65e8, 0x9679, 0xda68, 0xab5, 0x0, 0x2, 0x3, 0x0, 0x10001, 0x2, 0x7, 0x9, 0x28a, 0x7, 0x3dbf, 0x8, 0x80000000, 0x7, 0x6, 0x4, 0x1, 0x86, 0x8000, 0x5, 0x100000001, 0x54e7b643, 0x9, 0x123, 0x8, 0x5, 0x0, 0x8001, 0x7, 0x5, 0x62, 0x80000000, 0xfc21, 0x6, 0x8, 0xfffffffffffffffe, 0x2, 0x7878, 0x1, 0x9, 0x6, 0x8, 0x1, 0xfffffffeffffffff, 0x6, 0x1f, 0x6, 0x10001, 0x401, 0x0, 0x57, 0x2, 0x6, 0x7, 0x5, 0x80000000, 0x4c4, 0x20, 0x3f, 0x9ba, 0x1ff, 0x3, 0x447fcf66, 0x44a, 0x1, 0x7fffffff, 0x800, 0x6, 0x9, 0x7ddd, 0x9, 0x400000, 0x7fffffff, 0x6, 0x1, 0x6, 0x3, 0x8, 0x6, 0xc4a, 0x5e6, 0x80000001, 0x100, 0x8001, 0x2, 0x3, 0x5, 0x0, 0xca1, 0x1, 0x2, 0x5, 0xffff, 0x4, 0x6, 0x2, 0x352, 0x3, 0x7ff, 0x7f, 0x7, 0x7f, 0x29f4, 0x1, 0x17d37957, 0x6, 0x401, 0xff, 0x1, 0x579, 0xb5a1, 0x1, 0x6, 0x5, 0x8, 0x6, 0x1, 0x0, 0x80000001, 0x2, 0x1, 0x7, 0x101, 0x101, 0xfffffffffffffffc, 0x5, 0x5, 0x1f, 0x7, 0x7, 0x8000, 0x8, 0x3, 0x9, 0x8000, 0x4, 0x3ff, 0x40, 0xc884, 0x1, 0xd79d, 0xfffffffffffffffe, 0xffffffffffffffc1, 0x1, 0x3, 0x2, 0x2, 0x7, 0x2, 0x6, 0x8000, 0xfffffffffffffffd, 0x1c4, 0x101, 0x40d70aea, 0x9, 0xe6c, 0x8, 0xfffffffffffffffd, 0x468, 0x10001, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x6, 0x9, 0x5, 0x81, 0xb, 0x1000, 0x7fffffff, 0xfffffffffffffff9, 0x3, 0x6, 0xf9d8, 0x6f98, 0xffffffff, 0x7, 0x3, 0x7f, 0x20, 0x4, 0x5, 0x7, 0x7fffffff, 0x101, 0x1, 0x1, 0xbc89, 0xcfdc, 0xffffffff, 0x1, 0x1f, 0x9, 0xffffffff, 0x8000, 0x7, 0x7, 0x8, 0x6c, 0x5, 0xf3, 0x0, 0x80, 0x0, 0x5c, 0x5, 0x4644, 0x2, 0x10000, 0x523, 0x1220, 0x7, 0x233, 0x8, 0xfffffffffffffa9a, 0x7ff, 0x36, 0x2, 0x2f, 0x8, 0x17d, 0x401, 0x1, 0x80000001, 0x0, 0x2, 0x7, 0x1ff, 0x4, 0xcc, 0x100, 0x1, 0x80, 0x0, 0x10000000, 0x4, 0x3f, 0x4b, 0xfffffffffffff800, 0x401, 0xc577, 0x3, 0x5, 0x9, 0x93, 0xff, 0xffffffffffffffff, 0x7fffffff, 0x1, 0x0, 0xffffffffffffffe0, 0x1, 0x7fff, 0x1, 0x5, 0x1f, 0xffff, 0x80, 0x0, 0x3, 0x0, 0x1, 0xab, 0x0, 0x7, 0x9, 0x8, 0x0, 0x1, 0x401, 0x101, 0x5, 0x4, 0xfffffffffffffff9, 0x2, 0x0, 0x7, 0x8, 0x7fffffff, 0x7, 0x712, 0x21, 0x0, 0x7, 0x1, 0x6, 0x7, 0x6, 0xffffffffffffffff, 0x800, 0xd1e, 0x7, 0x6, 0x3, 0x1f, 0x61, 0x0, 0x1, 0x6, 0x13, 0x0, 0x3, 0x1000, 0x8, 0x101, 0x3, 0x9, 0x3, 0x1, 0x37, 0x1550, 0x1, 0x5, 0x4, 0x0, 0xfffffffffffffffe, 0x4, 0x5, 0x0, 0x1, 0xc01, 0x100000000, 0xffffffffffff165d, 0x5, 0x1, 0x5, 0x400, 0x5, 0x3d49, 0xffff, 0x9, 0x5, 0x9, 0x86e, 0x9, 0x180000000000, 0x0, 0x99cd, 0x2d16, 0x1f, 0x8, 0x4, 0x6, 0x7fff, 0x4, 0x6, 0x1, 0x3, 0x0, 0x80, 0x1, 0x4, 0x80, 0x6, 0xf32, 0x7f, 0x1, 0x8, 0x1, 0x7, 0xdd30, 0x3, 0x20, 0x8, 0x1f, 0x7ff, 0x100000001, 0x9f, 0x2, 0x16e567db, 0x2, 0x4, 0x8ca, 0x5, 0x20, 0x3, 0x5608, 0x2, 0x3, 0x2, 0x9, 0x6, 0x9, 0x96a0, 0x3, 0x8000, 0x10000, 0xf9d, 0x7fff, 0xff, 0x200, 0xd1f, 0xffffffffffffffc1, 0x8, 0x1, 0x3, 0xa71, 0x3, 0x4, 0x4, 0xaa0, 0x6ad79082, 0x5, 0x8, 0x5c32, 0x9, 0xfffffffffffffffd, 0x7fffffff, 0x1, 0x2, 0x2, 0xfffffffffffffc01, 0xb1a1, 0x2, 0xfff, 0x7, 0xccf8, 0xed00000000000000, 0x1, 0x101, 0x200, 0x9, 0x62c, 0x10001, 0x800, 0x6, 0x71cf, 0x3, 0xfffffffffffffffc, 0x1000, 0x3, 0x4, 0x2, 0x5, 0xfff, 0x1, 0x3, 0x1ec, 0xff, 0x0, 0x8, 0x2, 0x2, 0x3, 0x4, 0x4, 0x29f, 0x9, 0x133, 0x7, 0x0, 0x2, 0xfffffffffffffff8, 0x9, 0x7, 0xffffffff, 0x1, 0x7ff, 0xc6b6cea, 0x2, 0x0, 0x81, 0x8, 0x7ff, 0x1, 0x1, 0x200, 0x2, 0x2, 0x48, 0xffffffff, 0xa5, 0x8, 0x1, 0x5, 0x70000, 0x4, 0x40, 0x7ff, 0xff, 0x7f, 0xfffffffffffffffe, 0x9af, 0x9, 0x84f, 0x6, 0xffff, 0x7, 0x101, 0x5, 0xffffffffffff0001, 0x100000000], "8b46a050976b0eb509105616abcf8841f17fa9ec254645a4e32671f3f610247df89b1197fb9835aca1ac6a06c4263386acc36781599dc0a6bff9bb527fa99ffca5cbcb9eddec14fe649ed473e355f9fdf459b51dc5c9ca3b5c828f36c2a6fb3660147fa1a2a1dcc5f51bf9cfa522eb0483082e1a6b02ca3daff7c963886e04af0d35da058b9aa8c9b0bab15cc006958e7b56543ad19ed6249ad631a64030a9ab17966f59cc2f772431068c"}}) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0x7, 0x1, 0x81, 0x6, 0x1f, 0xec, 0x5, 0x10001, 0xfffffffffffffff9, 0x8, 0x4, 0x1, 0x8000, 0x9f8, 0x8, 0x7, 0x4, 0x100000001, 0x430e, 0x18, 0x2e7c1a67, 0x9, 0x5, 0x1, 0x8, 0x2, 0xff, 0x101, 0x7, 0x7, 0x8000, 0x2800000000000]}) preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r2) 18:47:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x600, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:02 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) close(r0) 18:47:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x38}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:02 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x7, 0x70, 0x800, 0x80000001, 0x6e4b802a, 0x100, 0x0, 0x7fff, 0xa, 0x0, 0x1ff, 0x8, 0x4, 0x0, 0x1, 0x38de, 0x24, 0xffffffffffffff80, 0x3, 0x7f, 0x100000000, 0x10000, 0x0, 0x100000000, 0x81, 0xfffffffffffffffa, 0xba3, 0xb8c, 0xb6, 0x2ea8, 0x10000, 0x7, 0x0, 0x1000000, 0x2, 0x4, 0x0, 0xfe8, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1, 0x7, 0x2, 0x7, 0x100000000, 0x8f53, 0xa5b}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x20000003) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_getevents(r1, 0x8, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={r2, r3+30000000}) 18:47:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0xa7}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:02 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000f060501ff0002fffdffff2e0a00000009000140070000007defff000c000b000400000000000000"], 0x2c}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x0, 0x0) 18:47:02 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:02 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x195440, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\x00') 18:47:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 134.460920][ T9725] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:47:02 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$rfkill(r2, &(0x7f0000000040)={0x1, 0x8, 0x3, 0x1, 0x1}, 0x8) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @loopback}, 0x2, 0x4, 0x2, 0x2}}, {&(0x7f0000000080)=""/215, 0xd7}, &(0x7f0000000180), 0x44}, 0xa0) close(r0) 18:47:02 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x2000001e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) [ 134.513016][ T9725] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 134.545189][ T9730] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 18:47:02 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7fff, 0x20000) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x9, 0x1, 0x3, 0x0, 0x2e}, 0xc) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x40) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x100, 0x0, 0x101, 0x5, 0x9, 0xc, 0x3}) close(r1) 18:47:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 134.567060][ T9730] netlink: 'syz-executor.4': attribute type 11 has an invalid length. 18:47:02 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x195440, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\x00') 18:47:02 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0x6, 0x2}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:02 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101800, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x78, 0x3, 0x0, 0x9, 0xa, 0x6, 0x100000001, 0x0, 0x3, 0xff, 0x100000000, 0x8}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)=""/225) 18:47:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x7ffff000}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xb00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:02 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:02 executing program 4: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0xfff, 0x800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x6, 0x1, [0x0]}, &(0x7f00000001c0)=0xa) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f00000002c0)=0x84) lremovexattr(&(0x7f0000000340)='./file1\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') 18:47:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x1a}], 0x2, 0x0) 18:47:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:02 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1ff, 0x12040) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x7, 0x4, 0x5, 0x401, 0x5, [{0x80000001, 0x3, 0x80000001, 0x0, 0x0, 0x8}, {0x7, 0xfe6, 0x8, 0x0, 0x0, 0x484}, {0x9, 0xfffffffffffffff7, 0x6e, 0x0, 0x0, 0x808}, {0x3, 0x200, 0xffffffffffff9022, 0x0, 0x0, 0x400}, {0x7, 0x9, 0x81, 0x0, 0x0, 0x84}]}) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) close(r0) 18:47:02 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x7, 0x70, 0x800, 0x80000001, 0x6e4b802a, 0x100, 0x0, 0x7fff, 0xa, 0x0, 0x1ff, 0x8, 0x4, 0x0, 0x1, 0x38de, 0x24, 0xffffffffffffff80, 0x3, 0x7f, 0x100000000, 0x10000, 0x0, 0x100000000, 0x81, 0xfffffffffffffffa, 0xba3, 0xb8c, 0xb6, 0x2ea8, 0x10000, 0x7, 0x0, 0x1000000, 0x2, 0x4, 0x0, 0xfe8, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1, 0x7, 0x2, 0x7, 0x100000000, 0x8f53, 0xa5b}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x20000003) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_getevents(r1, 0x8, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={r2, r3+30000000}) 18:47:02 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:02 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40883002}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x500, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) 18:47:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x20000149}], 0x2, 0x0) 18:47:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) socket$xdp(0x2c, 0x3, 0x0) 18:47:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:03 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)=0x4) 18:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x7fffefe2}], 0x2, 0x0) 18:47:03 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x2) close(r0) 18:47:03 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x66}}], 0x38, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x28c001, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) getpgrp(0xffffffffffffffff) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x4}) getpgid(0xffffffffffffffff) r1 = fcntl$getown(r0, 0x9) syz_open_procfs(r1, &(0x7f00000005c0)='\xee\x85\x8f\xdb\xe7Sa@\x1b\xed\xbca\x1e\xcd\x9b0Ry\x8d\xd8\x15\xce\xc2\xcb\xff\x8a\xcb\x169U\xbb\x04\x00\x00\x00\x00\x00\x00\x00\xa7a\xde\xf8H\xe2z\xf5|p\x1b\xa4\xe9R\xaer\x0eA\xbf?\xdfZT\x1e0\xd7\xb6PLE\x8c\x9dwH&gC9\xd8\x10\xee\xaf\f\x1f\xb5\xac2\xea\x00\x13\xf3K@\xd5\xf6\x1a\x95W}\xbc>\x8c\x99\xd1\r\x03\xe5\xe5\xcf\xcf\xb8m\x9c\xdf\x99\xc6[\xc0\xc1O\xdf\x14\x1a\x0e\xaea\xa6\xc22\a\xa6\xea\x13j\xe8\xbd\\&\xd9\x92\xff\xd0\xad\xf3\xa8j\x16,\xf2\xe2\xf4\x12\x15\"\x1e\xf0\xfeA\xaa\xcc\xaeI\x9e\xe3,\xcd\xed\xd69Q\xe0\x1dj\x95I)\xc6UIN\xc4\xd8 ?(Q{2\x7f7FJ\xc7\xac\xad\xda_\x88s\xaa\x13%\x8d\xdc\xb4\xeePP\xe6\x94\x97h7\xdfH\xb5\xb1\xea\x91\xccn\xf1\x9dv\xe4#\x02\xe6D') preadv(r0, &(0x7f0000000100), 0x0, 0x38) 18:47:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x7, 0x70, 0x800, 0x80000001, 0x6e4b802a, 0x100, 0x0, 0x7fff, 0xa, 0x0, 0x1ff, 0x8, 0x4, 0x0, 0x1, 0x38de, 0x24, 0xffffffffffffff80, 0x3, 0x7f, 0x100000000, 0x10000, 0x0, 0x100000000, 0x81, 0xfffffffffffffffa, 0xba3, 0xb8c, 0xb6, 0x2ea8, 0x10000, 0x7, 0x0, 0x1000000, 0x2, 0x4, 0x0, 0xfe8, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1, 0x7, 0x2, 0x7, 0x100000000, 0x8f53, 0xa5b}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x20000003) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_getevents(r1, 0x8, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={r2, r3+30000000}) 18:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x8, 0x0) 18:47:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xec0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) 18:47:03 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000280)=0x3) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000100)) chroot(&(0x7f0000000040)='./file0\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x6}], 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x21, &(0x7f0000000200)='mime_typekeyringposix_acl_access\x00'}, 0x30) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x38) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x2, 0x2) 18:47:03 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x2) 18:47:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = getpid() modify_ldt$read(0x0, &(0x7f00000002c0)=""/116, 0x74) ptrace$setregset(0x4205, r1, 0x7, &(0x7f0000000280)={&(0x7f0000000200)="ce664a5f54558d0d4eaf03eefb59fc1e76712ea0f2a2836d799541557b1d4c2b75ef92caeb8000e21d56831d277f318e5bb011a422f654853930dd610eba7746c13186953f1a8f165086257725ce", 0x4e}) close(r0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) fcntl$setflags(r0, 0x2, 0x1) sendmsg$can_raw(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x2, 0x2, 0x6, 0xe4}, 0x3a, 0x1, 0x0, 0x0, "df633303dc3d6270ae68c67193d609c59359a9c649acd88fd41d79ef3d720ab6f859ecc9f12482d920a65e85cddb56c2965185b1abe29bbc54a942623469a189"}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x1) 18:47:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/73) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x7fff, 0x0, 0x0, 0x1}, 0x8) ftruncate(r2, 0x3) preadv(r2, &(0x7f0000000040), 0x0, 0x38) 18:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x4000) 18:47:03 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 135.792533][ T9891] FAT-fs (loop0): bogus number of reserved sectors 18:47:03 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x7, 0x70, 0x800, 0x80000001, 0x6e4b802a, 0x100, 0x0, 0x7fff, 0xa, 0x0, 0x1ff, 0x8, 0x4, 0x0, 0x1, 0x38de, 0x24, 0xffffffffffffff80, 0x3, 0x7f, 0x100000000, 0x10000, 0x0, 0x100000000, 0x81, 0xfffffffffffffffa, 0xba3, 0xb8c, 0xb6, 0x2ea8, 0x10000, 0x7, 0x0, 0x1000000, 0x2, 0x4, 0x0, 0xfe8, 0x0, 0x10001, 0x1, @perf_bp={&(0x7f00000001c0), 0xe}, 0x1, 0x7, 0x2, 0x7, 0x100000000, 0x8f53, 0xa5b}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) syz_open_procfs(0x0, 0x0) ioctl$EVIOCGPHYS(0xffffffffffffffff, 0x80404507, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x20000003) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_getevents(r1, 0x8, 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000140)={r2, r3+30000000}) 18:47:03 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) read$rfkill(r0, &(0x7f0000000000), 0x8) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f00000000c0)=0x1) r1 = semget$private(0x0, 0x2, 0x80) semctl$SEM_STAT(r1, 0x3, 0x12, &(0x7f0000000040)=""/1) 18:47:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r1, 0x8040450a, &(0x7f0000000040)=""/255) 18:47:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1100, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x1000000) [ 135.834586][ T9891] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:03 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1200, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:03 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x2000000) 18:47:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@remote, @remote}, &(0x7f0000000080)=0xc) close(r0) 18:47:03 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x101000) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:03 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x40000000) [ 136.091598][ T9926] FAT-fs (loop0): bogus number of reserved sectors 18:47:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) [ 136.136391][ T9926] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:04 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3b0}}, 0x0) bind$netlink(r0, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000002ffffffff}, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x82, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) r3 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x4, 0xc01) bind$xdp(r1, &(0x7f0000000380)={0x2c, 0x1, r2, 0x25, r3}, 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) r5 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x80) getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x8) r6 = syz_open_procfs(r4, &(0x7f0000000040)='attr/prev\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000480)={0x8d, 0x1ff, 0x3, "8688086ea42934b209c43f54a4c5e8a5931cf9f4e39892c199d6a7b0503ab0731357b4b8e8cac857f2b8521611761531c51fc88803f121f905f1db1549f2908287fea3bde033277dc086dbff0aa7079acb4417f79943b6fa055581a36e1fdcce3254ba408300850d59e4e2a99d0b9ee6ec4d09e877525ba6b0df4335de804509be1a4c42302c7b9d57ed447727"}) 18:47:04 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='Net/proto@ols\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1300, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x140, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8, 0x60000) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0xffff, 0x8dd}) close(r0) 18:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x100000000000000) 18:47:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) 18:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x200000000000000) 18:47:04 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x38) tgkill(r1, r1, 0xf) [ 136.392667][ T9960] FAT-fs (loop0): bogus number of reserved sectors 18:47:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1400, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x7e, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f0000000280)="0100000000000000180100000400000000000000000000002f") [ 136.489467][ T9960] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:04 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001400)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/127, 0x7f}], 0x1, &(0x7f0000000180)=""/117, 0x75}, 0x9}, {{&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/171, 0xab}, {&(0x7f0000001340)=""/48, 0x30}], 0x3, &(0x7f00000013c0)=""/23, 0x17}, 0x1}], 0x2, 0x1, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) close(r1) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x402) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0), 0x200000000000008b) 18:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x4000000000000000) 18:47:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1500, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:04 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x200) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:04 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r1 = request_key(&(0x7f0000000140)='logon\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000200)='\\\x00', 0x0) keyctl$get_keyring_id(0x0, r1, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090c000000000000000000000002001300020000000000000000000000020006000000e00002000000e0000001000000000000000002000100000000000000000200000000030005000800000000000000e00000010000000000000000"], 0x60}, 0x1, 0x2000000000000000}, 0x0) 18:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0xffffffff00000000) 18:47:04 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1600, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xae, "e63b7f20255c774ac7fbf6345c9f6d2097c68cdd2246ed5f51faef07c521aeba50b824ba966d3036dc651cc89f010a7d1681da7945cac31f74448358070287c4942b2274db4ca806265b98db5d415e22cf60a3a1aa8c11eb74c89c10331a5ae0b4c7da8ea5909945c518bd95b49f89aa440f50ddd82c6c8aa85f289cf2fcc6783cae97fbad9652e18f104cbd7c298ce83a59b5fcd8dec22c29df0033c05276ae0baabd5d26c38e1c3f1b10583293"}, &(0x7f0000000140)=0xb6) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000180)={r2, 0x6}, 0x8) 18:47:04 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x101040) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getuid() pipe(&(0x7f0000000900)) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @initdev}}, 0x0, @in=@remote}}, &(0x7f0000000440)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) r8 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000640)={0x2b0, 0x0, 0x5, [{{0x1, 0x2, 0x80000000, 0x1, 0xfffffffffffffb52, 0x6, {0x0, 0x2, 0x3, 0xc2ee, 0x100, 0xffff, 0x6, 0x1, 0x0, 0xfffffffffffffff8, 0x7fff, r1, r2, 0x6, 0x7fff}}, {0x0, 0x10000, 0xb, 0x1, 'net/packet\x00'}}, {{0x4, 0x1, 0x7, 0x7, 0x6, 0x76, {0x2, 0xd6e2, 0x20000, 0x1, 0x100000000, 0x4, 0x7fffffff, 0x7f, 0x8, 0x2000000, 0x0, r3, r4, 0x32, 0x80000001}}, {0x1, 0xf6, 0xb, 0x8, 'net/packet\x00'}}, {{0x4, 0x2, 0x0, 0x80, 0x9, 0x8000, {0x1, 0x1d, 0x3, 0x800, 0xff, 0x100000001, 0x40, 0x18ca, 0x100000000, 0x4a, 0x10001, r5, r6, 0x5396fe54, 0x7}}, {0x3, 0x5, 0xb, 0x3ff, 'net/packet\x00'}}, {{0x2, 0x0, 0x1, 0x7, 0xfffffffffffffffc, 0x2, {0x0, 0xfff, 0x7fff, 0x10000, 0x8d, 0x0, 0x2, 0x10000, 0x400, 0x0, 0x8, r7, r8, 0x5}}, {0x4, 0x4, 0xb, 0x539, 'net/packet\x00'}}]}, 0x2b0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') writev(r0, &(0x7f00000009c0)=[{&(0x7f0000001480)="9ac7456da9bf3c6b95ae2e5451550b8f475109a09c964e99d73b8c0d21c909873a0fbb91ebd797cc6d213c33c19b41cafb186b5f7e512332d8a5bdfcb013fe63d34375d6fa6fa00dc748d45229cc92fe2ef35e67a7f1b1b899b37278e9958812597efa282b346a471fb1c444a6b72c70728f35590f65a373987fe013f348229cc1a3d8f0055da944c24b9aeed3dc027b693002d3caca11513368bf49785e8a01bb576dfdbfb1969eab118990b2bd774f900b428f6d6cdba318781d7a7e79eb2673b0e049b36823fdce0e953014288ea663ed2c4630c93dd48fe52e0673f83eb6a0833f47f998cbe71c092eca870fdb38f0f8aec3662a1a4da178a8e0131846e5118afdb91f6735dc76f200329a090084a39585bb19f25b54b8caa0c8def1d270c5bfd09617f0c214982aed7a10a798fbff79ed61e024df97eba3f25c76c14b8bd2007e4664d5ae587ef31f9bcc4cf47747b7ee58ee4add8c6d3c9b2c8ec11e7f9e4e634bca17e6717c5d1e0dddaab064531a5df9e59d6cf147441d9c7ec12ceb9cc439a2ed499db59fffcd84b682862acaa45903b98610a07669fa1ea140da98b571869d7a05b63072d3148a468b32251f1f4183d6965ab12146cbc0d02bd092daa1c2b0bef55b54ad62d2bfdb26009eb9732694055a5b0492c081dfe34c8cfda400568e4a181bc286d446e23b663befeb189e5bc84d5a570eac70879b0f9a907436a6cd8fd79cf0062390514ad06786f0a5a94f215e7978a91a450b54e96b474daf52eb8b324c640d116c49a2bd45f4f7166c5797d353064ed524b7d582adf3ccf34668d1256f39beb721eb9b17a6a60e9c6521b976d0ea040f083ae950f98f3f8c2498172bb5723a9b90ed819a5165d1a7efffe118b0bdad096b40d6e631ea740fab48d07d6ad9128378df38c08c28030723b7f4107c755b5cfb7d97b4e65a6d3f7b54725994d8e94abb23ea333f098b14d92d8e2bbd50e4e54bfe20cf9d8ba41a486db740dd7962e68b7177fd9c422110fbd1156168f4d48e75c607fec2c14291632bf2ae9e1e4f2caf55bce5c7f62ea6d420595c694f2b451dbf41c568f64658165e0d5eeb0568973c2344125f2a9bb7c613396a7ab568249e0fca36f6db37d0ee5cb8455c47863f4a5934e290cf357af582b4c807db4a3c18e042e173e677375d66ef63bb70107d9facc7b1bb9eeb7ab7ad93ec7210b266983404e2fdb7300c558589ee5247dd0541a244ead59d24c4473e8a737f6e3cda636edf540a1724a23e06f0a42d49e89b837be86fe2316362718b6daf14557d05e0eea0844b5f29824e878da269fa687af8c8ca8c2c2d115c976a9e4fe5011485774ae508b3de58ef60a344749d3aad03f228a8d033f1a501132e0b243125be80830932a4e839075bb3e91bb31707f3a1122c498e288d669b951cb2034f15884a4a5095977e7d68b4434e260f8ddc2240d0644a74eb871688dbedf5670f0d4c34570c4e15a539cc5e67840894bf28173be37935cad4af4e5d65f4b71449ee08081e2da6c1e034d08b08409bd08b8db0911f53477dd05fff169225b349bac91c80043abc624230d5914747842fdc793442b7e2046b69ed5dda5c76e30267fc612211958cb031224c76b0d371d6d78d80a924052b2548022d91f9d5da43ab7b1f0d5259fe9662ae25a9ca43b1dce9d20d9ef07c06462a59fb8fa407fe5e8d6d0a71b5e219c41b6bba36f4af9554c2209da572f9e4366e848648ee42bcf5324b441943c90fdabaa700514ae4ab75fe44a9365fbbcabeccec402a13a7f997297264ef1faae12fe996cde2ef077546db385f436e3584d5a10a9241e2d17ae45f72c16e3ef034e7ff8fa15ef5932dd2e171f4d7a5ce0aeb58c74ac8307de6718994b68d01eb77f88c1640b18957a25632991bb75dda136eb70edaa4ac619c041fb6d3ce506019af7417b716759f849f4f236159a3494d1b8ddee79ba481b1ffe5459dd3518218fb46a0bd4b3614bb3f49ed3bab7c45781d7f669d42f9649b79b222ca988a66e69f0bc03a8af7e83895b4bbf9bfba190bba344d29dc575e2f23ed9b39a6d3f45e03fe5b6651152df651a56a734b14f9ccef613f2f02757e2214c2fefb0113524def4d9327c44edee6e93f1ae6c8942b38f10b1e0972dcb793c0cb7b498a25003f151ef66e8eb2a14a629291ed5cb8e9360d5dfbf2654c8e575b48f0bdd78d533e37b3f9f9f2e52746181f0d75b496e7c067d8a590b58c00b85ff8a0f177e1d772f2245f22fdb14c30fd797d36c9b94a7aa085f3b2d5ce3c5af26bbae36608f37292eb20c31ef3d2712ae141f7a3339ad504368a9f93036a0794ad9c57b866f25ef2555a3c4e20ad167127fc80814d874decaa94fe2340ee28052d52f65ad92206585150f2a5829434260663b3e9ebd1e4b7fe0bd7ccb0ab32f35fd13cfdfa767c4eea0adf7124db8e0c9d21ddf088d860c8f05b35c2c7f82f5d4e068c84e1a1a9fe11adb6e0d5e655faa242a81f063f7796f27a242099292291655f28382293c19ba030c8d4b58e947c92d81a3a062b466a6f19861296b1ffd7d09c03a23fd1ad52781832e714e1e3197ce59530d07289adbc3a41e834a11d78636326b87da6c27b0fd9f6db993875b6a3a2d75133ab963fdf648a36a4abe45a6fde6d55739a7a643652d5a1dd4482362bcafe519b8cc9139c7e62a5f06db7d09ca2af36946782d494d8e89526303de906a174fd8770ddb6b99f226dcc061f9f05de89816dc57fda03eb46877be2445b9e49095435ec90be672cf49e071f9954ddda31034a048058ceb6214c6c344a8217c02adf474792092cd1a684f3d5db73513af52f73a1d3a668aea76cd68338794b8ab208c95abe2964afefaf44705f071c6cdb3286eddf83572c051c09d2bed64d5e1ee3522d4ef6e9ca0d1f33e5b28118cc7fee2f652e45c5d56a9b3f8c03a44143e8179c0bc00e92a81aa76536f5a51877e7a9821d62d640e3fe90c71b8a5c93492cbbe4b697ce99194bd3922df84032ed2cfc5173c0b5364df33cd7ef0e77ec5c3a253faaa7d85f29b7212f359fcb27e8a28ca5dac37d0c967147cc3685d6de1256461d54cf5b7a258d7596de903589f81955d5f9630115dc9cd4bafc04991d3ba743cce86505cdb5c114c3d6d5af1681af1248a77f7cde2a4ae77178497a95d47e659e1f09b6e26e4924b673c9f71f6f7890d2a53ae7636920c6320947026fd2bc42b7c18e7d3b67d2e75aff8866cb42e48b2bcfb20f79575572437997666ad056c6036ba5de8e2ef9b5c73bc61ea8895c195ace7b3800c83c31fac1f14fa3f5bc07c68f2d1fa1fb9732946fea51abcec8cab84609d2bc4888ef8dba3198e8c197eee9fab45551650398b9e9adefbcbb814e4fa55138fe61ee016126aa8b194c28322898dd30cebc608aeed6c6df13efff79f7ecfc20f09110cb02134f1bb1bd1972fe2e877fb74e7fa6e8e9aee93a04cbd3ece0d0de34710026ad0c9534d860494c016c3942669f1241809e5674778a911bdd474c9c58a3579f58460c007a14d34b9e11ba1cfb41d03b552849e61c450a12cc20f49d8fcb037054f35dcf99936c0000af5cf38786d6eccc51a94ce1f9532907379b916981ef4dca9f5a27afd5971978bc8e193b6ef55c91ddcd75419cd4a1cb83c37395af7b65ea12beddded269a360ecd8a80aa64c2f07d634438a982530a89a3696ce49676eb6cce835db5dd79124766f6e82acf8cd60edc24d04c3f31edbc87d0b8256820d6a78c0fa4ddb9fd47c9d9b3a030c8021e614a8c257983b579857dda3053958a017f17a0723fc079b85b8fb8fc80a397602f8b9689398669c906105c863b5df46c27346423267bfaf8a84ae69f880449254a54cc721045d9ac0c2216f8f5adce9308e1542d1b2afd0c5851facc50fc486d4f81234e91ca07825628ec7b36c889c71dbff27f9728b28679b7b6fc21c409a4fe429e6c7b2e942fa63b072cf235a91e9d0ebc688883c20126c3c69462a95b223a04e70a85fe7dfc0f7396d44865567d5db576349bf0172c1d43aa6e2ded331d9b30add4d57623b499bd43b112a6c7e384ed9a41547dbdcf1361871fda030c26d3f32b378c0e80261d786e9c5d71e3c47f8542c1e5b8af68980a70b3a7b0b4a4830966884a9f4f9a3f8d69b033f3d7be2d8644bb714a002e7c5777f9f9c6cec0f014325d5ebc7bfe18f8ab8d751fac7313390a1292a86509644b6562d674d98306f6203fdb4b50e54dbbdadcae681a6b9fe316614493785329ef2ef2cf0e4cbc0f66d2932d02ca7bdc2a6103ed6dbc79a2414c3f1038e9fa7ade145153213718620c43a2cc4467808377ab0e0c243eda6e419014610ffeaae33a51712e265da2f3f45635019a41a685e09940c9dc9eef930a0c9857caa85f17a1434ae14c1ab901fc173a854d2cd92b671c971e64f28253683a370ba5763eaa68e5bc1e81639d0e19bba9d6970e2138dc881f3eceefb62c866e2880fda61bfeff1c257bb33af19146d95c9f2fc557a4df43cbab5e1f65c070e753bed4d55e57ba0e042506e4551171ceee4dc44499c1d5b45c8070b22b8f7371f83ac7cec3651fe0d64d01e5bb4f38195651c486218135038acaf74b710f169b0de9c8832acf016c0b94b0868bb61c088ff4fa1cfdc1042f7298490fbbd3afe9125396cb25fb9516e1b774cdebf538ca75c589f1f00ac7545fbf478d5e5cd62f6a1ec73d0fcb6a0733024559793f3ac3a06a3aabfadcfa33571efcb95694482161600ea6aa0870acfa4d0249ee60b658ae525f4d0e78042c7a137b133868f47bae6347d3a690d2533e6b1809f0d4e1d4a5559fc51c79b185e7e1c79ff0abca82343da8a824f50f60fac889f119bb1390f4170ee9b59f85c3549ad22098a7078b754ca64be29b4f3d61b8ee6baa966e45ccc9d2896f0b9b6b20aaecea6932abb3135bfb93680b58f59e6f9ca7862ebabafdf6cafdec3bd3ac4e4820c65540820a0f1f013d2e3c01f8ab4b8fabce8a759ee5ad2962b2a828b19fff7c6eb401fad789da0528894538fe19495719ffd0060d47cedf94d42ea7129c0153e7d1250f4b6d1e3a83663b703a3ac488da94448d060aa57fbc8acb9636b5ab2cb0e96c45ac0843d29dd5ea0becf2555ba8b8cd76db5e643a8a72c469749a58097bfc2facf568d74c49b7dc9c657f9b4a938534aca737f2dac8571e4bd05f62a9f26842650635b5544aa856db22a41e4f7a83f4f1ff93de7f4f2e158e402ad757798423c7abe8bebf5e0166d2d0b4a0a59b3284ce4210c2698f7749b7e65bc6bb60cf12d0954172401133c7f14789a21e89f882fe5599ba6a1ccc349368245d4f52c41c8cd33bebacd6ecdb57f92801732257ac29de992ed458e1fd8fcda3f95af56c3f71c94dba7277ba6cb62ce696d3c18025c0e9254e2e9eea6f09957e89fb82997341fe481f9d92f9e40f7d5f9df71f37194e65ad31a45c14ab3efb05220009e9aaef8affd3389a7b8c2791db6621a8670564d5910250d06eda098e754b65177c68b6893ee52f507607eb5b2c0f25e57124fa12caf2c94c548f30ec14c728a8e05b6416b60f2fda93c1258ee2a4bc2321a306056070615f27928a223190c7960edc26536f92751947aec2789d3d2145da4a7c660e47fbcdd605835ce42fb3edf427007cb558961020499ce64163d0ac35b0e775fae1376c8af55de93941321f25c305228332629f11cb958e20be5e691dd7bd80ea3ad5527672aeac840a321bc95f379f2b3f7ab6f4213ae1768265058bda854e932043e18355d7d6d7c38", 0x1000}, {&(0x7f0000000940)="be8e43510e186aa436497f51b3181a1442e4ff5030d79decd905db580545c5fc9134d74ae6ec2981693ea4684ddde945f39c5381935fb42944dc79147d4d5ba51ece", 0x42}], 0x2) preadv(r9, &(0x7f00000017c0), 0x3da, 0x38) 18:47:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/30, 0xffffffffffffff0a}, {&(0x7f00000000c0)=""/137, 0xfe99}], 0x2, 0x0) 18:47:04 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000002940)='/dev/amidi#\x00', 0x3f, 0x40000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x2, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff, 0x12800) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001700)='/dev/video0\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002c40)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002c80)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000002d80)=0xe8) lstat(&(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002ec0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000002e80)='*\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000002f00)='./file0\x00', &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003080)=0x0) getresuid(&(0x7f00000030c0), &(0x7f0000003100)=0x0, &(0x7f0000003140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003180)={0x0, 0x0, 0x0}, &(0x7f00000031c0)=0xc) r13 = accept4$inet(0xffffffffffffff9c, &(0x7f0000003200)={0x2, 0x0, @multicast1}, &(0x7f0000003240)=0x10, 0x0) sendmmsg$unix(r2, &(0x7f0000003380)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="64d55adb0c9c0746af181f1d680b78bd583ed902da53ae59f78402b9d069c88ba7ad8125c065a05e0cb7df3949e40dbe841a61e095cf8e08152f03c4bbce7d1ff43af2a45f6e337c545db4ddc5a4bf9e40d9aa2363e06a1e782a8acf1fd73d461bce3b120cd621104a1deea848e48779339ad6319ea04c4ce6bcb97b42fce207b9784687902f2528e91d8693aaa1eebc5e265245dd565744edede448fb72ef16d4997a4501611785c339b00244c7515c3ed1f7d16f", 0xb5}, {&(0x7f0000000180)="418e2be89b1dae286b55d94852bfb5c0747fc2e4dabd91af0a7b307e7b4b33cf1ed756f513e518f0aa91d8f303ea4a5b86d909461c361de1bb057c3343d0e7eab8cd8f1afe09a686b901e924c33c8b8d3650f3e87eb1d1628fd4e61dd67d55c24e6a8afe71a89a6a4f02c0913dd7ce1e62f32d3629dae6b6bdc9", 0x7a}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001380)=[{&(0x7f00000002c0)="2faebbb514c070c021ae57d9f209727540e98db74d7a94517668382924e78136b377fb647ef75712049f886c082c3f19bd49d39e4201c7f6cac3f853c032a9e96747431a1958e96394a893979b8c74ef802017f0e3a84265f1a6e119bcbf751432bc60b58de653798871f14ede450821d55c081b40b289095c7c7fb3ad447a7620a5121cec6c47beec0fcb0dff66593e347d5d85b3dd3eba7258899920c118c1114b8cb38bf67e", 0xa7}, {&(0x7f0000000380)="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", 0x1000}], 0x2, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x400c044}, {&(0x7f0000001400)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001480)="76583fd25243862e5253936d98055eac8ae33a0cd6ae397fa45af4094a40d94eb496c2bb21f890df72a06a554aad23727cbb76c63248cb4bb8896b7b178a71786449b02c646adc1e8c16dc75f32c69ec8bc312b120301b78f3ffbde4104e50e790800a21faf67fec32d21b94dd341302e774b4caa8b93400345f5d33dbd4865a164b03f372786c52c03e6e8b6c94fc42944bf9b03e668c6bafabf6f93b9c3e65befafb7bc3f55789d05ea6da30534ff793edf8ad2e841801c9e6763d36cbf3e495981a75f137f2", 0xc7}, {&(0x7f0000001580)="dcd68b22181235d08bfa1b857b4e0db08f73483857dcef5bce0d0f1c8f574f363989af84f55f6c5e79056b84021d08ec039b20eae37a2846da8aff938953250e97e252a10f54c816bd06576e90bd9963096ce6cd2f69a95f17fcbd9d2bb3a28fd4e25ee82dd97662963b906b73aae6ab8800e6d1bc95fcca930008d9773faf1f3d45c06a4997a19e06d9be122037aa2cba57a8828fb2fb625d79423e8d6afa4a44286de249c402f29357e10091", 0xad}, {&(0x7f0000001640)="bc17277649813b0f069f6da4997dbbb3c39a5f06c0b5ff099a3c85c453d5bb66641fc9101af138a35ae79dfa20169678076d4ceb205c43f1bc1c006ef6b446e2780bb773f86c766e42b9760d66f83c6f587ac3f9780e65b880464843f69572090bf17d4e887d1001e653110b204a76aabf28be", 0x73}], 0x3, &(0x7f0000001740)=[@rights={{0x28, 0x1, 0x1, [r1, r1, r1, r1, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r1, r3, r1, r1, r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r1, r1, r1]}}], 0x90, 0x801}, {&(0x7f0000001800)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000002880)="4eefbbb3fc254a1ade7d15f3de0ef8de048d722ef5bd110a199694b7064a4806b8ab81998a7010563e7d543d07b148fb573a33ceb79e6e868b26236200cda4780423c41b05b01bcf22ada52c99b329df4209761d800e1fd46fe8c11842219c9cc76b5c7f14decc0f6fc586300bbcf9b97a2e307fcbd5d39c0d5a91bb899f507ee13dd006eb9943642bc9267900b5c26e2fa086ad", 0x94}, {&(0x7f0000002940)}, {&(0x7f0000002980)="49db634c3b92a8956d12bb5aa4bf59462a4a73d919e15323599246c435b1689f7ec0e8ab0c945c02e8f7fb62cdfcb865e8c8921e18850a71dea891623c39de3948277100d7", 0x45}, {&(0x7f0000002a00)="3f1a21d536653f99155431142a6adec9cb9ca2d5e17ad4b85945bba20917e15a5d8393369eca173006e4c6fe0c70435ed82ebe624c19e48674af152b32995b33eac219aea5b6e1b8d0c4271f5da7ef7b8920232a6b1ed31041eae8486f4744aeb6be1b84e9ec49f891e28137a0f82c9c74ab24bb18ddc200179511429ef5f49d206cda646de00b628b8e5fe4a0c58f86e57c", 0x92}, {&(0x7f0000002ac0)="90382933c6142591f59bd09260272f78b4beec826c9c", 0x16}, {&(0x7f0000002b00)="ef1120444b1c9ff76d8c3752343db8487e552f08a86523477dfa9574ab3cae49a5a9443d7cac78c07d153c3dcc8d575042c4ce918817475dc980569d93762c114b63688392065413a8a17cedcc2368d8e2a56b6678dc6875c505c98ed67e611dd94bb0f77e834d3c9acd533c1593c2e217921aad1673ca19a77fd33750a9b69a49c716f2139dff4e7cc33610288a5bd3bf4b3e45e85cf8c23350bd02ff9a0622e7383b91787b67722becdf27", 0xac}], 0x7, &(0x7f0000003280)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x38, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x34, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}, @rights={{0x18, 0x1, 0x1, [r1, r13]}}], 0xe8, 0x1}], 0x4, 0x800) close(r1) 18:47:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1700, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:04 executing program 4: unshare(0x2a020400) pause() r0 = mq_open(&(0x7f00000000c0)='md5e\xb6L\xea\x90`\xb6\xda\xe8\x9a\x9dt~\\\xb1\xdba\xe6\xc7(mi\x99\x88Q\x92y\xf3\x1b@\x00\x00\x00\xea\xf5\a\r\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x5}) mq_timedsend(r0, &(0x7f0000000340)="ac982c370255", 0x6, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000180)=0x2, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffff80, 0x4000) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000100)=r3) 18:47:04 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x9, 0x40000) setsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f00000002c0)=0x7, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000200)="51d36cf2b9b2879a21d76c0f3e9c64168c4274d9b5cd5323ec9356a844099f341d2cf8c728a6063a08915ff3d4ad83a8d3ec29b25af57f841b50bcf488a55b0c9c6def911e8eb77f4f36fea06ba26872fd563336e69dc42d63d319917c910fe0424bcf15f531d41d370121170d7c6dc367bd3b0302b4096c01f30cd6d270425ae49fd04cef0725a2eac689ad12fda62cd92fcb6eaec67cd73bd8d94b3784187a", 0xa0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/30, 0x2f3}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x3ffff) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000180)={0xfffffffffffffc00, 0x8000, 0x80000000, 0x6}) [ 136.952529][T10019] FAT-fs (loop0): bogus number of reserved sectors 18:47:04 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockname(r0, &(0x7f0000000000)=@can, &(0x7f00000000c0)=0x80) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1800, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) [ 137.044342][T10019] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:05 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:05 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f00000013c0)='/dev/dmmidi#\x00', 0xf5, 0x40000) recvfrom$rxrpc(r0, &(0x7f0000001400)=""/109, 0x6d, 0x2000, &(0x7f0000001480)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1900, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:05 executing program 5: r0 = pkey_alloc(0x0, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000000740)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/214, 0xd6}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f0000000240)=""/214, 0xd6}, {&(0x7f0000000340)=""/180, 0xb4}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000480)=""/225, 0xe1}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/60, 0x3c}], 0x8, &(0x7f0000000680)=""/156, 0x9c}, 0x100) r2 = socket$l2tp(0x18, 0x1, 0x1) pkey_free(r0) close(r2) 18:47:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) [ 137.212878][T10066] FAT-fs (loop0): bogus number of reserved sectors [ 137.223145][T10066] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:05 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:05 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f00000000c0)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) [ 137.424641][T10090] FAT-fs (loop0): bogus number of reserved sectors [ 137.449385][T10090] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000015c0)="11dca5055e0bcfec7be070") r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) bind$bt_rfcomm(r3, &(0x7f00000000c0)={0x1f, {0xfff7ffffffffffff, 0x1ff, 0x3}}, 0xa) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) write$sndseq(r3, &(0x7f0000000000)=[{0x401, 0xfffffffff2ae7723, 0x6, 0x10000, @tick=0x101, {0x7, 0xfa}, {0x1, 0x10000}, @note={0xffffffffffff125f, 0x7, 0x446c, 0x5, 0x800}}], 0x30) r4 = gettid() ptrace(0x420f, r4) 18:47:05 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xd3, 0x40) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x14, 0x18, {0x5392848a, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c000}, 0x10) close(r0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000000c0)={0x5}) 18:47:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1a00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:05 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3ff, 0x400) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000280)=""/4096) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:05 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000001, 0xfffffffffffffffe, 0x0, 0x0, 0x15, 0x10, "a1ce7eda1235cd096b91d75774fe54d5a91b39a726af2f83eb33922a0de486f8020fd2e6c29ec48eb6648ee9ab72d2b4f3befb35627f1f778cbc60427c2a900f", "4901bc0558827e28cd573a63f9998d6b95943535d399564a097a1485194bee200ac0786b821e334185c7fd6b0d33187b974ad5188f65d89dff28172aeaf3dadc", "8f5446df5ae3e276a3b91e9fa5526c6c85f38a2bc0879a7bc6c590750c017d43", [0x9, 0x9c0]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="e4515592f3d56acc35efed83970be1de5a173f78e9a7a1543af2e1058e61d88e5419acab6cfbe9db0a78b57dcf85151f4d03736ddcbe3414bb7ccbae45ce010ba137d1132a204d7fca4b5f91a0ee669f6fa92efc90c5f6bf68c2a326f9a0ad80696e642db6e8fca10e7a39486b784479f6ab4ce53fb1c91050e97ebf4a017ad8c9e53824d886992cf1eca923a8b224b761bc93f7718a8fd86ddf23d094b81ee3b677eec3ca637830117898ba1045690f7a4ef3b9d9258fa88de28e50fd27ac7f83fcc7d076de6a2bb05734ce52", 0xcd) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x97, "3e6c1f4d34b5589eb4450c1bcb39c3d0dc9f3d7f3129509555f6e8119ab0f8e36072691f2ef852121647f363a5140f1eeab4de7ada9c057208457e5f503bc787a57bac910a78981b18cad7cbf62846a159ef94b4598f391589f4579922002570e2f50cc102d0446cc76dfd3f32e6a70b517ab15a4a708502b88ad25a8889ee002b3d35877e1859684a7cda59d52032931db0b88581b9c9"}, &(0x7f0000000500)=0x9f) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000540)={r1, @in={{0x2, 0x4e20, @multicast1}}, 0x9, 0x3, 0x7, 0x2, 0x52}, &(0x7f0000000600)=0x98) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)=0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000300)={0x0, 0x7f, "fb22d80e46f70131e54ef58bdc72261de44f043068975c12b5f704197dc4ffa79a00ef733966acbf7a7d9a16ea106436b8f3bea91a2207a87e012db74955d2b1621621e97c30c863b943914e95569d13d519c387f1856f4e40a79b00a4058ef52fd96aaa2c6caf05e361ebafc471f2d6bddd501060573ca034a00eec63f151"}, &(0x7f0000000040)=0x87) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000003c0)={r3, 0x10001, 0xffffffffffffff01, 0x800, 0xffffffffffffff89, 0x3}, &(0x7f0000000400)=0x14) r4 = syz_open_procfs(r2, &(0x7f0000000080)='net/packet\x00') preadv(r4, &(0x7f00000017c0), 0x3da, 0x38) 18:47:05 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1b00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:05 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@broadcast, 0x4e22, 0x0, 0x4e24, 0x6, 0x2, 0x80, 0x80, 0x1d, r1, r2}, {0x1, 0x5, 0x9, 0x3f, 0x101, 0x105, 0x9, 0xffffffffffffff7e}, {0x3, 0xed, 0x7, 0x4}, 0x9, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@remote, 0x4d2, 0x2b}, 0xa, @in=@broadcast, 0x3507, 0x1, 0x0, 0x9, 0x2, 0xaf3, 0x8001}}, 0xe8) r3 = socket$l2tp(0x18, 0x1, 0x1) close(r3) 18:47:05 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x375}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) [ 137.953986][T10113] FAT-fs (loop0): bogus number of reserved sectors [ 137.972937][T10113] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x272) write(r0, &(0x7f0000000100)="2400000052001f0014f9f407000904000200071010000500feffffff0800000000000000", 0x24) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xffffffffffffffc0, 0x10001, 0x5, 0x1f}, 0x10) bind(r0, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e24, 0x101, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}}, 0x80) 18:47:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x1, 0x800) preadv(r1, &(0x7f0000000400), 0x2c, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000280)={{0x1, 0x6, 0xfffffffffffffff8, 0x81, '\x00', 0x8}, 0x5, 0x10000200, 0xfb21, r2, 0x8, 0x5, 'syz1\x00', &(0x7f0000000180)=['eth0[[-\x00', '(security.\x00', 'net/packet\x00', 'net/packet\x00', '\x00', 'GPL(.\x00', 'keyringloGPL@\x00', 'useruser/\x00'], 0x48, [], [0xe3b, 0x8000, 0xbd0e, 0x6]}) 18:47:05 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1c00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:06 executing program 4: r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name, 0x10) sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10, 0x0}, 0x0) 18:47:06 executing program 3: r0 = getpgid(0x0) capget(&(0x7f0000000040)={0x0, r0}, &(0x7f0000000180)={0x3d25, 0x6, 0xfffffffffffffffe, 0x8, 0x9, 0x338}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000000)=""/30, 0xdb}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1_to_hsr\x00'}}, 0x1e) 18:47:06 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0xffffffffffffffff, 0x8, {0x0, 0xf}}, 0x20) 18:47:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@delsa={0x114, 0x11, 0x7ba9c4613115adf9, 0x70bd28, 0x25dfdbfc, {@in6=@local, 0x4d5, 0xa, 0x32}, [@sa={0xe4, 0x6, {{@in=@multicast2, @in6=@local, 0x4e23, 0x3f6, 0x4e22, 0x6, 0x2, 0x0, 0x0, 0x3c, r2, r3}, {@in=@dev={0xac, 0x14, 0x14, 0x22}, 0x4d6, 0x7e}, @in=@multicast2, {0x2, 0x6, 0xffffffff, 0x0, 0x79fc, 0x100000001, 0x9, 0x7}, {0x7, 0x1, 0x81, 0x2}, {0xd8, 0x0, 0x2}, 0x70bd2c, 0x3506, 0x2, 0x1, 0x472, 0x23}}, @replay_thresh={0x8, 0xb, 0xfff}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x1) [ 138.171903][T10147] FAT-fs (loop0): bogus number of reserved sectors [ 138.183244][T10147] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1d00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:06 executing program 4: r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x2000000000000000, @remote, 0x8}, 0xfffffffffffffe63) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") io_setup(0x80000001, &(0x7f0000000080)=0x0) io_getevents(r2, 0x9, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x9, &(0x7f0000000000)={0xfffffffffffffffe}, 0x4) 18:47:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) 18:47:06 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f0000000080)=0x2e7) r3 = syz_open_procfs(r1, &(0x7f0000000040)='net/pa\x00\x00et\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r2}) 18:47:06 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:06 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x121000) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x4e24, @rand_addr=0x6000000000000}}) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000ef986b9c7a000000bcab6a6fba09bdbf5d7da23fd0000000000000", @ANYRES16=r2, @ANYBLOB="000827bd7000fddbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close(r1) 18:47:06 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) fsync(r0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1e00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:06 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$caif_seqpacket(0x25, 0x5, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000280)='\xfc2/J\x94\xba \xe1\x9f\xea\xbbyh#\xf53\x898R\x93\xe1\x06\xd8GZ\xc5\xfe\x7f\t\xeb\x05\xa5\xc7\xf9\x9a\x89\xc8\xf6\x84\xe5\x8d\x12\xa4\x9e\xfc\x8d\x9cm/\xd7n\xfeoR\xda\x1c\x06\x8b\xb2\xad\xfa\x193\xf90\x86B\x1a\xf9\xd8>Ed\xd7\x19\x9c\x9a\xe2\x8d\xe4(=\xbb{&\'5\xf0\xe9\x83.5v\xb5\xbed\x17\xea') ioctl$KVM_DEASSIGN_DEV_IRQ(r2, 0x4040ae75, &(0x7f0000000080)={0x9, 0xffffffff, 0x7fffffff, 0x400}) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:06 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000300)='/dev/bus/usb/00#/00#\x00', 0x13, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x15, 0x4a, &(0x7f0000000000)="3d1cfb9dd5eb12dfae669a1e183c4f25edb5e1fb50da66632433a95859e8615f8bb751b2d5e28181349906664a12d33fe30d8cca8e43924899d1e00989f69dcb72508027dc19cd169161"}) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x31a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, 0x0) 18:47:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="400000000000000006000000000000000600000000000000", @ANYRES32=r0, @ANYBLOB="00000000b020000000240000000000000000000000000000009f004f", @ANYRES32=r0, @ANYBLOB="00000000000000000000000300"/28, @ANYRES32=r0, @ANYBLOB="00000000f8ffffffffffffff00"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00hL\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00@\x00'/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28]) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0x110, 0x110, 0x110, 0x0, 0x110, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, &(0x7f0000000000), {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x16}, 0xff, 0xffffffff, 'veth1_to_bridge\x00', 'veth0_to_bond\x00', {}, {}, 0x1, 0x2, 0x4}, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0xfffffffffffffe01, 0xe60, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0xe}, 0xffffffff, 0xff, 'team_slave_1\x00', 'rose0\x00', {0xff}, {0xff}, 0x11, 0x0, 0x2}, 0x0, 0x98, 0xe0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x4, 0x4, 'snmp\x00', 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20\x00', 0x90000, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000480)={{0x2, 0x4e23, @empty}, {0x1, @broadcast}, 0x0, {0x2, 0x4e20, @multicast1}, 'team_slave_1\x00'}) 18:47:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1f00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:06 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0}, &(0x7f0000000680)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000bd7000fedbdf0300000000000000c374fd7d108c090000000100", @ANYRES32=r1, @ANYBLOB="f2ff0b00ffff0b000f00070008000100636273001c000200180001002800000004000000090000000900000000800000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x200040c0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) write$vhci(r0, &(0x7f0000000180)=@HCI_VENDOR_PKT, 0x293) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) fsync(r2) [ 138.560001][T10192] FAT-fs (loop0): bogus number of reserved sectors [ 138.613654][T10192] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x200000) close(r0) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x803, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x6, @media='udp\x00'}}}, ["", ""]}, 0x68}}, 0x40000) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'bcsh0\x00', 0x7}) 18:47:06 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x8, 0x4) preadv(r0, &(0x7f0000000240), 0x0, 0x0) 18:47:06 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:06 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2100, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 138.814403][T10230] FAT-fs (loop0): bogus number of reserved sectors 18:47:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) 18:47:06 executing program 3: openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x8000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x20000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) [ 138.907014][T10230] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1f00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2200, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:07 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400000, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4) 18:47:07 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x400000000000275, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xfb8e57ccd9bb3705, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000001240)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/packet\x00') openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) preadv(r3, &(0x7f00000017c0), 0x3da, 0x38) io_setup(0x5, &(0x7f0000001280)=0x0) io_submit(r4, 0x3, &(0x7f0000001200)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x401, r3, &(0x7f00000000c0)="8fe67f8c512d64ad21df203adcc2a5aa70dc9c08f3b621a072bbc430579c5c9d8eda1c6dd218d3002736c0260a7fbc7f27a0", 0x32, 0x3f, 0x0, 0x0, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xb, 0xd1eb, r0, &(0x7f0000000140)="a8dc6109782c", 0x6, 0x8, 0x0, 0x3, r0}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x5, 0x4d8, r3, &(0x7f00000001c0)="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", 0x1000, 0xffffffffffffff1b, 0x0, 0x0, 0xffffffffffffff9c}]) 18:47:07 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r0, 0x8040ae9f, &(0x7f0000000040)) 18:47:07 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x8200000000000000, 0x6}) 18:47:07 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x84, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x10001, @rand_addr="0dc695bd346a7cbf1cd1b804e20f9f10", 0x100000000}, @in6={0xa, 0x4e22, 0x9d0, @rand_addr="28ea2dd8f36ef6debc93054774a4b045", 0x80000000}, @in6={0xa, 0x4e24, 0x1, @local, 0x58}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e24, @rand_addr=0x1d}]}, &(0x7f00000000c0)=0x10) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x400080) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="f3000000869556d1e10501650ccfa26cb4ad6e4fce06db1a9db23336d7a8d0e6da1d5c5a2fa83e8e3485280f0dcffe577f8bbc8d4a8adbdbcef4de50a35e3d777fc7bfc2b60171bdc8c9e161ab1abb00b2eed9941be6bb399d5adc2d0988d2a43b5c32f930d188873abf1c3b65208fe9ef9d3a4779f4e3b4ba0ecad461c5685c575ff2bfcb0d078d0ac8ab4a26f9ee0f53c6f60ec41101d8e3f45bedc2a54bb725ea76bda393f58a5cdb76185d618b3917cf7256fc5259294fe5a0e4985d050cad545889fc15097d31cdb42f93d44b06f31da2bfc01a24d81a69fc3af0dba646604ba84d0ac1fa1bdc00ec58f0a07d2d7fbb6b8567f1ab"], &(0x7f0000000380)=0xfb) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x81, 0x1}, &(0x7f00000004c0)=0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={0x0, 0x5, 0x9}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0xd, &(0x7f0000000500)={r2}, 0xffffffd8) [ 139.502123][T10271] FAT-fs (loop0): bogus number of reserved sectors [ 139.517001][T10271] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:07 executing program 3: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r1, 0x2) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2300, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:07 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:07 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000000c0)=""/181) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:07 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e21, @empty}, {0x2, 0x4e22, @broadcast}, 0x42, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000040)='ip6gretap0\x00', 0x0, 0x9, 0x400}) close(r0) 18:47:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) 18:47:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$vnet(r2, &(0x7f0000001280)={0x1, {&(0x7f0000000180)=""/222, 0xde, &(0x7f0000000280)=""/4096, 0x3, 0x4}}, 0x68) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffbffffd, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001300)={0x1d8, 0x3, 0x2, "00840fc9252f3fed0b7d0b7c47544ed2f92be524251db49ab4562964e1100d6f", 0x44495658}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xfffffffffffffed7) [ 139.750732][T10307] FAT-fs (loop0): bogus number of reserved sectors [ 139.782708][T10307] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2400, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:07 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') sendmsg$sock(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="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", 0xfd}, {&(0x7f0000000000)="66132344964719dbc42132c33304cfd02cedfd1cdf414442665954a861a287eb73a20ae350901b599ad8111903272addbe17dfb6221b62f0a57d2fd8740010009c1f0f36d349f7a296d4bf31b8d4f52971ac42744a91c5d2db8c769e9a71f14b23cb8a6f1f0bbc1758decc33eddffb65b7227dfd3558d217f524b21d", 0x7c}, {&(0x7f00000001c0)="344bf0fd8798e1a50dcd32555cf3a1da1f8eb20470fa212b649311c40d00f5d4fca06e5776e45f197bd2f5b39792e39a1d93d2b16b5082b75d0df64ad42a2e77b64cb3fff63552bc250c8da79ba783088c746b4106763174dc4a71d67bf219d30c3e201a7bc51ada512f3dc18b367e93a0aebd7641863145864cdb27ec2256c32a33b281681700fb8ff2d33792b9482da312e3dc928346065e", 0x99}, {&(0x7f0000000280)="f6d219744931b7f1bb402c4af02f979378bcf7c31544fa3e095b0fd65f591dc04cc8bd3e850218c0081b580f8a137bf14fe92affd2c9a2202fb177d81f583dfe257760d1dcdbf9426a1e147b861c885de4891c7b1f79361fbce2f8656855f9c5bad74996ed160a8d7dc86823c82fd5e3301cc91df5656f27397d3e256d32c8bb6bd6430199f1c7f7b0350a5d4e8c76f5e13f8af1d9909c58c5abebe5f836f5fb20495f7499dca47420dfd944e644ffe7f8a9f2cbf216808fb474e884accc77a8e5d8a93b914bfd22bcb9dfda17caf447ba248967cd2617a9b79249ff52058997da2e845cbdb465db10f786c3f9", 0xed}], 0x4, &(0x7f00000003c0)=[@txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x946}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x60}, 0x40) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:07 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x101000, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:07 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) fcntl$setsig(r0, 0xa, 0x41) 18:47:07 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2500, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:07 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xffffffffffffffd8, 0x0}, 0x4}], 0x16a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={{0x800, 0x8001, 0x8, 0x1d1, 0x69, 0x28}}) shutdown(r0, 0x0) uname(&(0x7f00000000c0)=""/215) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10000, 0x4) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f00000001c0)="f0390bf61cc784422616e21308279619f551df21d49b86b2c9ca444f6d1cdde5446e288f0248b0f885083c7e8d8d16acc5d247b82129bdc8a2f08f66d12c92afe4d0ef79c25b85606f73375f23b3a8d4ef95896da067a4c5d5eeaf27499cf7fd8bac6315056359a6ba25e66bef099c2175e6ec69ffac7fb0ca258c363f883b38a065d4b62ba6421ed97ffbeb0a22b542f3e05b699f778d229ab849c27f6afd7c29b5c72d81d34b9e9062b5bb94574ef55387", &(0x7f0000000280)="edb74a264ce9ff8d7480235dab1d02b3db862087296dc4fedc08a8b56d4437ad97823100935c36a457725a9339f9401671d411a8486c899d5956bc81f9c138e79eadcd50504cc4d8ed7035cf59379cbd00339732db3649d769139c7b200eef273990a1388c860a4c8665bb8727199b8daadf874cbb913b00a2263b34d0e41e7041d2a1d216a495433879fca5fbc743d96a8932627e940486b106d79528cfd6716c4e505385f4c614979b2c81bc0c31537811e05720ebd1e3037cd21456a1abd029edc074e03c902282539c747b7084432d31dc6d7e8b6747370ffe32cf53050d145f6aa339ac794123", 0x6}, 0x20) 18:47:07 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:07 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$vnet(r2, &(0x7f0000001280)={0x1, {&(0x7f0000000180)=""/222, 0xde, &(0x7f0000000280)=""/4096, 0x3, 0x4}}, 0x68) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffbffffd, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001300)={0x1d8, 0x3, 0x2, "00840fc9252f3fed0b7d0b7c47544ed2f92be524251db49ab4562964e1100d6f", 0x44495658}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xfffffffffffffed7) [ 140.049490][T10338] FAT-fs (loop0): bogus number of reserved sectors [ 140.073400][T10338] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:08 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80000, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x10, 0x0, 0x4}}, 0x14) 18:47:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2600, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:08 executing program 3: getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') r1 = gettid() setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10) recvmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000480)=@tipc, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000000580)=""/5, 0x5}], 0x2}, 0x40) process_vm_writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/84, 0x54}, {&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000140)=""/250, 0xfa}, {&(0x7f0000000240)=""/123, 0x7b}], 0x4, &(0x7f0000000400)=[{&(0x7f0000000300)=""/238, 0xee}], 0x1, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) sendto$unix(r0, &(0x7f0000000640)="11d4653425ebc23511bf4a659f025aec37d2f7f970946c65c17ebc4758665a5b4d012c06cffb4677ca18130ecd764bfa93eecd7c419c03730ed4f9afc272a8b77731af0d139f7d3a7cfef02ddaaf4e5e1ed835affe63f610a11feb9df6ae75673699fdeeaab1907d61dee0cdd92bdaaa9b7059edc1e8c0403ce5a3f3802272c9b05ec91e392f196fbc3491ae00f6d3ccfce45c94dae6f3cf224815609375ceddda99cf2ce9f8dcd3c62785822f2294f614a7450d7f04a50cd37c449c", 0xbc, 0x4000000, &(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 18:47:08 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2700, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:08 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) 18:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'raw\x00'}, &(0x7f0000000040)=0x54) 18:47:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x200000000011, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000000)) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @rose, @default, @netrom, @null, @null, @netrom, @netrom]}, &(0x7f0000000040)=0x48) 18:47:08 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) close(r0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x6) [ 140.433237][T10380] FAT-fs (loop0): bogus number of reserved sectors [ 140.451075][T10380] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x100) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="78298e80710b2f85e3de1e94661c8c27d3fe1efc3547bc985c90c2f8033c099d7e496fd67118bcf16172e12a9567b09fc29ade161f9046252e97e601ee41e683546638b897fc6b8bac6178953cd670fc14fc1c91245a55e5c622f4886d45a1029735d41537ff0dfc3733585261016b0e9ab17c1c9ef8ba81afe4c854d1a1ad66c7167998", 0x84}, {&(0x7f0000000200)="fe940f79b5e2e58b48895118fbad7f4d6e89886f1b93db704a5777726c5c15a627ccd1245fde0d64c28344ebff50f7af29a69ad19cfddd1ff9876dc3eebca6db7538132aa9dd503107c64a07b3baf670994eef442b3fbf6b9255ffe30930054b5af6ddd1bc4d911be1694d663457f30083b0bd297b4ed2761515", 0x7a}, {&(0x7f0000000280)="53ac76cfe2f2214c6dfa70c1a63e2063446b7d703ee9ee90b5e8c7d6e3809c8066273f2a47124dd4cc69702f89407e8095bc", 0x32}, {&(0x7f00000002c0)="bb5e18fc8c6021342f00a095dcd79f8b88f333021b47b57e9bde03d1aa0b3802f85c0c840953b29918702b661e0918586fd96cba1d53b5a214705114272de8ab8691762b97b0697291c21e3c8a96b030244bfeedcf9058185893da76c1c5542a6eba15253cd34d314a9255e15073cd90fc51207a5df9a97971e62ea0eec4a71da09e21443ba13ea977130d476658439f7577ac35cc0a08f163418a1642290a98cd0a3e51225eb10c6b56db30ff93379389468f7806c3459146eb746d2aa14011d63177d9d905619b9a4b58d76c3a31b1130e8e59256ea59b4ad0d5836c2581940bd302f66ca85b59f1badf6589383b508851b3", 0xf3}, {&(0x7f00000003c0)="c115f2b5b356bb07efe31d14f3e52e442579d2aed09309e2691d7d3fb915cc61633b7f09aa99c231a12af176abb7a99fc0df0d1b4f0e0130ee17208cc329113026b0b714a57222b666a91a68dda8c4bad2ff11eae269d0198e5a8db026dedb36730450a7e2ae82afc44816253a3fd352e4bf50112bd7e24d72b6a304f7ec9539e8494edcb6b0373539ef8584be661c6091df4e861d2eaeeafcda76f3ff22af4a3cef2694b20601e8072768c9494ee333d21e6bfc22829140bd1a1182ed24dc6be703", 0xc2}], 0x5, &(0x7f0000000540)=[{0xa0, 0x11f, 0x81, "14526d12353610853d9b89a686999c4f8796e1cb83af0b6b781ff5135f388c7b5ee25e95beb4b05327746ea661a474d6d522872b94b3917328ff17c0f8fce5b9a115fdccb5d962840110ae72df0706c4948c932647f88d8c8be1765c85b15d560f9213934b3ee3a6286a45fe00715fba8c716ed706b142abf0e714a74d377bcdb24cfd78f6ef354619f3"}, {0xc0, 0x119, 0x8001, "b33efd6aa304f03dbe85223a4d3b4a28558789d1809e54e2d6e21b4f6a13af89003f47d200ba7a42d4ba508da9c8f23fdbb9d202a64fa09a455b9696826cec1e96d219bccdb144d03c9db2192b7266b618de3c4b2ab24673e347e56b2cd527a729f72a9c32957a4854cd4afe1910231f386492cb8ca33254374fbc700eb0577a4c267b4500ba94e103a8ca3656432fe5d87681115955ea4ecea5697a2ba0fd06d3b1d980dafd3cd473690cb6"}], 0x160}, 0x0) fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') preadv(r2, &(0x7f00000017c0), 0x3da, 0x38) 18:47:08 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$vnet(r2, &(0x7f0000001280)={0x1, {&(0x7f0000000180)=""/222, 0xde, &(0x7f0000000280)=""/4096, 0x3, 0x4}}, 0x68) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffbffffd, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001300)={0x1d8, 0x3, 0x2, "00840fc9252f3fed0b7d0b7c47544ed2f92be524251db49ab4562964e1100d6f", 0x44495658}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xfffffffffffffed7) 18:47:08 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xd, &(0x7f0000000280)='/dev/dmmidi#\x00'}, 0x30) syz_open_procfs(r0, &(0x7f0000000300)='net/l2cap\x00') r1 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x4ae3, 0x400000) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000200)={0x3, 0xffffffffffff3129}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='io\x00') ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000180)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2900, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:08 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) fsopen(&(0x7f0000000040)='ufs\x00', 0x1) close(r0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000004200)="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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000001040)={0x3, 0x101, 0x0, 0x8, 0x4000000000000}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x80000000) 18:47:08 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 140.758220][T10419] FAT-fs (loop0): bogus number of reserved sectors [ 140.776396][T10419] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') socket$inet6_udp(0xa, 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:08 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x18280, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(r0) getdents64(r1, &(0x7f0000000040)=""/229, 0xe5) arch_prctl$ARCH_SET_GS(0x1001, 0xffff) 18:47:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2a00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') r1 = request_key(&(0x7f0000000200)='syzkaller\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='net/packet\x00', 0xffffffffffffffff) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000300)={0x33, 0x1c, 0x1, 0x1b, 0x3, 0xfff, 0x6, 0x141, 0xffffffffffffffff}) request_key(&(0x7f0000000040)='cifs.idmap\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)=']+md5sum\x00', r1) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:08 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:08 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0x10000, 0xffffffffffffffc0, 0x4d13}) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2b00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 141.010186][T10451] FAT-fs (loop0): bogus number of reserved sectors [ 141.139683][T10451] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$vnet(r2, &(0x7f0000001280)={0x1, {&(0x7f0000000180)=""/222, 0xde, &(0x7f0000000280)=""/4096, 0x3, 0x4}}, 0x68) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffbffffd, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000001300)={0x1d8, 0x3, 0x2, "00840fc9252f3fed0b7d0b7c47544ed2f92be524251db49ab4562964e1100d6f", 0x44495658}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) sendto$inet(r3, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0xfffffffffffffed7) 18:47:09 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x4000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f0000000100)={0x1, {0x0, 0x1c9c380}, 0x4, 0x5}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x20301, 0x8) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x77d, &(0x7f0000000080)=0x4) faccessat(r2, &(0x7f0000000140)='./file0/file0\x00', 0x100, 0x400) 18:47:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') connect$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x7f, 0x0, 0xc, 0x2, 0x1, 0xfe}}, 0x8) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:09 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/78, 0x4e}, {&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000200)=""/199, 0xc7}], 0x10000000000001cb, 0x38) 18:47:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2c00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:09 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:09 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x7f, 0x3, 0x2000}, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') sysfs$2(0x2, 0x4, &(0x7f0000000180)=""/185) preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) ioctl$TIOCCONS(r1, 0x541d) ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000140)={0x400000000000000, 0x1}) 18:47:09 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2000000000040000, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x0, 0x70, 0x5f8, 0x2, 0x4, 0x80eb, 0x0, 0xffffffffffffff68, 0x80400, 0x0, 0xad, 0x5, 0x7, 0x8, 0x200, 0xffffffffffffff80, 0x7ff, 0x0, 0x80000000, 0x5, 0x0, 0x6, 0x3, 0x6, 0x4, 0x5, 0x4, 0x9, 0x6, 0x80000001, 0x6, 0x8970, 0xffffffff, 0x1, 0x7fff, 0x9, 0x0, 0x2, 0x0, 0x8000, 0x2, @perf_config_ext={0xe05d, 0x7f}, 0x2, 0x90, 0x0, 0x8, 0x4, 0x200, 0x3}) close(r0) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f00000000c0)=0x100, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r2, @ANYBLOB="00062bbd7000fcdbdf250900000054000300080004000080000014000600c64a245bad2baeadf3f37858af15f29c080007004e2400000800010000000000080004003f000000080007004e20000014000600fe80000000000000000000000000001108000500010000000800050000000000"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 18:47:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2d00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:09 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000340), 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000002c0)=0x15, 0xffffffffffffff23) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000380)=0x3, &(0x7f00000003c0)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000024c0)={r1, &(0x7f00000004c0)="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", &(0x7f00000014c0)="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", 0x2}, 0x20) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) r2 = dup(0xffffffffffffff9c) syz_open_dev$video4linux(&(0x7f0000002600)='/dev/v4l-subdev#\x00', 0x4, 0x200400) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x100000000, 0x7}) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0x3, 0x77735247, 0x3, @discrete={0x26e, 0x6}}) fcntl$getownex(r1, 0x10, &(0x7f0000000480)={0x0, 0x0}) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x9, 0x80000001, 0x0, 0xfe10, 0x0, 0x0, 0x40008, 0xd, 0x63, 0x0, 0x101, 0x8f8f, 0xffffffffffffb970, 0x2, 0xff, 0x9, 0x401, 0x101, 0xab, 0x1, 0x81, 0x4, 0x7, 0xb9, 0x8ecb, 0x1, 0x8, 0xffffffff00000000, 0x1ff, 0x1ff, 0x4, 0x7, 0x1, 0x2fd3edb3, 0x7, 0x8, 0x0, 0x6, 0x0, @perf_config_ext={0xfffffffffffffe00}, 0x400, 0x7, 0x1, 0x4, 0x0, 0x20, 0xfffffffffffffff9}, r3, 0x5, 0xffffffffffffff9c, 0xb) recvfrom$inet(r2, &(0x7f0000002500)=""/179, 0xb3, 0x2100, &(0x7f00000025c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fchmod(r2, 0x101) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000180)="654a237bf89c03f67e1bd158960905c86ea35ecc7041ca65da68c55f0a2b9bc2ba0eb02a54319429323f14ae31bca0e5fbbb745a9a5ad1e88fb382fbc52fd2ad378e578fcd49c2e8a7f7c29653e9699e68c61a05c6ad430ffa23d56ba79b642d1b2fb3b5eb0fd2ff3e8d9c83f658e2337288983d330fee296e32fd034f3bf34254f509d6dd7a0c62754bb28c292aaaf6bfcbcd4d3bcd5df8fb8833") [ 141.492702][T10503] FAT-fs (loop0): bogus number of reserved sectors [ 141.555655][T10503] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:09 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x400, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp\x00') r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5045e0bcfec7be070") preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000140)=""/104, 0x68}], 0x1, 0x4e) r3 = socket$l2tp(0x18, 0x1, 0x1) close(r3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) r4 = dup3(r3, r3, 0x80000) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000000)) 18:47:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2e00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)='\x00', 0x0, r0) 18:47:09 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2f00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:09 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) write$P9_RVERSION(r0, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x101, 0x8, '9P2000.L'}, 0x15) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, 0x0, &(0x7f0000000100)=0x5f) 18:47:09 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x800, 0x70bd25, 0x25dfdbfb, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0xfffffffffffffff8, 0x5, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x44) 18:47:09 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0x6, 0x0) sendto$rose(r0, &(0x7f0000001480)="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", 0x1000, 0x810, &(0x7f0000000480)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000300), &(0x7f0000000200)=0x68) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0x7, 0x7f, 0x7, 0x2, 0x3, r3}) r4 = semget(0x2, 0x2, 0x408) semctl$GETZCNT(r4, 0x1, 0xf, &(0x7f0000000380)=""/185) preadv(r2, &(0x7f00000017c0), 0x3da, 0x38) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x401, 0x1}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="070041cad2f04427e5d423a25cc4bc2a25dc2db5acdcf9030007007f00000072f50f43ba2f4bd26de5f5f06ed67339b14c1dc813ba171476928216fe465a8cfebd9b0a65999223ba986ba68d2a3c3a466950fba8ee5574a83921"], &(0x7f0000000240)=0xe) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 18:47:09 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x3) preadv(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f00000003c0)=""/189, 0xbd}, {&(0x7f0000000500)=""/56, 0x38}], 0x5, 0x38) 18:47:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) mount$9p_tcp(&(0x7f0000000200)='127.0.0.1\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x1010840, &(0x7f00000004c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@version_u='version=9p2000.u'}, {@nodevmap='nodevmap'}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_lt={'uid<', r1}}, {@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'net/packet\x00'}}]}}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000580)={0x0, r0, 0xffffffffffffffea, 0x5, 0x0, 0x6eed}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x20}}}, [0x4, 0x7fff, 0x3ff, 0x0, 0x100, 0x80000001, 0x100, 0xffffffff, 0x6, 0x1, 0x800, 0x101, 0x3, 0x100, 0x401]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r2, 0x6c8d, 0x7, [0x7, 0x7, 0x20, 0x7, 0x20, 0x10000, 0x7]}, &(0x7f00000001c0)=0x16) 18:47:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 141.880455][T10539] FAT-fs (loop0): bogus number of reserved sectors [ 141.906546][T10539] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:09 executing program 5: io_setup(0x0, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x3, 0x2, &(0x7f0000000280)=[{}, {}], &(0x7f00000002c0)={0x77359400}, &(0x7f0000000100)={&(0x7f00000000c0)={0x9}, 0x8}) accept$alg(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200002) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x10001, 0x800}) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000300)={0x80000001, r3, 0x10000, 0x6b3}) openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x90100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000180)={0xf, 0x1ff, 0x9, 0x4000, 0xffffffffffffff9c}) r5 = fcntl$dupfd(r1, 0x406, r4) pipe2(&(0x7f00000001c0), 0x800) close(r5) 18:47:09 executing program 4: fstatfs(0xffffffffffffffff, &(0x7f0000000140)=""/210) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000280)=""/184) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) unshare(0x24020400) close(0xffffffffffffffff) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x105400) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r2, 0x0, 0xc, &(0x7f00000003c0)='/dev/amidi#\x00'}, 0x30) perf_event_open(&(0x7f0000000340)={0x7, 0x70, 0x9, 0x6, 0x2, 0x9, 0x0, 0x3, 0x84, 0xf, 0x370, 0x100000001, 0x3f, 0xffffffffffffff00, 0x2ad, 0x7, 0x8, 0xf59f, 0x1000, 0x1, 0x10001, 0x9, 0x40, 0x81, 0x81, 0xffff, 0x4, 0x8, 0x10000, 0x6, 0xc709, 0x80000000, 0x7, 0x6, 0x1, 0xaa0, 0x10001, 0xfa0, 0x0, 0x5, 0x6, @perf_bp={&(0x7f0000000040), 0x3}, 0x400, 0x100000000, 0x669e, 0xf, 0x0, 0x70000, 0x2}, r3, 0x1, r2, 0x8) futimesat(r2, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}]}) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000440)={0x2af, 0x2cf2, 0x401, 0x9, 0x6, 0xff}) 18:47:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3100, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:09 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) [ 142.128292][T10572] FAT-fs (loop0): invalid media value (0x00) [ 142.153880][T10572] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:10 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x171, 0x1811c0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000140)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="c0dca5055e0bcfec7be070") r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000a0000000000000000000000000000000000000000000001000000000000000000000000000000040000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000020000009801ff983501bc9eb87b250aaf09f7aec82cd927fdc8be7f0f0b0808bb2006b85a3a6297ebd59bca20d7967801b91de7b8320ca0b1c8942c901c45dc9488b2c633af40eb19907d3cbb35d19b717ad5396890809f59118a238a"], 0x90) 18:47:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3200, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:10 executing program 5: close(0xffffffffffffffff) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f00000000c0)={@mcast2, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0x17}, 0x4e24, 0x0, 0x4e20, 0x6, 0x2, 0x80, 0x80, 0x62, r1, r2}, {0x0, 0x4c, 0x6, 0x0, 0x2, 0x7ff, 0x1, 0x101}, {0x1e6, 0x7, 0x10000, 0x4}, 0x1, 0x0, 0x2, 0x0, 0x1, 0x2}, {{@in6=@local, 0x4d2, 0xff}, 0x2, @in6=@rand_addr="ab3744215df76efbeccc9ef6f17c27d5", 0x3505, 0x2, 0x3, 0x3, 0x1, 0x401, 0x7d4f}}, 0xe8) 18:47:10 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x400}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 18:47:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') prctl$PR_SET_KEEPCAPS(0x8, 0x0) dup3(r0, r0, 0x80000) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000015c0)={{0x8, @rand_addr=0x797c00000000000, 0x4e20, 0x1, 'rr\x00', 0x30, 0x8, 0x7c}, {@loopback, 0x4e24, 0x2001, 0x8, 0x2, 0x2}}, 0x44) write$binfmt_elf64(r0, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x0, 0x101, 0x3830a5d1, 0x1, 0x0, 0x3e, 0x7, 0x191, 0x40, 0xfe, 0x8001, 0x6, 0x38, 0x1, 0x1, 0x3, 0x400}, [{0x2, 0x8, 0xa5, 0xffffffff80000000, 0x501d, 0x7, 0x5, 0x1}], "8e1494f1c0d43d9e9ddecd5d4cf07710af8c92befa3cb292f948db824e5cb59956640e2e3d33629f6bf71adc8a756291ebb0b1f19516956ccd3704c6544680c6cf74fda96ba2672f0f346d297c0a8358276a773b37786317c35cc5656b852b3565b3b01351d7ddaec33bbbd56ea506945213f823b1d45a9994408c04b6df3be9476152f10c2ec1ac3218132e005a2802d17115cfbd3123d6499b7f66c7ac1329f07cf719a58a83961b1c", [[], [], [], [], [], [], []]}, 0x822) preadv(r0, &(0x7f0000001540)=[{&(0x7f00000000c0)=""/201, 0xc9}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/184, 0xb8}, {&(0x7f0000000000)=""/120, 0x78}, {&(0x7f0000001640)=""/200, 0xc8}, {&(0x7f0000001380)=""/136, 0x88}, {&(0x7f0000001440)=""/243, 0xf3}], 0x7, 0x0) 18:47:10 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3300, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:10 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) r1 = socket$l2tp(0x18, 0x1, 0x1) fsetxattr(r1, &(0x7f0000000000)=@random={'system.', 'keyring\x00'}, &(0x7f0000000040)='self::juser[\x00', 0xd, 0x2) close(r1) 18:47:10 executing program 3: syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') 18:47:10 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:47:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3400, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:10 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x6a0802, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0xffffffffffffff80, 0x202, 0x7, 0x3fe3, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r2, 0x6}, 0x8) close(r0) [ 142.453170][T10608] FAT-fs (loop0): invalid media value (0x00) [ 142.483677][T10608] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3500, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:10 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000740)=""/4096) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x624000, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = dup3(r1, r1, 0x80000) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setxattr$security_ima(&(0x7f0000000040)='./bus\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="05011000000001ff00a17f584e89bc8d807822801485cd2a8b5f1f4ddf4906d243f691ca6e394226ed2d9bf30fef1f1ef0e1237abfbdb6c508ac8cfa003b26d2929c5536cc859ffaa58a3aac4fcdce8182faffa57a40ce8d4e9a0707296876b1917dc8c88caf632d7a21e71e7d8c77ba41d8cca264ed4db086b1e3d3b2a5442e4c595be5e0b7bae585b206b5007cede1b656dbcbb648a2dec90d3acbbedd349515fc7ee6c7b8cde6fff970"], 0xab, 0x1) r4 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000380)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000003c0)={r6, 0x80000, r5}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x9fe3, 0x6, 0xb000}, 0x4) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000200)='9p\x00', 0x0, 0x0) sendto$unix(r4, &(0x7f0000000140)="11add68a34b704697febec6e50480862734a588773383fd4fb3f792098528ba0141797aad3a76eb208f5d51b5fceeeb3ebb2463c052b022de5557afebd7a83b7c8b87b52b3", 0x45, 0x4004081, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) 18:47:10 executing program 1: r0 = dup(0xffffffffffffff9c) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x38) 18:47:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0xfffffffffffffef0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x4, r1, 0x1, 0x7fffffff, 0x6, @dev={[], 0x1f}}, 0x14) 18:47:10 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) [ 142.593004][ T26] audit: type=1804 audit(1561834030.453:34): pid=10627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir213928332/syzkaller.czl834/96/bus" dev="sda1" ino=16751 res=1 18:47:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3600, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:10 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:10 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x672, 0x5, 0x2}) 18:47:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='sched\x00') r1 = accept4$ax25(r0, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @null, @netrom, @null, @bcast, @netrom, @default, @netrom]}, &(0x7f00000000c0)=0x48, 0x80800) write$FUSE_WRITE(r0, &(0x7f0000000140)={0x18, 0x0, 0x6, {0xc943}}, 0x18) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000100)=""/36) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x128, r2, 0x100, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x73}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x27}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3641}]}, 0x128}}, 0x40) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) connect$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x2, 0x7, 0x6, 0xfffffffffffffffa, "fe745e20a4f71635a69a1501e0111a9e570d0731c54eeec05e2549acc299671a6d471828012612d74c7662f53073b019fe07412a7f40f502b30e0b62b114ca", 0x2}, 0x60) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f00000001c0)) 18:47:10 executing program 4: r0 = socket(0x10, 0x802, 0x7ff) write(r0, &(0x7f00000003c0)="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", 0x71) r1 = dup2(r0, r0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x60000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x7, 0x0, 0x5}) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) [ 142.729667][ T26] audit: type=1804 audit(1561834030.453:35): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir213928332/syzkaller.czl834/96/bus" dev="sda1" ino=16751 res=1 18:47:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3700, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:10 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={r1, 0x10, &(0x7f0000000000)={&(0x7f0000000080)=""/200, 0xc8, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001240)={r1, 0x10, &(0x7f0000001200)={&(0x7f00000001c0)=""/4096, 0x1000, r2}}, 0x10) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.memory_migrate\x00', 0x2, 0x0) 18:47:10 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000), 0x6674916b) [ 142.817536][T10658] FAT-fs (loop0): invalid media value (0x00) 18:47:10 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140), 0x24f, 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x1fe, 0x4) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0xffffffffffffff0b) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000dc0)='./file0\x00') fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000900)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000ac0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x200}) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/36}, {&(0x7f00000001c0)=""/89}, {&(0x7f0000000440)=""/187}, {&(0x7f0000000500)=""/184, 0xffffffe0}, {&(0x7f00000005c0)=""/244}], 0x334, 0x3a) truncate(&(0x7f0000000000)='./file0\x00', 0x5) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) connect$nfc_llcp(r1, &(0x7f00000002c0)={0x27, 0x0, 0x2, 0x2, 0x4, 0x9, "d282cdc6e2e9dd00a90b604e79dafba00953dfd7af05db9c6c29abd1852a4ffe52a64a8438ede7ac4f5201007ecc9ef99025c86d49b3bdddce8304d60d6303", 0x2a}, 0x60) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg(r2, &(0x7f0000000d00)={&(0x7f0000000740)=@xdp={0x2c, 0x4, r4, 0x3b}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="c56900fc459482aa781cea9f79885b2fdb4367a613ae4e0fb35476c691029869ce9637f9f96a957a1417caf0311032a5ba78672913110582a83d84c8141a133fca5b4cefaa1c47a6de55d0dc3b0d22a185431aded72d6ed756f3c5e953c6fbb8b1ea43bc13a9992ad555e7003af43e3dc4675da0a5b63a5dd0a8051d00f91353e7f5be1b15b50e5de7ad7895fbfc3939c8e7e462acebd20e2ca69da838de86e3d232bb3449cf3b1bf9b4eaa42cd86d08331a80b21f258c9d2074eff4e4503df1df33c6d59cc40c638dde577e45f8b23df1e3fade216033455bfdbefc80342a10a5accf56cd065382d8", 0xe9}, {&(0x7f00000008c0)="21f6609c543a3a246c6923afc1e11f514ccd5c21815695eed277a545f60174cd48d56ff3938717ec303c9f9448aa65295812dfbbc82a496762a04acf4d78e7d1911ea0e841e8c205dc", 0x49}, {&(0x7f0000000940)="d115c9b3a87a33ae30f29f113f64b0b259d1d8326c0ce96ff04594903f2002cde71f9fc0cc498fc2b4d167269b31d7bc938d7b7e8617bb7add6bb5a2feb329decda14a808f214e1836402beee4eb0a29f6a46b22c1a50f476871bb547b0c7794ec1380ba41483f8e8a6a48b4500877e1a418ee965d0737c83bc89aa47d3f6843fd84f2a07ee07a408b", 0x89}, {&(0x7f0000000a00)="9bfc2536a880c369cfe0f04744bf0a76db7860788d38afdca894f704e33b6732cc090d82984b123cc91f2eba356e99190a8ae42106dcd8c4ad25ab49367c74b3df48e963fe549ddc842eec8fc70ac93f5af0866699b96ada63d3b0e5fb5a60b8f52a", 0x62}, {&(0x7f0000000a80)="55dbf956d9cc4716ebec5ddb2c9d09eb0a8f7637e05c4909f5beb262331d1d69191db2ab5632583af29935b8eca9ffc79b0061cf63f6afd8f1", 0x39}], 0x5, &(0x7f0000000b40)=[{0x38, 0x105, 0x5, "786b051c777bd4ea418a110a540c811f8189101565ae0d932d3df597927c90c2c609909e6a3f00e9"}, {0xf8, 0x10e, 0x3, "d9a2b5606670c3b256eabcf0bcc763e9c4d2a4481fe1bedfcdd46902415d59bfe9b37f85ae4d16693d98e4852c95bc1d3fa7e9a08618d559f6deae9ec462e334d73c03db202be9d6472505cdabd9e1cec0ebc89e141d9e17392935f34a1a4f0201ecf0a2e3e845a6ded6f081059c1b2edf64b62f93d86ce60ad7ee48822cc11fccc38ee0660367541344f037afd21510a2c8f6388218286f8432f7515c2e80e972f3e642ba642eaf750ba254b16c987cb08343192b1b86e3dffe896b697f0877b3afcfe06cad5e319f013b6849363e578937f0de7216c45613254ffb182c29e441954f83da"}, {0x68, 0x19f, 0x400, "be4b3af6c471f7fc30afaaa3b09bc7843fadd98c2644d51f3745a08672909975897cbc0556269e963acbe451b97a735b50e8885919d39d556821846276f536dee264154de4d5547fd3d7847222ff509a49d0"}], 0x198}, 0x10) r5 = msgget$private(0x0, 0x21) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000d40)=""/78) 18:47:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400203, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 18:47:10 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = dup(r0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x10001, 0x4) 18:47:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3800, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 142.942363][T10658] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:11 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:11 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_mr_cache\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:11 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2000000000000003, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7be070") getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000080)) 18:47:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3900, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:11 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) close(r0) ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000000)={'ip6erspan0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x3}}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x2, 0x6, 0x4, 0x0, 0x0, 0x9903, 0x2000, 0x8, 0xce, 0x7, 0x5, 0x4, 0x6b0, 0x40, 0x7, 0x8, 0x497, 0x1, 0x7f, 0xcb, 0x0, 0x7, 0xfe3, 0x7fffffff, 0x3f, 0x5, 0x8, 0x329e, 0x400e, 0xfffffffffffffff8, 0x0, 0x0, 0x9, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x81}, 0x20000, 0xf9, 0x7fff, 0x1, 0x66a05f83}, r3, 0x9, 0xffffffffffffffff, 0x3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bpq0\x00', r2}) mkdirat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x1ff) 18:47:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') ioctl$TIOCSCTTY(r0, 0x540e, 0xfff) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x40001, 0x0) r2 = creat(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @remote, @empty}, 0x0) unshare(0x400) shmget$private(0x0, 0x1000, 0xc00, &(0x7f0000ffc000/0x1000)=nil) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x8000000000000800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000280)) accept4$inet(r1, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f00000003c0)=0x10, 0x80800) fstat(r2, &(0x7f0000000340)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) fchmod(r1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0x80}, {r3, 0x8}], 0x2, 0x0, &(0x7f00000002c0)={0xfffffffffffffff8}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1) 18:47:11 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)) 18:47:11 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000180)=0xe8) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = geteuid() fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x80c0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), 0xb5, 0x0, &(0x7f0000000680)="828e44fee99b00655290565112ce779c5ab876da3620ca3aa6954e73ba48022a3b6c675d35aa707ee347c36d8f38002c542c016f825c4bd8ec9c0d1ca97145fb292df75f7edf248ea49e52e4cab58fef0a58925e8b23abe83ddc16c1549f5da8fa3ad1fd939748cdad65abf6efe16443a53da1141fb4afd988e645d3ca5fa1f424730504a8ca2786a39198d2690110d8988369981d29d470dc88ca30fb4ee6159bfa6b09ad0e5d8178ef664327b9b5a7729dd09378"}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x4, r1}, {0x2, 0x1, r2}, {0x2, 0x4, r3}], {}, [{0x8, 0x4, r4}, {0x8, 0x1, r5}, {0x8, 0x3, r6}, {0x8, 0x0, r7}], {0x10, 0x4}, {0x20, 0x3}}, 0x5c, 0x3) close(r0) 18:47:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3a00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 143.235149][T10717] FAT-fs (loop0): invalid media value (0x00) 18:47:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x12, @dev={0xfe, 0x80, [], 0x24}, 0x3}], 0x1c) [ 143.291734][T10717] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:11 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3b00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:11 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = dup2(r0, r0) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000000)=""/245) 18:47:11 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x101220, 0x0) write$P9_RFSYNC(r0, &(0x7f00000000c0)={0x7, 0x33, 0x2}, 0x7) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000001c0)={0x0, 0x8, 0x3e, [], &(0x7f0000000140)=0x6}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') write$P9_RCLUNK(r1, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7) preadv(r1, &(0x7f00000000c0), 0x103, 0x36) 18:47:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000180)=0xfffffffffffffff8, 0x4) 18:47:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000480)) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) finit_module(r0, &(0x7f0000000040)='$\x00', 0x2) [ 143.488114][T10748] FAT-fs (loop0): invalid media value (0x00) [ 143.526465][T10748] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3c00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:11 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 18:47:11 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000000)={0x7, 0x1, @stop_pts=0x3}) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:11 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1d9) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x0, 0x3, 0x5, 0x8c60}, 0xe, 0x1, 0x0, 0x0, "6c34458de537e1c144b6b53331930562b3a5b7ba6b6f5b56850168013e8199fdda77744190f395e93a422f8aa0f8622fcf655de1f30312b9e21a9abcacaf2528"}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x44) close(r0) write$FUSE_GETXATTR(r1, &(0x7f0000000040)={0x18, 0x0, 0x8, {0x9}}, 0x18) 18:47:11 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000003c0)=0x5, 0x4) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x11c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8c, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x26a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_BEARER={0x48, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xd7, @ipv4={[], [], @rand_addr=0x6}, 0xb0}}, {0x14, 0x2, @in={0x2, 0x4e20, @rand_addr=0x5}}}}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4048040}, 0x44) 18:47:11 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3d00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:12 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000180)={0x7ff, 0x10001, 0x7ff, 0x0, 0x44ad, 0xb67e, 0x4, 0x10000, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x3, 0x6}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000280)={0x6725, 0x3, 0x2, 0x8, 0xa, [{0x7, 0x7, 0x7, 0x0, 0x0, 0x482}, {0x2, 0x8001, 0x3ff, 0x0, 0x0, 0x1}, {0x8, 0x64e77e61, 0x8, 0x0, 0x0, 0xc}, {0x0, 0x81, 0x200, 0x0, 0x0, 0xc}, {0x4, 0xffffffffffffffff, 0x80000001, 0x0, 0x0, 0x1000}, {0x6, 0x1, 0x0, 0x0, 0x0, 0x2100}, {0x7, 0xffff, 0x6, 0x0, 0x0, 0x84}, {0x1c61, 0xfffffffffffff7e3, 0x10000, 0x0, 0x0, 0x2001}, {0x7, 0x3, 0x40, 0x0, 0x0, 0x2}, {0x4, 0x6, 0x800, 0x0, 0x0, 0x1600}]}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/30, 0xffffff51}, {&(0x7f00000000c0)=""/137, 0x89}], 0x1000000000000034, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 18:47:12 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) sendmsg$rds(r0, &(0x7f0000001740)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1, &(0x7f0000001680)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000140)=""/4, 0x4}, &(0x7f0000000180), 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x100, 0xfcb5}, {&(0x7f00000001c0)=""/187, 0xbb}, &(0x7f0000001580)=[{&(0x7f0000000280)=""/165, 0xa5}, {&(0x7f0000000340)=""/46, 0x2e}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/77, 0x4d}, {&(0x7f0000001480)=""/201, 0xc9}], 0x5, 0x40, 0x100}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001600)=""/21, 0x15}, &(0x7f0000001640), 0x40}}], 0xc0}, 0x0) [ 144.156830][T10790] FAT-fs (loop0): invalid media value (0x00) 18:47:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:12 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) [ 144.202659][T10790] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, r1, 0x0) 18:47:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4788, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:12 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) pipe2(&(0x7f0000000000), 0x80800) 18:47:12 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:12 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000180)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=@random={'user.', 'com.apple.FinderInfo\x00'}, &(0x7f00000000c0)=""/107, 0x6b) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000140), 0x0, 0x37) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000200)={0x100, 0x5, 0x1bd, 0x8001}) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000280)=""/154, &(0x7f0000000140)=0x9a) 18:47:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000180)=""/137, 0x89}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000040)={0x59, 0xfff, 0x9, 0x1f, 0xc, 0x400, 0x0, 0x3, 0x6, 0x4000000000, 0x101, 0x20}) 18:47:12 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0, 0x0, 0x0, 0x9}}], 0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') readv(r0, &(0x7f0000000580), 0x3c1) 18:47:12 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) 18:47:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4888, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x1, 0x22, 0x8, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r1, 0x87bc}, 0x8) 18:47:12 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)) 18:47:12 executing program 1: syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x55, 0x10001) r0 = memfd_create(&(0x7f00000001c0)='net/packet\x00', 0x1) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/87, 0x57}, {&(0x7f0000000280)=""/64, 0x40}], 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) ioctl$CAPI_SET_FLAGS(r1, 0x80044324, &(0x7f0000000340)) setsockopt$inet_dccp_buf(r1, 0x21, 0x8f, &(0x7f00000000c0)="bc815ade6b7f18acf01cf48ef665e64bcbd1a6ef3ba7337474725c96489b4689055f478b93451db596ebbfdfe7f0a6b57870662647cd1412b93ec85fc4edd9289cf08ae72dbbdaf36d5b0ff5c055463c4c722242bba87719103c7ed8f3f57ffd0a2a04396d09de46f51dd90b96ebcd1401ac372824e4a495c1ece69fc53581326927385cb3ee6d0177848de562614c4b0eed270d1791de64e2d456f8f74ac0ea53731d2a050594951cbf1778f385e89c87d7f9ce8af6510e2d9b719c7369298d97195d3f7785044633c1f1de4e7a78e387dc1ec63d1770e55f8ed3717b635757", 0xe0) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000000)) [ 144.525511][T10842] FAT-fs (loop0): invalid media value (0x00) [ 144.543906][T10842] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:12 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) socket$l2tp(0x18, 0x1, 0x1) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0xf755d10c3caf3f93, 0x400}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f0000000080)={r2, 0x800}) 18:47:12 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x2c, 0x3, 0x0, {0x6, 0xb, 0x0, 'net/packet\x00'}}, 0x2c) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:12 executing program 1: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000140)) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x9, &(0x7f00000000c0)=0x4) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000180)=""/118, &(0x7f0000000000)=0x76) 18:47:12 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)={0xb, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d2"}, 0x119) dup2(r0, r1) 18:47:12 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xff, 0x4400) close(r0) [ 144.853094][T10876] FAT-fs (loop0): invalid media value (0x00) 18:47:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5865, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:12 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, 0xffffffffffffffff) close(r0) 18:47:12 executing program 3: seccomp(0x1, 0x0, &(0x7f0000000340)={0x0, &(0x7f0000000300)}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.current\x00', 0x0, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x1000, 0x200, 0xffffffffffffff00, 0x6, 0x8, 0x5}, 0x9e5}, 0xa) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) accept$unix(r1, &(0x7f0000000280)=@abs, &(0x7f0000000200)=0x6e) [ 144.899258][ T7729] hid-generic 0000:0000:0000.0001: item fetching failed at offset -1590892991 [ 144.909317][T10876] FAT-fs (loop0): Can't find a valid FAT filesystem [ 144.939365][ T7729] hid-generic: probe of 0000:0000:0000.0001 failed with error -22 18:47:12 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000340)={0xc9, "de5c950b60f3758440063d0d3fa2c466a6683e4e55364d840fa64ce23e42e832d722ea273420d530ed63e0f4391752c394e8a9f4685a6dddacc3005ae1b174f4016afd0af64925d2ca86e2c360e5e98dce3817510d34b8d4b5e145581bea9452723ab3eaa12e98d6bf590911a268105a8d10dd147e2bb65f99f8f48141567cbcfbfade5f8cdabcc638741157618af77ea516ebce63f07492c55bce27b10c1ddfb9eba556e212b4455daaf92391229ca96a0bf3bb6b1e0b65875ca201bccd683aa2ee207212a6e6417f"}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3be, 0x7a00) 18:47:12 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) 18:47:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='n\x82f\x8d\f\xed|\x00\x00\x00\xed\xff\xef\xcb\xf0\rhn\x00\x00\x00\x00') ioctl$CAPI_INSTALLED(r0, 0x80024322) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/223, 0xdf}, {&(0x7f00000001c0)=""/102, 0xfffffffffffffee9}], 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x9, 0x4) 18:47:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:13 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:13 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0xffffffffffffff92}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') read$FUSE(r0, &(0x7f00000000c0), 0x1000) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:13 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000540)='/dev/dmmidi#\x00', 0x9, 0x400) ioctl$SIOCNRDECOBS(r0, 0x89e2) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000200)=""/6, 0x6}, {&(0x7f0000000240)=""/73, 0x49}, {&(0x7f00000002c0)=""/130, 0x82}], 0x7) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snapshot\x00', 0x90404, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000580)={r2}) close(r2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000480)=0x9) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000500), &(0x7f00000004c0)=0x8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000780)={{{@in6, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000640)=0xe8) quotactl(0x6, &(0x7f0000000440)='./file0\x00', r4, &(0x7f0000000680)="64f38eee9b92600253b1e4110b0b89ec84085f670c2d6b05c585875eb0a9ac83adc47102defe1349c7fbcaf9bbbcd0fd8f812faabaec6a100aef4925f598ba896a6db97e72365b709b7645a1ebb54a719b573bb9c3e7f9a1974a1d395dea8b7e0f71a06e67f32a09d855a1e880efaa818f963701fe50ce9c24ad996a6dfd9fc54d5dbdf276a59883939005964b1af600cb9ba000236a00d9a2723b4db37965cd06b1b44f8b8545295d15fd23b5bf30d6c5fed134193bec565bc52d1376c08c9437e500958f778040f4bb64e0a3dd798b0031f197a72e24a9611c1ef37573ac88e3e41a93ce7106a123b231f3e943a00f715b98") 18:47:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6558, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:13 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) accept4$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) 18:47:13 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x400, 0x0) getpeername$ax25(r0, &(0x7f0000000180)={{0x3, @netrom}, [@netrom, @default, @remote, @rose, @remote, @bcast, @remote, @default]}, &(0x7f0000000200)=0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000300)=r2, 0x4) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:13 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB]}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) r0 = accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) clock_gettime(0x0, &(0x7f0000000e80)={0x0, 0x0}) recvmmsg(r3, 0x0, 0x0, 0x40000040, &(0x7f0000000ec0)={r4, r5+30000000}) r6 = dup2(r2, r2) sendmsg$alg(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005) socket(0x9, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffed7, 0xc0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0xfff) [ 145.310270][T10941] FAT-fs (loop0): invalid media value (0x00) 18:47:13 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) close(r0) [ 145.359453][T10941] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:13 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000140)) socket$packet(0x11, 0x3, 0x300) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x392, 0x2) accept4$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14, 0x800) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video37\x00', 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-monitor\x00', 0x408800, 0x0) io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x0, 0x4, 0x1, 0x3b9}) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000380)='net/#\xa2;\xf1\x12``F\xc9\xee\xfb\x95\xa51p7\xd1\xa6]\xafa\xe6\xa1;\x01F,R\xbe\x9d\bzf\r\x90\xff*\x84u\xeb\xfa\xd0\xfd\xe0\xdc\t\xa9\xe54\xce\x88\x91\xd3\xa9\x8d\xdf\xe4\xcc\f\x94\x19\x7f\x17RHLDV\'\x92\xa2\xd4xe\xfa\x04\xa19\x97\xfc&\xc5Y\xc4\xae+\x03o\xa8\x0e\x99\xb2W\xbc0\x06\xa6 \\Y\x03\xe0\x1e\x9b`\x83_\xe1D\xa4b]\xde\x0eMx\xba\x18\xc3X\xd6\xa3E\xd7l\xa0\xed\xfd]\x8d@\x9e\a\f\x9d\xb3\xc87c\xfe\x9a\xc7\x9f\xf9^\xac\xed\xd2|\xc3\xda\xa8\x05nn\xfa\x94\xe7\x1f@\x1aY\xf3\xfb\xea\x18\xec\x04\x06\xd4\xd1\x85T#') r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400, 0x0) preadv(r3, &(0x7f00000017c0), 0x0, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000040)={0x7ff, 0x7, 0x3, 0x8, 0x4a1, 0x3}) connect$packet(r3, &(0x7f0000000240)={0x11, 0xf9, r0, 0x1, 0x0, 0x6, @remote}, 0x14) shutdown(r4, 0x1) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f00000001c0)={0xfff, 0x62, 0xffffffffffffff81, 0x322233dccd3864a3, 0x5}) 18:47:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8100, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:13 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) close(r0) 18:47:13 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8847, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x9a3) 18:47:13 executing program 5: r0 = eventfd2(0x3, 0x800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$lock(r0, 0x27, &(0x7f0000000080)={0x3, 0x2, 0x7ff, 0x9, r1}) r2 = socket$l2tp(0x18, 0x1, 0x1) close(r2) 18:47:13 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x4e21, @empty}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[{0x58, 0x0, 0x0, "7b4b34efe4476f9fa66f2d11ef5089cb224c1a2630ea2e185e2f487485b86ff557206da178979bb4ec121ca5d8492910dda12918ccacad43ddd9e2b9cea0bc0871b63c0c5a84a9"}, {0x10, 0x10f, 0x1}, {0x18, 0x13e, 0x5, 'Xbk'}, {0xa8, 0x114, 0x8, "187ab5426c3d041d94b74f6956cf22dac4082cdbb4256c0f14652f81e62938815e84a805e21d252e02386d041786615c90ac06414a440f8f332cef7c14a5a3dac9743561a3b3e0f6612b3d27c4d84e645da550eea64447856857a5b9a3e12d75dfd26653b0471cb58000ea49752ba4c699bed1820cb0dc4be39c75282ace484af05d10779dc5d71145b36f01450161ade6"}, {0x78, 0x101, 0x9, "fdf0a20f025fae8b0078d8018adb03d0ce7713ea190ab817672c4dbf4843e731ebfad905160ccaa8507bd3e0f9112e190a3ea05a6286b4177af180c4b3d9024423667b85e3671653e14e7fab8cf1f69c155f0c897af99f60bf03c6f488cebfb3aa101e77"}, {0xf0, 0x1, 0x5, "512416c97cbefce659444564ce8ad1a6a4c6d2531ea98631344a7a6a7c35972ee67621f62eab6a9f24c8ec15fd4de2f9ae43dd3c367402350a6796a7da6cdab073b207567991172355136ce714b8d3751b81f0d807db30a2c1a819185b01c25dc29c0139bc1d53ba5dfa6c67dd5e0e513cad22c949ab988130c270a350db598923febb5027f01612105065f2d47c37910412e8db07eef476572c136e2c0959c279a481fe42f0d87cf7eaa970e538d5f58b7d3311fe71a630244c752d72740399600dbe7f07ed361a2cb12f5debbac699447ce1522676ef61ac193d"}], 0x290}, 0x40) 18:47:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8848, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:13 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x40000106, 0x0, 0x20f], [0xc1]}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000000)) 18:47:13 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:13 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0xe14794cff03879f1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:13 executing program 5: socket$l2tp(0x18, 0x1, 0x1) 18:47:13 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x9, 0x1, 0xb9, 0x0, 0x0]}, &(0x7f0000000040)=0xe) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:13 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80100, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/216) 18:47:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 18:47:13 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00e, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:14 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:14 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0xc040, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x27, 0x1, 0x0, 0x1, 0x3, 0x400, "d3d0592ed7fd0a67c9d5f4cc806dd27128cc831fe656d418e1a3724afb843c54741b26e1cf0df512dcc8b2ee94ebe9bc50ed3765cc93f0db8585c696875c2d", 0x2a}, 0x60, &(0x7f0000000100)=[{&(0x7f00000000c0)="7151df2ad04a3aa1231e4e5bc950fd212c558b768b", 0x15}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="90000000000000000d010000336abc6afc83e7a9d536810b8ac1a6fbb091d8def8ebe39827d79d487d52d24736fa46361a5f8ab184f3a75551fe6baa2a54a6e24ca3b6209e1f866fa3501c374a6e56f7e0eba4bcc8855a89899ff57ccc54120b96d4fa53d8cb57cca3ab7fef395f05fd0393d9fb1ce0e97f3ee439b71e7adc7900565ad8712b2f6fba73759e7b000000"], 0x90, 0x40000}, 0x40000) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x26f}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/rfcomm\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:14 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB]}}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ashmem(0xffffffffffffff9c, 0x0, 0x14080, 0x0) r0 = accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_smack_entry(r1, &(0x7f0000000400)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x8000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r3 = syz_open_dev$usbmon(0x0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x40c392f5) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$TIOCSISO7816(r3, 0xc0285443, 0x0) clock_gettime(0x0, &(0x7f0000000e80)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000dc0)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/201, 0xc9}, {&(0x7f0000000580)=""/145, 0x91}], 0x2, &(0x7f0000000640)=""/142, 0x8e}, 0x6}, {{&(0x7f00000004c0)=@l2, 0x80, &(0x7f0000000980)=[{&(0x7f0000000700)=""/131, 0x83}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000003c0)}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/29, 0x1d}, {&(0x7f0000000900)=""/100, 0x64}], 0x6, &(0x7f0000000a00)=""/196, 0xc4}, 0x6}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000bc0)=""/16, 0x10}, {&(0x7f0000000c00)=""/5, 0x5}, {&(0x7f0000000c40)=""/60, 0x3c}, {&(0x7f0000000c80)=""/108, 0x6c}], 0x5, &(0x7f0000000d80)=""/4, 0x4}, 0x7ff}], 0x3, 0x40000040, &(0x7f0000000ec0)={r4, r5+30000000}) r6 = dup2(r2, r2) sendmsg$alg(r6, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000000)="a7ce", 0x2}], 0x1}, 0x8005) socket(0x9, 0x800, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xfffffffffffffed7, 0xc0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x11, 0x0, 0xfff) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000200)=0x6) 18:47:14 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "0918ddedd31f07b731079d9b76341ec4"}, 0x11, 0x3) close(r0) 18:47:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) capset(&(0x7f00000001c0)={0x19980330, r2}, &(0x7f0000000200)={0x2, 0xfffffffffffffe01, 0x9, 0xff32, 0x1, 0x4dc2}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe00, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 146.302163][T11056] binder: 11054:11056 ioctl 6611 0 returned -22 18:47:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x34000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:14 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x9) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000180)={0x2, 0x4}) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) socket$netlink(0x10, 0x3, 0x17) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) write$P9_ROPEN(r0, &(0x7f00000000c0)={0x18, 0x71, 0x1, {{0x0, 0x1, 0x4}}}, 0x18) [ 146.348332][T11056] binder: 11054:11056 ioctl 6611 0 returned -22 18:47:14 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x104) 18:47:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') mlockall(0x2) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000280)={{0x0, 0x2, 0x1, 0x3, 0x7}, 0x9, 0x2, 'id1\x00', 'timer0\x00', 0x0, 0x9, 0x401, 0x8, 0xf8}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:14 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:14 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20000) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000140)="ca989fb2ade014eb3a571b99daa912d9b8dd6434fe8091f7608e4a7688bd8c369da18d340dafe0ed08c47a9dec787c4208259c2fea7ebc2525cb2fd56254019dfc861253a463ca5e77cd004cfc64a56d45466e1ba738eb68ddec0c0be86d93ef884bc29268c76ea66c56cc5652a125b96c819223e0a09233c2f1a86ec3a239b478975f8430b7e32dbba36e0dfa793f0202ae760e3331a50f8e50216c19f444f30479fb0863c8bc5b155ce612baaba9376c50416c0d400370e9b8a26b7431bf22ab178822ffb935bc6a1f951ded6c5fc1c8611cecaabe90a5bdc4b388bad274e2d5a2d2bde40dfa64d11f5440ea") getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100)={0x1f}, 0x4) close(r0) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88) 18:47:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x400300, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x5) fchdir(r0) 18:47:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000013001707ed12806cd20010e533fb0d61e18fbd2fe6a5dd80009d00010801000000000300f87f00006400", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) 18:47:14 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x4) preadv(r0, &(0x7f00000017c0), 0x3da, 0x38) 18:47:14 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7d, 0x2, [0x40000106, 0x0, 0x20f], [0xc1]}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, 0x0) 18:47:14 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:14 executing program 3: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)=0x80000000) clock_getres(0x0, &(0x7f00000001c0)) write$input_event(r0, &(0x7f0000000100)={{}, 0x4, 0xffff, 0x101}, 0x18) syz_open_dev$radio(&(0x7f00000003c0)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000280)='fdinfo\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000080)=""/30, 0x3}, {&(0x7f00000002c0)=""/137, 0x89}], 0x2a9, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000140)=0xe74) write$input_event(r2, &(0x7f0000000180)={{0x0, 0x7530}, 0x1f, 0x0, 0x2}, 0x18) 18:47:14 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x38, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0x4, 0x80000001, @value=0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x38) 18:47:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040), &(0x7f0000000180)=0x4) 18:47:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:14 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 18:47:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000013001707ed12806cd20010e533fb0d61e18fbd2fe6a5dd80009d00010801000000000300f87f00006400", 0x2e}], 0x1, 0x0, 0x0, 0x2}, 0x0) [ 146.945405][T11124] kvm [11119]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 18:47:14 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/202, 0xca) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='ket\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040), &(0x7f0000000180)=0x4) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)={0x3c8, r1, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x500000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_LINK={0x70, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x220}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xadf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffff6bd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffbff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}]}, @TIPC_NLA_BEARER={0x168, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100000001}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0xb}, 0xfc8}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3c, @mcast1, 0xfff}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xe7f, @loopback, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7fffffff, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x9, @remote, 0x1000}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x60}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb8cd}]}]}, 0x3c8}}, 0x4000000) getsockopt$inet6_dccp_buf(r0, 0x21, 0xce, &(0x7f00000001c0)=""/108, &(0x7f0000000280)=0x6c) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 18:47:15 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x4, 0x3, 0x1, "5177df"}, 0x13) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x3, 'syz_tun\x00', 0x1}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x69, &(0x7f0000000000)="58c54be264e108ad98348545677a11ed99e61952d93d11c2699573f72abcc7c28ab56c572d6df03b1bb3ae748c8bd834ec8d262489f1b7245ead6eb78e694e673506a9259f8a64ca87f988018dbac4bad9c2fe88145dfce1e48eacfcc1fca22116fd28e4218339896f", 0x800, 0x4, 0x9, 0x0, 0x7, 0x1, 0x0, 'syz0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x400) r7 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "3206a3286468c22c", "5d5083c05eea284eca669d62bac8c3c4dcf713dc8430dcec046501fd7b8737ad"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x40605346, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\xff\x00'}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') fstatfs(r0, &(0x7f0000000280)=""/231) modify_ldt$read_default(0x2, &(0x7f0000000180)=""/106, 0x6a) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) [ 147.314114][ T7729] binder: unexpected work type, 4, not freed [ 147.321949][ T7729] binder: unexpected work type, 4, not freed 18:47:15 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 147.425459][T11174] ALSA: seq fatal error: cannot create timer (-22) [ 147.574473][ T7729] binder: unexpected work type, 4, not freed [ 147.584205][ T7729] binder: unexpected work type, 4, not freed [ 147.734235][T11165] ALSA: seq fatal error: cannot create timer (-22) 18:47:15 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:15 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000180)) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:15 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 18:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:15 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x4, 0x3, 0x1, "5177df"}, 0x13) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x3, 'syz_tun\x00', 0x1}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x69, &(0x7f0000000000)="58c54be264e108ad98348545677a11ed99e61952d93d11c2699573f72abcc7c28ab56c572d6df03b1bb3ae748c8bd834ec8d262489f1b7245ead6eb78e694e673506a9259f8a64ca87f988018dbac4bad9c2fe88145dfce1e48eacfcc1fca22116fd28e4218339896f", 0x800, 0x4, 0x9, 0x0, 0x7, 0x1, 0x0, 'syz0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x400) r7 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "3206a3286468c22c", "5d5083c05eea284eca669d62bac8c3c4dcf713dc8430dcec046501fd7b8737ad"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x40605346, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\xff\x00'}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:47:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000000180)=""/137, 0x89}], 0x2, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f00000000c0)) 18:47:15 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x7000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 147.974395][ T7729] binder: unexpected work type, 4, not freed [ 147.984096][ T7729] binder: unexpected work type, 4, not freed 18:47:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:15 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000040)=@null) 18:47:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 148.167538][T11220] ALSA: seq fatal error: cannot create timer (-22) [ 148.174285][ T7729] binder: unexpected work type, 4, not freed [ 148.182852][ T7729] binder: unexpected work type, 4, not freed 18:47:16 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:16 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 18:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000280)=0xb0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000180)=0x72) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0x800}, &(0x7f0000000200)=0x8) 18:47:16 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @remote}}}}, 0x0) 18:47:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:16 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x4, 0x3, 0x1, "5177df"}, 0x13) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x3, 'syz_tun\x00', 0x1}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x69, &(0x7f0000000000)="58c54be264e108ad98348545677a11ed99e61952d93d11c2699573f72abcc7c28ab56c572d6df03b1bb3ae748c8bd834ec8d262489f1b7245ead6eb78e694e673506a9259f8a64ca87f988018dbac4bad9c2fe88145dfce1e48eacfcc1fca22116fd28e4218339896f", 0x800, 0x4, 0x9, 0x0, 0x7, 0x1, 0x0, 'syz0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x400) r7 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "3206a3286468c22c", "5d5083c05eea284eca669d62bac8c3c4dcf713dc8430dcec046501fd7b8737ad"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x40605346, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\xff\x00'}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:47:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xb000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8800, 0x8) r1 = fcntl$getown(0xffffffffffffffff, 0x9) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0xfffffffffffffff5, 0x2, {{0x2, 0x100000000, 0x1, r1}}}, 0x28) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat, @flat=@binder={0x66646185}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:16 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x3) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/1) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000340)=""/137) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000400)='net/packet\x00', 0x0, r0) write$UHID_INPUT2(r0, &(0x7f0000000280)={0xc, 0xa9, "1a612af13c68ec827682201d5c27c5f0697fef2a01961880d8acc4ea2a1b05a055e490210a471901e646f7de7baaca6a4e56ae8c3031902ed82fa7f583cd5b12973edc3522f1df1f3e26d432796b07c6de75c82c18023254003fe7bb46df417b04b6cbce48d3fc5e4806e06da5adb8e5b42818dc11bb6ecc9c9d47a1ee6c7e94b3c26d0c718aec05bdb0f4316a2c8134eeb0a675232c2990924da0659d9828c412ef995ec1b91acef1"}, 0xaf) r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb0, r2, 0x701, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r0}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 149.050513][T11298] ALSA: seq fatal error: cannot create timer (-22) 18:47:17 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 18:47:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r2 = request_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)='{vboxnet0ppp1selfeth1wlan1\x00', 0xfffffffffffffffb) openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x20040, 0x0) keyctl$unlink(0x9, r1, r2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="69318f3b284393921a66ddcd82b9fd887fac6800000093975279f7d049b89141320000000000"], &(0x7f0000000180)=0xa) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000001c0)={0xfffffffffffffffe, 'veth0\x00\x00\x00\x00\x00\x00\x81\x00'}, 0x18) 18:47:17 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) write$nbd(r0, &(0x7f0000000000)={0x67446698, 0x0, 0x4, 0x3, 0x1, "5177df"}, 0x13) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x3, 'syz_tun\x00', 0x1}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, 0x69, &(0x7f0000000000)="58c54be264e108ad98348545677a11ed99e61952d93d11c2699573f72abcc7c28ab56c572d6df03b1bb3ae748c8bd834ec8d262489f1b7245ead6eb78e694e673506a9259f8a64ca87f988018dbac4bad9c2fe88145dfce1e48eacfcc1fca22116fd28e4218339896f", 0x800, 0x4, 0x9, 0x0, 0x7, 0x1, 0x0, 'syz0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x1000000000054}, 0x98) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu\x00', 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x400) r7 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 'client0\x00', 0x0, "3206a3286468c22c", "5d5083c05eea284eca669d62bac8c3c4dcf713dc8430dcec046501fd7b8737ad"}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x40605346, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00\xff\x00'}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 18:47:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 149.706769][T11320] binder_alloc: 11314: binder_alloc_buf, no vma 18:47:17 executing program 3: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000200)='net/sockstat\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 149.869775][T11329] ALSA: seq fatal error: cannot create timer (-22) 18:47:17 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 149.921783][T11343] binder_alloc: 11342: binder_alloc_buf, no vma 18:47:18 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x10000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:18 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:18 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:18 executing program 5: 18:47:18 executing program 5: 18:47:18 executing program 0: fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:18 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(0xffffffffffffff9c, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./file0\x00', r0, r1) r2 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0xff, 0x200000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000480)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x8042, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000400)='vlan0\x00') r4 = shmget(0x1, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000280)=""/255) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:18 executing program 5: [ 150.611478][T11366] binder_alloc: 11358: binder_alloc_buf, no vma 18:47:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x11000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:18 executing program 5: 18:47:19 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x2, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000280)=@v2={0x3, 0x3, 0x11, 0x9, 0x96, "37db853e3065213c25dfc5e8f1eb98f62499f63d6b0ff5a026d31c67e4d1a88c6e4dbcf13dc5c6ff7434c0e552e8fd7bb2e47f09112851ca18ff0395bffaad7caadc9f7f68c5c8c159496286de25ae968cce055f0f25ecfe9ca519fb691f093a87163bb7b64a6bd7d91cde7ee69f583040f7b5804b491855935fd211322f8c789febcca7ebec920862e0484d67302c0836f6d1a698b6"}, 0xa0, 0x1) 18:47:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:19 executing program 0: fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x12000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:19 executing program 5: 18:47:19 executing program 5: 18:47:19 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 18:47:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x13000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:19 executing program 0: fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:19 executing program 5: 18:47:20 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x14000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:20 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000180)={0x1000, 0x0, {0x3, 0x3, 0x800, 0x0, 0x7}}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0xfffffffffffffcac}, {&(0x7f00000000c0)=""/137, 0x89}], 0x1a8, 0x0) 18:47:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:20 executing program 5: 18:47:20 executing program 5: 18:47:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x15000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240), 0x328, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000040)=0x78) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x8402, 0x0) 18:47:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:20 executing program 5: 18:47:20 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) write(r0, &(0x7f0000000340), 0x41395527) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:20 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:20 executing program 5: 18:47:20 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x16000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r1, 0x4000000000000000}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r1, @in6={{0xa, 0x4e20, 0x0, @mcast1, 0xf0}}, 0xffffffffffffffff, 0x221d}, &(0x7f00000005c0)=0xfffffffffffffefd) 18:47:21 executing program 5: 18:47:21 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x17000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:21 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000640)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000480)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x80}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000380)={0xa0, 0x0, 0x6, {{0xffffffffffffffff, 0x2, 0x1, 0x3, 0x4, 0x5, {0x4, 0x0, 0x3, 0x8, 0xd8b, 0x6, 0x20000000000001, 0x4000000000000006, 0x8, 0x5, 0x1, r2, r3, 0x0, 0x1ff}}, {0x0, 0x10}}}, 0xa0) 18:47:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 153.355809][ T3759] binder: unexpected work type, 4, not freed [ 153.373144][ T3759] binder: unexpected work type, 4, not freed 18:47:21 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:21 executing program 5: 18:47:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x18000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:21 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0x6d22, 0x3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0xffffffff00800000, 0x4074ef7450}, &(0x7f0000000300)=0x8) fchmod(r0, 0x44) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)="0517d1e6e108d5827cc15fb349f08cc221b191ec3ba221e1b3e6dd7a2e16dec23eba90d33f5dfc717549", 0x2a, r0}, 0x68) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @empty}}, 0x100000000, 0x800}, 0x90) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f0000000400)=""/137, 0x89}], 0x2, 0x0) 18:47:21 executing program 5: 18:47:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x19000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:21 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:21 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xa4fb}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1a000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:22 executing program 5: 18:47:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:22 executing program 4: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x11}, @in=@remote, 0x4e22, 0x1, 0x4e24, 0x400, 0xa, 0x80, 0x80, 0x7f, r1, r2}, {0x4, 0x38000000000, 0x6080, 0x30, 0x2, 0x9, 0x7, 0x2}, {0x1, 0xffffffff, 0x3ff, 0x10000}, 0x6, 0x0, 0x3, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d5, 0x7c}, 0x2, @in6=@mcast2, 0x3505, 0x7, 0x2, 0xfffffffffffffff8, 0x9, 0x5, 0x8}}, 0xe8) 18:47:22 executing program 5: 18:47:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1b000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:22 executing program 5: 18:47:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x3, 0xf1, 0xa, 0x0, 0x0, [{r0, 0x0, 0x54}, {r0, 0x0, 0x4}, {r0, 0x0, 0x8001}, {r0}, {r0, 0x0, 0x6}, {r0, 0x0, 0x3}, {r0, 0x0, 0x4}, {r0, 0x0, 0x9}, {r0, 0x0, 0xbba}, {r1, 0x0, 0x7}]}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0x4}) 18:47:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:22 executing program 5: [ 154.500251][T11573] binder_alloc: 11568: binder_alloc_buf, no vma 18:47:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1c000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:22 executing program 3: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1d000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:22 executing program 5: [ 154.695177][T11594] binder_alloc: 11591: binder_alloc_buf, no vma 18:47:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x9, 0x1, 0x7fffffff, 0x1200000000}) 18:47:22 executing program 5: 18:47:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1e000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:22 executing program 5: 18:47:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 154.869343][T11613] binder_alloc: 11610: binder_alloc_buf, no vma 18:47:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) accept4$tipc(r0, &(0x7f0000000040)=@id, &(0x7f0000000180)=0x10, 0x80000) 18:47:22 executing program 5: 18:47:22 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:22 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:22 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1f000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:23 executing program 5: [ 155.082507][T11636] binder_alloc: 11633: binder_alloc_buf, no vma 18:47:23 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/packet\x00') preadv(r2, &(0x7f0000000240), 0x0, 0x0) 18:47:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:23 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:23 executing program 5: 18:47:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x20000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:23 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:23 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000240)="11dca5055e0bcfec7be070") syz_read_part_table(0x0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) [ 155.306765][T11657] binder_alloc: 11653: binder_alloc_buf, no vma 18:47:23 executing program 3: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x21000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:23 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:23 executing program 3: openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4402, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000280)=""/215, &(0x7f0000000000)=0xd7) 18:47:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x22000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 155.497504][T11686] binder_alloc: 11684: binder_alloc_buf, no vma 18:47:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:23 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x5, 0x300) r1 = open(&(0x7f0000002000)='./bus\x00', 0x800000000141042, 0x0) r2 = gettid() waitid(0x0, r2, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x3) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x80000000000, 0x7ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x40000000, 0x10000101) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) bind$bt_sco(r4, &(0x7f0000000440)={0x1f, {0x0, 0x0, 0x81}}, 0x8) getpeername(r4, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140), 0xffffffffffffff47) recvmmsg(r1, &(0x7f0000001800)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1}, 0x934}, {{&(0x7f0000000380)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/86, 0x56}], 0x5, &(0x7f0000000840)=""/103, 0x67}, 0x3b}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/207, 0xcf}], 0x3, &(0x7f0000005080)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000c00)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x5, &(0x7f0000000fc0)=""/130, 0x82}}, {{&(0x7f0000001080)=@nl, 0x80, &(0x7f0000001700)=[{&(0x7f0000001100)=""/150, 0x96}, {&(0x7f00000011c0)=""/222, 0xde}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/214, 0xd6}], 0x7, &(0x7f0000001780)=""/76, 0x4c}, 0xfffffffffffffffc}], 0x5, 0x40000002, &(0x7f0000001340)={0x77359400}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) 18:47:23 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x23000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:23 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) syz_open_procfs(r0, &(0x7f0000000040)='net/nfsfs\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:23 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:23 executing program 3: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000280)='n\xc8S\xa5\xf1Iv\xc1\xff\xff\xff,\xc9\xd9\xc8\xd1\xfc\xaa[\x7f7\xa6\x94b\xd8(\xcb\"\xcf\x91\al\xaf\xc1\xdcj\xf1\x1ef\x9a\xd0\xf8\xbd\x05o\xdb2?\x17\x85\xc9Q0p\x9e8w-D\x94>x\x98\xc2\xd1\xd4J)\x85(->\xfbr\t\xb2\xc9\xa5x\x83\v\xde\x8b\x85I\"L\xf1\x18\xaeo\xedtL\xb6jvt\x105\x83a\x00\x85\xaeet\xd3\xa5;\xba`\n4#(\xaaIeeU\xa22R}\xfe\xcc\xeb\x04L\xb8\xd2\xdc\xeb\x9a9;(\x8e\\gf\xe3\x89\xe6)\x95;\x84UD\xefV\xdd5\xa9@\x8f\x02\x18h\xf4n\x05\f~Lao\x87|\x03-=%\x1b\xb6\xbe\xae\xc8kC\xb6\xe2\b\x1bVc\'\xb0\x9a\xb6\x18\x90\x06:\xd9\xc6z\xbc\xc7qw\x01\x1f\xf9\x8dc\n') write$P9_RREADDIR(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x68) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x24000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:23 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x2, 0x40040) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:24 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x5, 0x300) r1 = open(&(0x7f0000002000)='./bus\x00', 0x800000000141042, 0x0) r2 = gettid() waitid(0x0, r2, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x3) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x80000000000, 0x7ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x40000000, 0x10000101) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) bind$bt_sco(r4, &(0x7f0000000440)={0x1f, {0x0, 0x0, 0x81}}, 0x8) getpeername(r4, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140), 0xffffffffffffff47) recvmmsg(r1, &(0x7f0000001800)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1}, 0x934}, {{&(0x7f0000000380)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/86, 0x56}], 0x5, &(0x7f0000000840)=""/103, 0x67}, 0x3b}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/207, 0xcf}], 0x3, &(0x7f0000005080)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000c00)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x5, &(0x7f0000000fc0)=""/130, 0x82}}, {{&(0x7f0000001080)=@nl, 0x80, &(0x7f0000001700)=[{&(0x7f0000001100)=""/150, 0x96}, {&(0x7f00000011c0)=""/222, 0xde}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/214, 0xd6}], 0x7, &(0x7f0000001780)=""/76, 0x4c}, 0xfffffffffffffffc}], 0x5, 0x40000002, &(0x7f0000001340)={0x77359400}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) 18:47:24 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x25000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:24 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000280)) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000180)={0x7, 0x40, 0x7a474576, 0x9, 0x81, 0xae7, 0x4, 0x38a2, 0x3, 0x3, 0x72, 0x7, 0x32, 0x5, &(0x7f0000000040)=""/45, 0x7f, 0x222, 0x3}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) [ 156.257763][ T26] audit: type=1800 audit(1561834044.123:36): pid=11730 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16625 res=0 [ 156.278021][ T26] audit: type=1800 audit(1561834044.143:37): pid=11754 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16625 res=0 18:47:24 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00000013c0)='coredump_filter\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x3, 0x2) preadv(r1, &(0x7f0000001680)=[{&(0x7f0000001300)=""/176}, {&(0x7f00000013c0)}, {&(0x7f0000001400)=""/239}, {&(0x7f0000001500)=""/22}, {&(0x7f0000001540)=""/3}, {&(0x7f0000001580)=""/230}], 0x1, 0xfffffffffffffffe) preadv(r2, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/173, 0xad}, {&(0x7f0000001240)=""/83, 0x53}], 0x3, 0x0) 18:47:24 executing program 1: ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:24 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x26000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:24 executing program 4: syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:24 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x5, 0x300) r1 = open(&(0x7f0000002000)='./bus\x00', 0x800000000141042, 0x0) r2 = gettid() waitid(0x0, r2, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x3) write$cgroup_type(r1, &(0x7f0000000180)='threaded\x00', 0x9) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x80000000000, 0x7ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x0, 0x40000000, 0x10000101) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) bind$bt_sco(r4, &(0x7f0000000440)={0x1f, {0x0, 0x0, 0x81}}, 0x8) getpeername(r4, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140), 0xffffffffffffff47) recvmmsg(r1, &(0x7f0000001800)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1}, 0x934}, {{&(0x7f0000000380)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/86, 0x56}], 0x5, &(0x7f0000000840)=""/103, 0x67}, 0x3b}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/207, 0xcf}], 0x3, &(0x7f0000005080)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000c00)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x5, &(0x7f0000000fc0)=""/130, 0x82}}, {{&(0x7f0000001080)=@nl, 0x80, &(0x7f0000001700)=[{&(0x7f0000001100)=""/150, 0x96}, {&(0x7f00000011c0)=""/222, 0xde}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/214, 0xd6}], 0x7, &(0x7f0000001780)=""/76, 0x4c}, 0xfffffffffffffffc}], 0x5, 0x40000002, &(0x7f0000001340)={0x77359400}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) 18:47:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x27000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:24 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:47:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, r0, 0x0, 0x17, &(0x7f00000001c0)='mime_type\'/[ppp0/nodev\x00', 0xffffffffffffffff}, 0x30) kcmp(r1, r2, 0x4, r0, r0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e00000004000000580400006001000060010000800200006001000060010000880300008803000088030000880300008803000004000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="0000000000000000ff7f00000000000000000000000000070000000000000000001000000008000000000000000000000000f8ff77abc6d7e5f57000df63a5b9bd01f8ae019660b356480b37523401b9ee8806c934a008b9ce6cb774fd312e7049ea2e5f64610836d5a7f598ee8b183b5a8fcef21b2ef7b0ea3924746453582426dc1c6f44c5aa4a498240b089ea40b5f78f741e727f45f9f6ecbe2898fdf09323e27afe0718de314c6a9961922d2564604e4a4bfce3ac087a84ab2f0c9e0de4d2cfb5c26dda5c2ff1e37d431cbfffe8722da485bd"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380160010000000000000000000000000000000000000000000000002800697076366865616465720000000000000000000000000000000000000000020200000000000048006862680000000000000000000000000000000000000000000000000000002256000002010800000108001346ffff060000002c000300060009000002080003000800000003002800434c41535349465900000000000000000000000000000000000000000000faffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80020010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d2000004d40700000002010000280053455400000000000000000000000000000000000000000000000000000101000140090002ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800080100000000000000000000000000000000000000000000000040004c4f4700000000000000000000000000000000000000000000000000000004037a7c1c01f17218132145bf18c0cb108156fc8495f4f0e3780733d472fc760000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) 18:47:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, 0x0) 18:47:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x28000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:24 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) recvfrom$netrom(0xffffffffffffffff, &(0x7f0000001440)=""/133, 0x85, 0x121, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001780)=[{&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000180)=""/101, 0xfffffffffffffef5}, {&(0x7f0000000280)=""/4096, 0xfffffffffffffec3}, {&(0x7f0000001700)=""/103, 0x67}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000001300)=""/57, 0x13}, {&(0x7f0000001340)=""/15, 0xf}, {&(0x7f0000001380)=""/182, 0xb6}, {&(0x7f0000001600)=""/248, 0xf8}], 0x9, 0x80000) r0 = open(&(0x7f0000000080)='./file0\x00', 0x101000, 0x9a) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000001280)) [ 156.785137][T11810] binder: 11804:11810 ioctl c0306201 0 returned -14 18:47:24 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:47:24 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 156.983864][T11831] binder: 11829:11831 ioctl c0306201 0 returned -14 18:47:24 executing program 5: socket$packet(0x11, 0x5, 0x300) r0 = open(&(0x7f0000002000)='./bus\x00', 0x800000000141042, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x80000000000, 0x7ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2000000000000000) fallocate(r1, 0x0, 0x40000000, 0x10000101) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000001940)=0x1001, &(0x7f00000001c0)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) bind$bt_sco(r2, &(0x7f0000000440)={0x1f, {0x0, 0x0, 0x81}}, 0x8) getpeername(r2, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x43, 0xffffffffffffff47) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1, &(0x7f0000003080)=""/4096, 0x1000}, 0x934}, {{&(0x7f0000000380)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/86, 0x56}], 0x5, &(0x7f0000000840)=""/103, 0x67}, 0x3b}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/207, 0xcf}], 0x3, &(0x7f0000005080)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000c00)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x5, &(0x7f0000000fc0)=""/130, 0x82}}, {{&(0x7f0000001080)=@nl, 0x80, &(0x7f0000001700)=[{&(0x7f0000001100)=""/150, 0x96}, {&(0x7f00000011c0)=""/222, 0xde}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/214, 0xd6}], 0x7, &(0x7f0000001780)=""/76, 0x4c}, 0xfffffffffffffffc}], 0x5, 0x40000002, &(0x7f0000001340)={0x77359400}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) 18:47:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, 0x0) 18:47:24 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000180)={{0x37, 0x6}, 'port1\x00', 0xb1, 0x100000, 0xfffffffffffffffd, 0x5, 0x4, 0x101, 0x80000001, 0x0, 0x3, 0x5}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:24 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x29000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 18:47:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2a000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:25 executing program 1: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2b000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, 0x0) [ 157.189812][T11850] binder: 11846:11850 ioctl c0306201 0 returned -14 18:47:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0xb12, 0x70bd27, 0x71, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f38}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004850}, 0x4040000) 18:47:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:47:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2c000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:25 executing program 5: socket$packet(0x11, 0x5, 0x300) r0 = open(&(0x7f0000002000)='./bus\x00', 0x800000000141042, 0x0) gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) eventfd2(0x80000000000, 0x7ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x2000000000000000) fallocate(r1, 0x0, 0x40000000, 0x10000101) sendmsg$key(0xffffffffffffffff, 0x0, 0x800) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000001940)=0x1001, &(0x7f00000001c0)=0x2) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0xffffffffffffffff) bind$bt_sco(r2, &(0x7f0000000440)={0x1f, {0x0, 0x0, 0x81}}, 0x8) getpeername(r2, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x43, 0xffffffffffffff47) recvmmsg(r0, &(0x7f0000001800)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/24, 0x18}], 0x1, &(0x7f0000003080)=""/4096, 0x1000}, 0x934}, {{&(0x7f0000000380)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/237, 0xed}, {&(0x7f0000000580)=""/237, 0xed}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000740)=""/86, 0x56}], 0x5, &(0x7f0000000840)=""/103, 0x67}, 0x3b}, {{&(0x7f00000008c0)=@nfc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000a40)=""/151, 0x97}, {&(0x7f0000000b00)=""/207, 0xcf}], 0x3, &(0x7f0000005080)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000000c00)=@hci, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000e00)=""/10, 0xa}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/198, 0xc6}], 0x5, &(0x7f0000000fc0)=""/130, 0x82}}, {{&(0x7f0000001080)=@nl, 0x80, &(0x7f0000001700)=[{&(0x7f0000001100)=""/150, 0x96}, {&(0x7f00000011c0)=""/222, 0xde}, {&(0x7f00000012c0)=""/74, 0x4a}, {&(0x7f00000013c0)=""/166, 0xa6}, {&(0x7f0000001480)=""/199, 0xc7}, {&(0x7f0000001580)=""/116, 0x74}, {&(0x7f0000001600)=""/214, 0xd6}], 0x7, &(0x7f0000001780)=""/76, 0x4c}, 0xfffffffffffffffc}], 0x5, 0x40000002, &(0x7f0000001340)={0x77359400}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) 18:47:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2d000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)) 18:47:25 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15, &(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00'}, 0x1) r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/rt_cache\x00') ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000000)=r0) preadv(r2, &(0x7f0000000240), 0x1000000000000043, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x183601) 18:47:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 157.586699][ T26] audit: type=1800 audit(1561834045.453:38): pid=11849 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16881 res=0 [ 157.611261][ T26] audit: type=1800 audit(1561834045.473:39): pid=11881 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16881 res=0 18:47:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:47:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2e000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000200)={0x103ff, 0x0, &(0x7f0000feb000/0x14000)=nil}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) write$9p(r0, &(0x7f0000000040)="ae372a972615eab8fea1118f47daebde42c178cdd7df", 0x16) fstatfs(r0, &(0x7f0000000180)=""/114) 18:47:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)) 18:47:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2f000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:25 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 18:47:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(0x0, 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:25 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240), 0x2, 0x0) 18:47:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)) 18:47:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 18:47:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x30000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:25 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:25 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x7}) 18:47:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x31000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 18:47:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') write(r0, &(0x7f0000000280)="f55cbcf503e20eb8d5bcaa45df9d06ba8bc342a095619af9321c54e9cdd012ecb50f8e95deab103f65ed92ffe5f0a0ca72dab308b511d3c8727bc46ab6d6aedf76c1f5f4e1722846e279aa4a3a9439dd7c6f8a4b5831fb9fbd23806546e74670f0c9930ab206ca023ea2e09bfeeeba520aa6af3c2f0056d12d8136bfdced3d7783c2d154ce4901a9afc59900e08d002728c7d50fddbe09835694d8e8aa1af16b8ecd4cf1dc4fb8a8495b060917cc5a206128b1ecc1b853c9138f01924bbb7ee3093a1cbc63d3e77c45ffd475668a0563b30354", 0xd3) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:26 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) 18:47:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) fsetxattr(r0, &(0x7f0000000040)=@random={'os2.', 'net/packet\x00'}, &(0x7f00000001c0)='vmnet0cgroupposix_acl_access\x00', 0x235, 0x2) 18:47:26 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f0000003140), 0x24f, 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x1fe, 0x4) getsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0xffffffffffffff0b) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) memfd_create(0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chroot(&(0x7f0000000dc0)='./file0\x00') fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000900)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000ac0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x200}) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000080)) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000000180)=""/36}, {&(0x7f00000001c0)=""/89}, {&(0x7f0000000440)=""/187}, {&(0x7f0000000500)=""/184, 0xffffffe0}, {&(0x7f00000005c0)=""/244}], 0x334, 0x3a) truncate(&(0x7f0000000000)='./file0\x00', 0x5) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) connect$nfc_llcp(r1, &(0x7f00000002c0)={0x27, 0x0, 0x2, 0x2, 0x4, 0x9, "d282cdc6e2e9dd00a90b604e79dafba00953dfd7af05db9c6c29abd1852a4ffe52a64a8438ede7ac4f5201007ecc9ef99025c86d49b3bdddce8304d60d6303", 0x2a}, 0x60) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg(r2, &(0x7f0000000d00)={&(0x7f0000000740)=@xdp={0x2c, 0x4, r4, 0x3b}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000007c0)="c56900fc459482aa781cea9f79885b2fdb4367a613ae4e0fb35476c691029869ce9637f9f96a957a1417caf0311032a5ba78672913110582a83d84c8141a133fca5b4cefaa1c47a6de55d0dc3b0d22a185431aded72d6ed756f3c5e953c6fbb8b1ea43bc13a9992ad555e7003af43e3dc4675da0a5b63a5dd0a8051d00f91353e7f5be1b15b50e5de7ad7895fbfc3939c8e7e462acebd20e2ca69da838de86e3d232bb3449cf3b1bf9b4eaa42cd86d08331a80b21f258c9d2074eff4e4503df1df33c6d59cc40c638dde577e45f8b23df1e3fade216033455bfdbefc80342a10a5accf56cd065382d8", 0xe9}, {&(0x7f00000008c0)="21f6609c543a3a246c6923afc1e11f514ccd5c21815695eed277a545f60174cd48d56ff3938717ec303c9f9448aa65295812dfbbc82a496762a04acf4d78e7d1911ea0e841e8c205dc", 0x49}, {&(0x7f0000000940)="d115c9b3a87a33ae30f29f113f64b0b259d1d8326c0ce96ff04594903f2002cde71f9fc0cc498fc2b4d167269b31d7bc938d7b7e8617bb7add6bb5a2feb329decda14a808f214e1836402beee4eb0a29f6a46b22c1a50f476871bb547b0c7794ec1380ba41483f8e8a6a48b4500877e1a418ee965d0737c83bc89aa47d3f6843fd84f2a07ee07a408b", 0x89}, {&(0x7f0000000a00)="9bfc2536a880c369cfe0f04744bf0a76db7860788d38afdca894f704e33b6732cc090d82984b123cc91f2eba356e99190a8ae42106dcd8c4ad25ab49367c74b3df48e963fe549ddc842eec8fc70ac93f5af0866699b96ada63d3b0e5fb5a60b8f52a", 0x62}, {&(0x7f0000000a80)="55dbf956d9cc4716ebec5ddb2c9d09eb0a8f7637e05c4909f5beb262331d1d69191db2ab5632583af29935b8eca9ffc79b0061cf63f6afd8f1", 0x39}], 0x5, &(0x7f0000000b40)=[{0x38, 0x105, 0x5, "786b051c777bd4ea418a110a540c811f8189101565ae0d932d3df597927c90c2c609909e6a3f00e9"}, {0xf8, 0x10e, 0x3, "d9a2b5606670c3b256eabcf0bcc763e9c4d2a4481fe1bedfcdd46902415d59bfe9b37f85ae4d16693d98e4852c95bc1d3fa7e9a08618d559f6deae9ec462e334d73c03db202be9d6472505cdabd9e1cec0ebc89e141d9e17392935f34a1a4f0201ecf0a2e3e845a6ded6f081059c1b2edf64b62f93d86ce60ad7ee48822cc11fccc38ee0660367541344f037afd21510a2c8f6388218286f8432f7515c2e80e972f3e642ba642eaf750ba254b16c987cb08343192b1b86e3dffe896b697f0877b3afcfe06cad5e319f013b6849363e578937f0de7216c45613254ffb182c29e441954f83da"}, {0x68, 0x19f, 0x400, "be4b3af6c471f7fc30afaaa3b09bc7843fadd98c2644d51f3745a08672909975897cbc0556269e963acbe451b97a735b50e8885919d39d556821846276f536dee264154de4d5547fd3d7847222ff509a49d0"}], 0x198}, 0x10) r5 = msgget$private(0x0, 0x21) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000d40)=""/78) 18:47:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0}) 18:47:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x32000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:26 executing program 5 (fault-call:1 fault-nth:0): r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 18:47:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:26 executing program 0 (fault-call:3 fault-nth:0): syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x33000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240), 0x1bd, 0x0) 18:47:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 18:47:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x34000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:26 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x500) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000180)=0x4c) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') write$P9_RWALK(r1, &(0x7f00000001c0)={0x7e, 0x6f, 0x2, {0x9, [{0x30, 0x3, 0x3}, {0x2, 0x1}, {0x44, 0x4, 0x8}, {0x80, 0x0, 0x400000004}, {0x8, 0x4, 0x5}, {0x40, 0x4, 0x7}, {0x0, 0x1}, {0x42, 0x2, 0x7}, {0x84, 0x0, 0x4}]}}, 0x44e) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 18:47:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:26 executing program 3: r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x7, 0x30000) r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0xfe80ffff00000000}}}}, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000280)={@remote}, &(0x7f00000002c0)=0x14) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x35000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:26 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0x18) creat(0x0, 0x0) 18:47:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000280)={0x3, 0x0, [{}, {}, {}]}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) sysfs$2(0x2, 0x11ed72d5, &(0x7f0000000180)=""/125) 18:47:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x36000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 159.094667][ T7720] binder: unexpected work type, 4, not freed 18:47:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x37000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 159.261520][ T7720] binder: unexpected work type, 4, not freed 18:47:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) 18:47:27 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0x200003ca) creat(0x0, 0x0) 18:47:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000040)={0x2, [0x0, 0x0]}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000180)=""/73) 18:47:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, 0x0}}], 0x0, 0x0, 0x0}) [ 159.476814][ T7729] binder: unexpected work type, 4, not freed 18:47:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x38000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:27 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f00000000c0)={0x6, 0x3, @start={0xffff, 0x1}}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) sendto$netrom(r0, &(0x7f0000000440)="b83f7d71f89b8b1a80b3bcbeda774d455c8c38425337343a7119f018f66abed1038473c3ff3fb1ad542003dda93e3f415ae73ec6975e334703c07eb8822ffb3a6cb25de665a639dc7a772d8c931e5e74c4b9a0e5baaa61977f638dc1394461dcdf667eecb8790311100294e65ecaa3a398657a6c375bdd464108c5ada34ef30cd3a6aa947e7f4b06404f8a74b376c3968f9f33e77798b1d91d6b6f498a58522154e85f75b7324fc510f54eae0f85b63a55495458a48ad94e5368ea2dec6a328dd235359d78de", 0xc6, 0x80, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=@deltaction={0x184, 0x31, 0x522, 0x70bd2a, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0x18, 0x19, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x17, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0xb, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x16, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @TCA_ACT_TAB={0xb8, 0x1, [{0x14, 0xb, @TCA_ACT_KIND={0xc, 0x1, 'police\x00'}}, {0x10, 0x1b, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x4, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x15, @TCA_ACT_INDEX={0x8, 0x3, 0x1db}}, {0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x18, 0x5, @TCA_ACT_KIND={0x10, 0x1, 'tunnel_key\x00'}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x14, 0xf, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x5, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1d, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1c, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0xf, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1d, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x8) fremovexattr(r1, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') 18:47:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x39000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/packet\x00') ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040)) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/30, 0x1e}, {&(0x7f00000000c0)=""/137, 0x89}], 0x2, 0x0) 18:47:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, 0x0}}], 0x0, 0x0, 0x0}) 18:47:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:27 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000000)='vfat\x00', 0x5) 18:47:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3a000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:27 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, 0x0}}], 0x0, 0x0, 0x0}) 18:47:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3b000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:27 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:27 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:27 executing program 4: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0x18) creat(0x0, 0x0) 18:47:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:28 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0x3f, 0x1, 0x80000000, 0x5}, {0x4, 0x1, 0x6, 0x3}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000000060000000000000d500000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000001349bda00000000000000000000000000000000000000000005c4023a900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000095948a3d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000017e600"/213], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/99], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = shmget$private(0x0, 0x4000, 0xc0, &(0x7f0000ff9000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000100)=""/28) 18:47:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3c000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:28 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:28 executing program 3 (fault-call:4 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3f00}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 160.395021][ T26] audit: type=1326 audit(1561834048.253:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12195 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c35a code=0x0 18:47:28 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x100000000014b042, 0x0) ioctl$CAPI_REGISTER(r0, 0x400c4301, &(0x7f0000000000)={0x0, 0x0, 0x79c4}) r1 = dup2(r0, r0) write$FUSE_BMAP(r1, &(0x7f0000000240)={0x18}, 0x20000258) 18:47:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3d000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 160.499608][T12213] FAULT_INJECTION: forcing a failure. [ 160.499608][T12213] name failslab, interval 1, probability 0, space 0, times 0 [ 160.535894][T12213] CPU: 1 PID: 12213 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 160.543926][T12213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 160.553994][T12213] Call Trace: [ 160.557307][T12213] dump_stack+0x1d8/0x2f8 [ 160.561658][T12213] should_fail+0x608/0x860 [ 160.566083][T12213] ? setup_fault_attr+0x2b0/0x2b0 [ 160.571096][T12213] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 160.571120][T12213] __should_failslab+0x11a/0x160 [ 160.571130][T12213] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 160.571140][T12213] should_failslab+0x9/0x20 [ 160.571148][T12213] __kmalloc+0x7a/0x310 [ 160.571157][T12213] ? tomoyo_realpath_from_path+0xca/0x7c0 [ 160.571169][T12213] tomoyo_realpath_from_path+0xdc/0x7c0 [ 160.571186][T12213] tomoyo_path_number_perm+0x1e0/0x740 [ 160.571200][T12213] ? trace_lock_acquire+0x190/0x190 [ 160.601912][T12213] ? smack_log+0xe3/0x4e0 [ 160.601925][T12213] ? tomoyo_check_path_acl+0x180/0x180 [ 160.601938][T12213] ? smk_access+0x4f0/0x4f0 [ 160.627868][T12213] ? smk_access+0x18c/0x4f0 [ 160.627901][T12213] ? fget_many+0x30/0x30 [ 160.627912][T12213] ? debug_smp_processor_id+0x1c/0x20 [ 160.627926][T12213] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 160.652545][T12213] tomoyo_file_ioctl+0x23/0x30 [ 160.657322][T12213] security_file_ioctl+0x6d/0xd0 [ 160.662275][T12213] __x64_sys_ioctl+0xa3/0x120 [ 160.666959][T12213] do_syscall_64+0xfe/0x140 [ 160.671472][T12213] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 160.677368][T12213] RIP: 0033:0x459519 18:47:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x40000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:28 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) [ 160.681258][T12213] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 160.700851][T12213] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.700860][T12213] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 160.700865][T12213] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 160.700869][T12213] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 160.700874][T12213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 160.700878][T12213] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 [ 160.717579][T12213] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.727869][ T7729] binder: unexpected work type, 4, not freed [ 160.803383][ T7729] binder: unexpected work type, 4, not freed 18:47:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:29 executing program 3 (fault-call:4 fault-nth:1): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x50000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:29 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000200)='system.posix_acl_default\x00', 0x80, 0xffffffffffffffff) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) getitimer(0x0, &(0x7f00000000c0)) creat(0x0, 0x0) 18:47:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 161.134238][ T26] audit: type=1326 audit(1561834048.993:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12195 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c35a code=0x0 [ 161.204279][T12246] FAULT_INJECTION: forcing a failure. [ 161.204279][T12246] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.217514][T12246] CPU: 0 PID: 12246 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 161.225473][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.235660][T12246] Call Trace: [ 161.238959][T12246] dump_stack+0x1d8/0x2f8 [ 161.243414][T12246] should_fail+0x608/0x860 [ 161.247842][T12246] ? setup_fault_attr+0x2b0/0x2b0 [ 161.252867][T12246] ? __bfs+0x550/0x550 [ 161.256948][T12246] should_fail_alloc_page+0x55/0x60 [ 161.264583][T12246] prepare_alloc_pages+0x283/0x460 [ 161.269702][T12246] __alloc_pages_nodemask+0x11c/0x790 [ 161.275065][T12246] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 161.280592][T12246] ? __lock_acquire+0xcf7/0x1a40 [ 161.285517][T12246] kmem_getpages+0x46/0x480 [ 161.289997][T12246] cache_grow_begin+0x7e/0x2c0 [ 161.294755][T12246] cache_alloc_refill+0x311/0x3f0 [ 161.299781][T12246] ? check_preemption_disabled+0xb7/0x280 [ 161.305484][T12246] __kmalloc+0x2e5/0x310 [ 161.309792][T12246] ? tomoyo_realpath_from_path+0xdc/0x7c0 [ 161.315500][T12246] tomoyo_realpath_from_path+0xdc/0x7c0 [ 161.321037][T12246] tomoyo_path_number_perm+0x1e0/0x740 [ 161.326483][T12246] ? trace_lock_acquire+0x190/0x190 [ 161.331666][T12246] ? smack_log+0xe3/0x4e0 [ 161.335973][T12246] ? tomoyo_check_path_acl+0x180/0x180 [ 161.341418][T12246] ? smk_access+0x4f0/0x4f0 [ 161.345917][T12246] ? smk_access+0x18c/0x4f0 [ 161.350436][T12246] ? fget_many+0x30/0x30 [ 161.354713][T12246] ? debug_smp_processor_id+0x1c/0x20 [ 161.360071][T12246] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 161.366123][T12246] tomoyo_file_ioctl+0x23/0x30 [ 161.370883][T12246] security_file_ioctl+0x6d/0xd0 [ 161.375818][T12246] __x64_sys_ioctl+0xa3/0x120 [ 161.380502][T12246] do_syscall_64+0xfe/0x140 [ 161.385010][T12246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 161.411193][T12246] RIP: 0033:0x459519 [ 161.415076][T12246] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 161.436134][T12246] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.444533][T12246] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 18:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 161.452499][T12246] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 161.460463][T12246] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 161.468513][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 161.476480][T12246] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 [ 161.492599][ T7720] binder: unexpected work type, 4, not freed 18:47:29 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)) pwritev(r0, 0x0, 0x0, 0x0) 18:47:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0xf, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 161.534751][ T7720] binder: unexpected work type, 4, not freed 18:47:29 executing program 3 (fault-call:4 fault-nth:2): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x65580000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:29 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x61, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x10, &(0x7f0000000100)={&(0x7f0000000580)=""/4096, 0x1000, r1}}, 0x10) creat(0x0, 0x0) 18:47:29 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x3, 0x2) mount$9p_virtio(&(0x7f0000000300)='/dev/vbi#\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x10, &(0x7f0000000400)={'trans=virtio,', {[{@privport='privport'}, {@loose='loose'}], [{@appraise_type='appraise_type=imasig'}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@obj_type={'obj_type', 0x3d, 'GPLnodevGPL^'}}]}}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x109, 0x2000) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000180)="d84878fdab2d17", 0x7, 0x4000001, 0x0, 0x0) recvfrom$rxrpc(r2, &(0x7f00000001c0)=""/226, 0xe2, 0x100, &(0x7f00000002c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x24) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r1, 0x0, 0x102000002) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="f11825c13ffad5", 0x7) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) 18:47:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) 18:47:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x81000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 161.770344][T12280] FAULT_INJECTION: forcing a failure. [ 161.770344][T12280] name failslab, interval 1, probability 0, space 0, times 0 [ 161.783689][T12280] CPU: 1 PID: 12280 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 161.791874][T12280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 161.801980][T12280] Call Trace: [ 161.805389][T12280] dump_stack+0x1d8/0x2f8 [ 161.809733][T12280] should_fail+0x608/0x860 [ 161.814493][T12280] ? setup_fault_attr+0x2b0/0x2b0 [ 161.814506][T12280] ? tomoyo_encode2+0x273/0x5a0 [ 161.814525][T12280] __should_failslab+0x11a/0x160 [ 161.814536][T12280] ? tomoyo_encode2+0x273/0x5a0 18:47:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 161.814547][T12280] should_failslab+0x9/0x20 [ 161.814556][T12280] __kmalloc+0x7a/0x310 [ 161.814571][T12280] tomoyo_encode2+0x273/0x5a0 [ 161.814586][T12280] tomoyo_realpath_from_path+0x769/0x7c0 [ 161.814604][T12280] tomoyo_path_number_perm+0x1e0/0x740 [ 161.814614][T12280] ? trace_lock_acquire+0x190/0x190 [ 161.814625][T12280] ? smack_log+0xe3/0x4e0 [ 161.814637][T12280] ? tomoyo_check_path_acl+0x180/0x180 [ 161.814647][T12280] ? smk_access+0x4f0/0x4f0 [ 161.814657][T12280] ? smk_access+0x18c/0x4f0 18:47:29 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x7ff, 0x200001) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000240)={0x8, 0x9, 0x80000000000000, 0x4c, &(0x7f0000000180)=""/76, 0xcd, &(0x7f0000000440)=""/205, 0x98, &(0x7f0000000580)=""/152}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2000, 0x0) listen(r1, 0xb6b0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x101) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80800) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 161.814696][T12280] ? fget_many+0x30/0x30 [ 161.814707][T12280] ? debug_smp_processor_id+0x1c/0x20 [ 161.814717][T12280] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 161.814730][T12280] tomoyo_file_ioctl+0x23/0x30 [ 161.814741][T12280] security_file_ioctl+0x6d/0xd0 [ 161.814754][T12280] __x64_sys_ioctl+0xa3/0x120 [ 161.814768][T12280] do_syscall_64+0xfe/0x140 [ 161.814781][T12280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 161.814790][T12280] RIP: 0033:0x459519 18:47:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 161.814802][T12280] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 161.814807][T12280] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.814817][T12280] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 161.814823][T12280] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 161.814828][T12280] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:47:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x88470000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 161.814835][T12280] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 161.814841][T12280] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 [ 161.893406][T12280] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.903286][ T7729] binder: unexpected work type, 4, not freed 18:47:29 executing program 3 (fault-call:4 fault-nth:3): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 162.107082][ T7729] binder: unexpected work type, 4, not freed 18:47:30 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x3, 0x2) mount$9p_virtio(&(0x7f0000000300)='/dev/vbi#\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x10, &(0x7f0000000400)={'trans=virtio,', {[{@privport='privport'}, {@loose='loose'}], [{@appraise_type='appraise_type=imasig'}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}, {@obj_type={'obj_type', 0x3d, 'GPLnodevGPL^'}}]}}) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x105082) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x109, 0x2000) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000180)="d84878fdab2d17", 0x7, 0x4000001, 0x0, 0x0) recvfrom$rxrpc(r2, &(0x7f00000001c0)=""/226, 0xe2, 0x100, &(0x7f00000002c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, 0x24) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r1, 0x0, 0x102000002) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="f11825c13ffad5", 0x7) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) ioctl$TIOCLINUX2(0xffffffffffffffff, 0x541c, 0x0) 18:47:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 162.192194][T12323] FAULT_INJECTION: forcing a failure. [ 162.192194][T12323] name failslab, interval 1, probability 0, space 0, times 0 18:47:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x88480000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 162.283471][T12323] CPU: 0 PID: 12323 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 162.291510][T12323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.301578][T12323] Call Trace: [ 162.305151][T12323] dump_stack+0x1d8/0x2f8 [ 162.309571][T12323] should_fail+0x608/0x860 [ 162.314633][T12323] ? setup_fault_attr+0x2b0/0x2b0 [ 162.319676][T12323] __should_failslab+0x11a/0x160 [ 162.324619][T12323] should_failslab+0x9/0x20 18:47:30 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x100000000) creat(0x0, 0x0) 18:47:30 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 162.329133][T12323] kmem_cache_alloc_trace+0x5d/0x2c0 [ 162.334515][T12323] ? binder_get_thread+0x258/0x8f0 [ 162.339627][T12323] binder_get_thread+0x258/0x8f0 [ 162.344561][T12323] ? __might_sleep+0x8f/0x100 [ 162.349230][T12323] binder_ioctl+0x208/0x7bc0 [ 162.354609][T12323] ? stack_trace_save+0x111/0x1e0 [ 162.359647][T12323] ? check_preemption_disabled+0xb7/0x280 [ 162.365465][T12323] ? tomoyo_path_number_perm+0x587/0x740 [ 162.371128][T12323] ? trace_hardirqs_off+0x74/0x80 [ 162.371141][T12323] ? quarantine_put+0xb7/0x1f0 [ 162.371152][T12323] ? tomoyo_path_number_perm+0x587/0x740 18:47:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x88a8ffff, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:30 executing program 3 (fault-call:4 fault-nth:4): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 162.371161][T12323] ? __kasan_slab_free+0x19d/0x1e0 [ 162.371168][T12323] ? __kasan_slab_free+0x12a/0x1e0 [ 162.371174][T12323] ? kasan_slab_free+0xe/0x10 18:47:30 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 18:47:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 162.371180][T12323] ? kfree+0xae/0x120 18:47:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:30 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) io_uring_setup(0xf73, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3, 0x45}) [ 162.371188][T12323] ? tomoyo_path_number_perm+0x587/0x740 [ 162.371196][T12323] ? tomoyo_file_ioctl+0x23/0x30 [ 162.371204][T12323] ? security_file_ioctl+0x6d/0xd0 [ 162.371213][T12323] ? __x64_sys_ioctl+0xa3/0x120 [ 162.371223][T12323] ? binder_poll+0x540/0x540 [ 162.371234][T12323] ? kasan_check_write+0x14/0x20 [ 162.371244][T12323] ? do_raw_spin_lock+0x143/0x3a0 [ 162.371268][T12323] ? _raw_spin_unlock_irqrestore+0xbc/0xe0 [ 162.371284][T12323] ? rcu_lock_release+0x9/0x30 [ 162.371301][T12323] ? tomoyo_path_number_perm+0x5f0/0x740 [ 162.371310][T12323] ? trace_lock_acquire+0x190/0x190 [ 162.371323][T12323] ? tomoyo_check_path_acl+0x180/0x180 [ 162.371334][T12323] ? smk_access+0x4f0/0x4f0 [ 162.371341][T12323] ? smk_access+0x18c/0x4f0 [ 162.371357][T12323] ? binder_poll+0x540/0x540 [ 162.371367][T12323] do_vfs_ioctl+0x7d4/0x1890 [ 162.371383][T12323] ? ioctl_preallocate+0x240/0x240 [ 162.371406][T12323] ? fget_many+0x30/0x30 [ 162.371417][T12323] ? debug_smp_processor_id+0x1c/0x20 [ 162.371427][T12323] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 162.371438][T12323] ? tomoyo_file_ioctl+0x23/0x30 [ 162.371445][T12323] ? security_file_ioctl+0xa1/0xd0 [ 162.371454][T12323] __x64_sys_ioctl+0xe3/0x120 [ 162.371466][T12323] do_syscall_64+0xfe/0x140 [ 162.371475][T12323] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 162.371483][T12323] RIP: 0033:0x459519 [ 162.371491][T12323] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 162.371495][T12323] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.371503][T12323] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 162.371507][T12323] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 162.371511][T12323] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 162.371515][T12323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 162.371520][T12323] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 [ 162.377311][T12323] binder: 12318:12323 ioctl c0306201 20000440 returned -12 [ 162.605587][T12353] FAULT_INJECTION: forcing a failure. [ 162.605587][T12353] name failslab, interval 1, probability 0, space 0, times 0 [ 162.605601][T12353] CPU: 1 PID: 12353 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 18:47:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x88480000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:30 executing program 3 (fault-call:4 fault-nth:5): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:30 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00e0000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x407, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:30 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r1 = creat(0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000180)={r2, &(0x7f00000000c0)=""/75}) [ 162.605606][T12353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 162.605610][T12353] Call Trace: [ 162.605626][T12353] dump_stack+0x1d8/0x2f8 [ 162.605641][T12353] should_fail+0x608/0x860 [ 162.605651][T12353] ? setup_fault_attr+0x2b0/0x2b0 [ 162.605669][T12353] __should_failslab+0x11a/0x160 [ 162.605680][T12353] should_failslab+0x9/0x20 [ 162.605688][T12353] kmem_cache_alloc_trace+0x5d/0x2c0 [ 162.605698][T12353] ? binder_transaction+0x207e/0xb990 [ 162.605709][T12353] binder_transaction+0x207e/0xb990 18:47:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 162.605727][T12353] ? stack_trace_save+0x1e0/0x1e0 [ 162.605737][T12353] ? rcu_lock_release+0x26/0x30 [ 162.605747][T12353] ? stack_trace_save+0x1e0/0x1e0 [ 162.605758][T12353] ? __kernel_text_address+0x9a/0x110 [ 162.605769][T12353] ? unwind_get_return_address+0x4c/0x90 [ 162.605789][T12353] ? __bfs+0x550/0x550 [ 162.605799][T12353] ? __bfs+0x550/0x550 [ 162.605816][T12353] ? binder_free_buf+0xa30/0xa30 [ 162.605836][T12353] ? __kasan_kmalloc+0x178/0x1b0 [ 162.605847][T12353] ? __lock_acquire+0xcf7/0x1a40 [ 162.605866][T12353] ? trace_lock_acquire+0x190/0x190 [ 162.605878][T12353] ? trace_lock_acquire+0x190/0x190 [ 162.605888][T12353] ? __read_once_size_nocheck+0x10/0x10 [ 162.605896][T12353] ? unwind_next_frame+0x415/0x870 [ 162.605905][T12353] ? should_fail+0x182/0x860 [ 162.605916][T12353] ? check_preemption_disabled+0x47/0x280 [ 162.605935][T12353] ? __might_fault+0xf9/0x160 [ 162.605950][T12353] ? kasan_check_write+0x14/0x20 [ 162.605957][T12353] ? _copy_from_user+0xe0/0x120 [ 162.605966][T12353] binder_ioctl+0x1372/0x7bc0 [ 162.605979][T12353] ? stack_trace_save+0x111/0x1e0 [ 162.605992][T12353] ? check_preemption_disabled+0xb7/0x280 [ 162.606011][T12353] ? binder_poll+0x540/0x540 [ 162.606020][T12353] ? kasan_check_write+0x14/0x20 [ 162.606028][T12353] ? do_raw_spin_lock+0x143/0x3a0 [ 162.606055][T12353] ? rcu_lock_release+0x9/0x30 [ 162.606072][T12353] ? tomoyo_path_number_perm+0x5f0/0x740 [ 162.606081][T12353] ? trace_lock_acquire+0x190/0x190 [ 162.606096][T12353] ? tomoyo_check_path_acl+0x180/0x180 [ 162.606107][T12353] ? smk_access+0x4f0/0x4f0 [ 162.606117][T12353] ? smk_access+0x18c/0x4f0 [ 162.606126][T12353] ? binder_poll+0x540/0x540 [ 162.606137][T12353] do_vfs_ioctl+0x7d4/0x1890 [ 162.606150][T12353] ? ioctl_preallocate+0x240/0x240 [ 162.606170][T12353] ? fget_many+0x30/0x30 [ 162.606178][T12353] ? debug_smp_processor_id+0x1c/0x20 [ 162.606186][T12353] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 162.606204][T12353] ? tomoyo_file_ioctl+0x23/0x30 [ 162.606214][T12353] ? security_file_ioctl+0xa1/0xd0 [ 162.606225][T12353] __x64_sys_ioctl+0xe3/0x120 [ 162.606238][T12353] do_syscall_64+0xfe/0x140 [ 162.606251][T12353] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 162.606260][T12353] RIP: 0033:0x459519 [ 162.606269][T12353] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 162.606274][T12353] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.606284][T12353] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 162.606291][T12353] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 162.606297][T12353] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 162.606303][T12353] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 162.606308][T12353] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 [ 163.028665][T12382] FAULT_INJECTION: forcing a failure. [ 163.028665][T12382] name failslab, interval 1, probability 0, space 0, times 0 [ 163.069487][T12382] CPU: 1 PID: 12382 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 163.105623][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 163.105629][T12382] Call Trace: [ 163.105646][T12382] dump_stack+0x1d8/0x2f8 [ 163.105664][T12382] should_fail+0x608/0x860 [ 163.105674][T12382] ? setup_fault_attr+0x2b0/0x2b0 [ 163.105691][T12382] __should_failslab+0x11a/0x160 [ 163.115869][T12382] should_failslab+0x9/0x20 [ 163.115879][T12382] kmem_cache_alloc_trace+0x5d/0x2c0 [ 163.115889][T12382] ? binder_transaction+0x2168/0xb990 [ 163.115902][T12382] binder_transaction+0x2168/0xb990 [ 163.131724][T12382] ? stack_trace_save+0x1e0/0x1e0 [ 163.131742][T12382] ? stack_trace_save+0x1e0/0x1e0 [ 163.142028][T12382] ? __kernel_text_address+0x9a/0x110 [ 163.142042][T12382] ? unwind_get_return_address+0x4c/0x90 [ 163.142064][T12382] ? __bfs+0x550/0x550 [ 163.142075][T12382] ? __bfs+0x550/0x550 [ 163.142092][T12382] ? binder_free_buf+0xa30/0xa30 [ 163.142106][T12382] ? __kasan_kmalloc+0x178/0x1b0 [ 163.187086][T12382] ? __lock_acquire+0xcf7/0x1a40 [ 163.187106][T12382] ? trace_lock_acquire+0x190/0x190 [ 163.187116][T12382] ? trace_lock_acquire+0x190/0x190 [ 163.187130][T12382] ? __read_once_size_nocheck+0x10/0x10 [ 163.481036][T12382] ? unwind_next_frame+0x415/0x870 [ 163.486318][T12382] ? should_fail+0x182/0x860 [ 163.490904][T12382] ? check_preemption_disabled+0x47/0x280 [ 163.496616][T12382] ? __might_fault+0xf9/0x160 [ 163.501275][T12382] ? kasan_check_write+0x14/0x20 [ 163.506198][T12382] ? _copy_from_user+0xe0/0x120 [ 163.511034][T12382] binder_ioctl+0x1372/0x7bc0 [ 163.515694][T12382] ? stack_trace_save+0x111/0x1e0 [ 163.520697][T12382] ? check_preemption_disabled+0xb7/0x280 [ 163.526397][T12382] ? binder_poll+0x540/0x540 [ 163.530962][T12382] ? kasan_check_write+0x14/0x20 [ 163.535874][T12382] ? do_raw_spin_lock+0x143/0x3a0 [ 163.540899][T12382] ? rcu_lock_release+0x9/0x30 [ 163.545642][T12382] ? tomoyo_path_number_perm+0x5f0/0x740 [ 163.551252][T12382] ? trace_lock_acquire+0x190/0x190 [ 163.556432][T12382] ? tomoyo_check_path_acl+0x180/0x180 [ 163.561867][T12382] ? smk_access+0x4f0/0x4f0 [ 163.566351][T12382] ? smk_access+0x18c/0x4f0 [ 163.570917][T12382] ? binder_poll+0x540/0x540 [ 163.575484][T12382] do_vfs_ioctl+0x7d4/0x1890 [ 163.580072][T12382] ? ioctl_preallocate+0x240/0x240 [ 163.585179][T12382] ? fget_many+0x30/0x30 [ 163.589397][T12382] ? debug_smp_processor_id+0x1c/0x20 [ 163.594741][T12382] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 163.600789][T12382] ? tomoyo_file_ioctl+0x23/0x30 [ 163.605703][T12382] ? security_file_ioctl+0xa1/0xd0 [ 163.610879][T12382] __x64_sys_ioctl+0xe3/0x120 [ 163.615537][T12382] do_syscall_64+0xfe/0x140 [ 163.620129][T12382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 163.626002][T12382] RIP: 0033:0x459519 [ 163.629876][T12382] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 163.649544][T12382] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.657929][T12382] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 163.665894][T12382] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 163.673845][T12382] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 163.681796][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 163.689750][T12382] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 18:47:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xefffffff, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000002", @ANYRES16=r2, @ANYBLOB="000429bd7000fedbdf250700000048000300140002006873723000000000000000000000000008000800010000000800010002000000080007004e2000000800080005000000080007004e200000080007004e200000080005000000000030000300080007004e2300000800080040000000140002006e723000000000000000000000000000080008000000000008000500fffbffff3400030008000500ac1414bb14000600fe8000000000000000000000000000aa14000600ff020000000000000000000000000001"], 0xd0}}, 0xc000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000100)={r3, 0xdc, 0x30, 0x2b2b, 0x2}, &(0x7f0000000140)=0x18) 18:47:31 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 18:47:31 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:31 executing program 3 (fault-call:4 fault-nth:6): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:31 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x3, 0x0, 0x2, 0x101}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)={0x8001, r1, 0x2, 0x6}) creat(0x0, 0x0) 18:47:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:31 executing program 4: ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0}) 18:47:31 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x40a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 163.975474][T12419] FAULT_INJECTION: forcing a failure. [ 163.975474][T12419] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 164.008376][T12419] CPU: 1 PID: 12419 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 164.016400][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.026452][T12419] Call Trace: [ 164.026511][T12419] dump_stack+0x1d8/0x2f8 [ 164.026526][T12419] should_fail+0x608/0x860 [ 164.026539][T12419] ? setup_fault_attr+0x2b0/0x2b0 [ 164.026558][T12419] should_fail_alloc_page+0x55/0x60 [ 164.026567][T12419] prepare_alloc_pages+0x283/0x460 [ 164.026581][T12419] __alloc_pages_nodemask+0x11c/0x790 [ 164.038593][T12419] ? gfp_pfmemalloc_allowed+0x130/0x130 [ 164.038624][T12419] alloc_pages_current+0x2fb/0x540 [ 164.038639][T12419] binder_update_page_range+0x619/0xc00 [ 164.075460][T12419] ? trace_lock_acquire+0x190/0x190 [ 164.080681][T12419] ? binder_alloc_copy_from_buffer+0x50/0x50 [ 164.086679][T12419] ? check_preemption_disabled+0x47/0x280 [ 164.092419][T12419] binder_alloc_new_buf+0xc2d/0x15a0 [ 164.097722][T12419] binder_transaction+0x2917/0xb990 [ 164.097742][T12419] ? stack_trace_save+0x1e0/0x1e0 [ 164.097754][T12419] ? stack_trace_save+0x1e0/0x1e0 [ 164.097763][T12419] ? __kernel_text_address+0x9a/0x110 [ 164.097775][T12419] ? unwind_get_return_address+0x4c/0x90 18:47:32 executing program 4: r0 = socket$inet6(0xa, 0xe, 0x800) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r1, &(0x7f00000000c0)={{}, [@null, @default, @bcast, @netrom, @remote, @netrom, @netrom, @default]}, &(0x7f0000000140)=0x48) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 164.097793][T12419] ? __bfs+0x550/0x550 [ 164.097808][T12419] ? __bfs+0x550/0x550 [ 164.108012][T12419] ? binder_free_buf+0xa30/0xa30 [ 164.108025][T12419] ? __kasan_kmalloc+0x178/0x1b0 [ 164.108039][T12419] ? __lock_acquire+0xcf7/0x1a40 [ 164.108055][T12419] ? trace_lock_acquire+0x190/0x190 [ 164.108065][T12419] ? trace_lock_acquire+0x190/0x190 [ 164.108076][T12419] ? __read_once_size_nocheck+0x10/0x10 [ 164.108083][T12419] ? unwind_next_frame+0x415/0x870 [ 164.108094][T12419] ? should_fail+0x182/0x860 [ 164.108105][T12419] ? check_preemption_disabled+0x47/0x280 [ 164.108122][T12419] ? __might_fault+0xf9/0x160 [ 164.108140][T12419] ? kasan_check_write+0x14/0x20 [ 164.108149][T12419] ? _copy_from_user+0xe0/0x120 [ 164.108166][T12419] binder_ioctl+0x1372/0x7bc0 [ 164.193062][T12419] ? stack_trace_save+0x111/0x1e0 [ 164.202737][T12419] ? check_preemption_disabled+0xb7/0x280 [ 164.208684][T12419] ? binder_poll+0x540/0x540 [ 164.213294][T12419] ? kasan_check_write+0x14/0x20 [ 164.218226][T12419] ? do_raw_spin_lock+0x143/0x3a0 [ 164.218261][T12419] ? rcu_lock_release+0x9/0x30 [ 164.218275][T12419] ? tomoyo_path_number_perm+0x5f0/0x740 [ 164.218284][T12419] ? trace_lock_acquire+0x190/0x190 [ 164.218297][T12419] ? tomoyo_check_path_acl+0x180/0x180 [ 164.218307][T12419] ? smk_access+0x4f0/0x4f0 [ 164.218316][T12419] ? smk_access+0x18c/0x4f0 [ 164.218326][T12419] ? binder_poll+0x540/0x540 [ 164.218338][T12419] do_vfs_ioctl+0x7d4/0x1890 [ 164.218355][T12419] ? ioctl_preallocate+0x240/0x240 [ 164.218376][T12419] ? fget_many+0x30/0x30 18:47:32 executing program 4: r0 = socket$inet6(0xa, 0xe, 0x800) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept$ax25(r1, &(0x7f00000000c0)={{}, [@null, @default, @bcast, @netrom, @remote, @netrom, @netrom, @default]}, &(0x7f0000000140)=0x48) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) [ 164.218393][T12419] ? debug_smp_processor_id+0x1c/0x20 [ 164.244478][T12419] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 164.253452][T12419] ? tomoyo_file_ioctl+0x23/0x30 [ 164.253465][T12419] ? security_file_ioctl+0xa1/0xd0 [ 164.253480][T12419] __x64_sys_ioctl+0xe3/0x120 [ 164.253495][T12419] do_syscall_64+0xfe/0x140 [ 164.253511][T12419] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.310704][T12419] RIP: 0033:0x459519 18:47:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 164.314601][T12419] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 164.335247][T12419] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.335258][T12419] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 164.335263][T12419] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 164.335269][T12419] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 164.335274][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 164.335279][T12419] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 [ 164.369087][T12419] binder_alloc: 12417: binder_alloc_buf failed for page at 0000000050b7954d 18:47:32 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 18:47:32 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socketpair(0x4, 0xa, 0x800, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x9c, "e44064327cc02e63a98889a6f25ce91df3bab39b9dba6a338df6ae947063e3a1efb3694f7dd7d3769261af07a8147bd26b56397caba6703e41407de2a0c6ceca54094d4afffb17dd4836a769310923b232898c9a053d1697bd7cf3cdc6c610af89248bd76dbaf315eab585760b89003ae5965547b5e8563aeab5354a2c00edece9a5798fb97a37260999f8efe11dce38ee52d2f8f9e37b582e4b06b7"}, &(0x7f0000000100)=0xa4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x7, 0xb1b, 0xc, 0x0, 0x20, 0x60a, 0x4eba3064, 0x1, r1}, &(0x7f00000001c0)=0x20) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffa888, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:32 executing program 3 (fault-call:4 fault-nth:7): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x40b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000ec0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r1, 0x0, 0x9b8}, 0xc) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x200000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) [ 164.697761][T12456] FAULT_INJECTION: forcing a failure. [ 164.697761][T12456] name failslab, interval 1, probability 0, space 0, times 0 [ 164.735113][T12456] CPU: 0 PID: 12456 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 164.743139][T12456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 164.753189][T12456] Call Trace: [ 164.753209][T12456] dump_stack+0x1d8/0x2f8 [ 164.753224][T12456] should_fail+0x608/0x860 [ 164.753235][T12456] ? setup_fault_attr+0x2b0/0x2b0 [ 164.753252][T12456] __should_failslab+0x11a/0x160 [ 164.753267][T12456] should_failslab+0x9/0x20 [ 164.779734][T12456] kmem_cache_alloc_trace+0x5d/0x2c0 [ 164.785020][T12456] ? binder_new_node+0x59/0x880 [ 164.785034][T12456] binder_new_node+0x59/0x880 [ 164.794541][T12456] ? _raw_spin_unlock+0x2c/0x50 [ 164.799383][T12456] ? binder_get_node+0x1f4/0x290 [ 164.804306][T12456] binder_transaction+0x4616/0xb990 [ 164.809506][T12456] ? unwind_get_return_address+0x4c/0x90 [ 164.815221][T12456] ? binder_free_buf+0xa30/0xa30 [ 164.820140][T12456] ? __kasan_kmalloc+0x178/0x1b0 [ 164.825062][T12456] ? __lock_acquire+0xcf7/0x1a40 [ 164.829988][T12456] ? trace_lock_acquire+0x190/0x190 [ 164.835863][T12456] ? trace_lock_acquire+0x190/0x190 [ 164.841039][T12456] ? __read_once_size_nocheck+0x10/0x10 [ 164.846563][T12456] ? unwind_next_frame+0x415/0x870 [ 164.851654][T12456] ? should_fail+0x182/0x860 [ 164.856230][T12456] ? check_preemption_disabled+0x47/0x280 [ 164.861936][T12456] ? __might_fault+0xf9/0x160 [ 164.866596][T12456] ? kasan_check_write+0x14/0x20 [ 164.871512][T12456] ? _copy_from_user+0xe0/0x120 [ 164.876345][T12456] binder_ioctl+0x1372/0x7bc0 [ 164.881007][T12456] ? stack_trace_save+0x111/0x1e0 [ 164.886135][T12456] ? check_preemption_disabled+0xb7/0x280 [ 164.891847][T12456] ? binder_poll+0x540/0x540 [ 164.896416][T12456] ? kasan_check_write+0x14/0x20 [ 164.901332][T12456] ? do_raw_spin_lock+0x143/0x3a0 [ 164.906357][T12456] ? rcu_lock_release+0x9/0x30 [ 164.911103][T12456] ? tomoyo_path_number_perm+0x5f0/0x740 [ 164.916711][T12456] ? trace_lock_acquire+0x190/0x190 [ 164.921891][T12456] ? tomoyo_check_path_acl+0x180/0x180 [ 164.927352][T12456] ? smk_access+0x4f0/0x4f0 [ 164.931835][T12456] ? smk_access+0x18c/0x4f0 [ 164.936314][T12456] ? binder_poll+0x540/0x540 [ 164.940884][T12456] do_vfs_ioctl+0x7d4/0x1890 [ 164.945465][T12456] ? ioctl_preallocate+0x240/0x240 [ 164.950567][T12456] ? fget_many+0x30/0x30 [ 164.954786][T12456] ? debug_smp_processor_id+0x1c/0x20 [ 164.960139][T12456] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 164.966188][T12456] ? tomoyo_file_ioctl+0x23/0x30 [ 164.971110][T12456] ? security_file_ioctl+0xa1/0xd0 [ 164.976208][T12456] __x64_sys_ioctl+0xe3/0x120 [ 164.980871][T12456] do_syscall_64+0xfe/0x140 [ 164.985355][T12456] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 164.991241][T12456] RIP: 0033:0x459519 [ 164.995117][T12456] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.014896][T12456] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.023286][T12456] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 165.031251][T12456] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 165.039220][T12456] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:47:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff27}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x408000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4201, 0xc) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f00000002c0)=@ethernet={0x7, @dev={[], 0x11}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000340)="eb7f9728ecb61ec41e2046968cc3c1dfdcaef006711efeb6b2634b603ea2f1002d3b30b351dd7fb5eb52ea058c87acf625d248fc05c01b9178b967fc78abc9aeba203ff36679c2346731a0be15344e7a9c4ab65649b04d38ece7d2b25bd074ef97423947c089f922c9f52d1287a11d7c6cfc6e89b1aef177fd4db00718f73c4226d5d6159566e76eb85656b9d60b733f63e559942a651da272d68d07690c1cd6b4cd416fffe79530a842b1a47c188050b893bebf73082f", 0xb7}, {&(0x7f0000000140)="fb8d09c62d0031", 0x7}, {&(0x7f0000000400)="ba3c14980fd146730d0fd595ff762d89a9fc8a83df14a60eee6934081d32af5aa24869c74dff874d4364d4a17189ff080aab82e393434217fec2c53debabd0151e792a8f08288f63b01cfe1723c2ceffa69573e2a523f6203a1ee85b349e8d89c4fcaef1da9ac0bcd21371042daeb12fac7565fe5a67e08e5ab99ca31deca9b370a1bdf093d6258f605c0f94", 0x8c}, {&(0x7f00000004c0)="9fc5fc258a6922b9ef4acec83fba04aed1d995bc2ce07cb493dfdf02ec032421358dfe4416c35f3558823b85cc61aa66aebd22809691629941a76fcafd5a126582442a488c3ed17aafe5f73f534bdcde5e33736bcf169cb4f6811bcd8b0ab642c26fab62acc8ab9c4dc89deb89b0b27354e4d827af587eee5062ef875e0c3bd8c951c60eed19396b4f3116dcd3", 0x8d}, {&(0x7f0000000580)="209e94b9e777bc372021e259e3fb6a9b9cc91c10cb9d8bb23bb613cc0567d9ed4e022f571db1600f1a741b74acc663a15682b7ecb7c0d5d5665fb81318ef94bf0c6361aa4cf0adf792bf6f79ca9a5434fff78f5228350ab7114f0054193702f742d2886881908e09a380534729c19e89a9178b320e25468adaac7413fa147d947955e4c143abafb846b30caea5eeab0b20f0d74c6f8f2cdcf235d1df302833d772120db42f69ae64c1df2f32aa", 0xad}, {&(0x7f0000000640)="6c6ed8b3f94ff85f12ec701d841e9905ccfb075fafbddf8f8fe43472db9e0233270f81ac57b6e94f10c6f60a64cd44fd024b69ce2ca2f6bd23efe61a58851e3c2502d64f24fd098606479f31ad34e3516d2f3834c7436ff3425aa5553fb87617d886bb362cbd05c4a12c3eb90db13dd99a835f4db80d4f302f5437638599259861563124d025adee19e1a21ba634cef05b92974ffc890649e375354e128e1c1d6909ede48a60", 0xa6}, {&(0x7f0000000700)="fbf37897fd49afd6476057a028bc58fb7524a2c5a2370b02ed546bfbc5d3a50766459133d491b3a723421a3a36b5aa3af7ab8c36bde27d3a0fc9c66667a1d0f3649b67e3447b34cf1c9ec9260950e8ae05a7d50ddfd96284e8780b0e96493dbe7a7bd24f97485d170d2bc847cf7587bf6efc0504f0ac39cac82092c8d277cfd95ead742ce04cd30cbdcbae8dd46b7d2ef0c9e30e88ef7a8b018f80928bd74e405f74b27b03eccdf947826ce086964a2d75119d8cc09965959877c47398be1fd9399af8a11c97d44b4bf18b4dc872fb46bcfacac4c4f3ff4946e60c1664aa9cf9cc40c014370c797d3a7ee17c4f13fd5109690028e20c984121a1846836f5557bf951086a963c3dbcfec2d55c4697b6ddc954d7730198e578f2582bf42cdbf80e0e422a0a9f90850d3244721d5cd5ee1922daf1579675e7355e10f9db100c1b0af30ac37bcb7cefe19cb915b6145e338f62de660237787b2b5f6fc7ff31c16138af5ac00d0fd71c350c50f99c9ca0edbe12c2a594ed20f275a34039ed8e5a50343482f7198284258fae89643d788abd83e50c5262d7eb6cc4e4093b3eb9b15db300cff90b4160618c98b5bfe940f0992e70921f5225aa583bd1fb7cbcd9e5a9369e9396bb26c565619df8278253274d040dac7596a350bfe3ccf84941371883c13cc75e9709c2f64ab31512ae0c22ce8cdfe699463374327c5389a2de86d51a45f03a17340b337ac7795668c8d82937b0204f91c1e1ad14c47734ef93610b39e31c826288b0db3369d8401039435c0a4c4672c7c33038f1dc3f561497ca4aefd0bb3e80262687d079ccae0c82e159ef903f411d5298e8e6f8cf8143764cd0442f83da75634ce74fc38cb70ff0bb89bcd75c522062441bd90989784cbf7042a75304a3f57925a1c815b7bd7b70a3389547dfc0b9b4fbffbf345974f0ccde497e221f4df096de0bbb8962ad30448ea260635ad5ddd8e5a4e44a04a4c456337eae13a943e1b69a83c166679a424c3161a51733a497866860902e822fc0f9f92301acb281d855e3765c7daf7a851dacb446738b1fd5e786834df8da33a79e865a622e0092629c32006d79ffc06a2875d00390578dc7d7cd71c9133f3ec90186f803704a18f0ad58b5f860b50282b7055d51f5dde746277cb0257a4fe55675e3e055d68d0686ffd0aab62c5a21d363abc89bf839bc666233bec8f21b5117437737d4e8e247acb38fd5a4e4bba4de8a0e03ad0d845b4e77fc3260421bb8ab3bcbb397cb19865dbff2c9290b4dfc95a8955f5cca2ef6fb8cef0dd62626b1998b7cbe428951a33b8430eae15bee6f2a042a12d9e0018550270f59371af92aac6105f0da10bd1ae3ecb001d9f19bfe4161f6203cc1d64ed7cfd78df864a6a088d1a68196d99a2abe1a0a8ef03eb7e76d3884b7a6e7b904e4b041503b4187ebb83fcf0a684643842b1647e80fe6ad991de78e1f89d3c020e487468b3c3f747b7c440e1e07a124ed49ed9c33d3660b67c11d29d4fd101cc0af93fd1899c558ff44b9d0891e8dbc3c7e4fe973fbd88f62936397b26c35bd264dba73022609b5fc005939c50d8b3350f07296ae864248841af06daee8f53873098d61a3991c18aa373f9547e7ca90e7e3ff522f9b38822cf1ef98d500dd3de14a8df8e4a56862629360f2842f1708ae1c2114c087a3d533337be56b4f81ca6ff6d46c17e3b0dd32e577d46f415dbb77e99c0f5e1dc3d1081a68eac2c83762dd7d2707890a6369e7beb2a39d744064ccc8fc709fa3b02221112b093bc9769953deb919c9c349b3a8b34c8202dac535a99bc2bcfcd99defb72f47e12f6dc21c205d10bb2c33148a72ef50663d333216a1d67f0b08f1a3d9b7c7aea5b3363a46bb74b14e2c615596cc60bb402a81af92f516930a5a95493fde1df16e16fdaaad912405d2376bd50c360019befae06dc81fc380bae17b25ca202575293c566518fa27bee45fc1c6811285a0e8701f330d292162435a044f1f9b623d9ce63cc5b1d60e60af78aaeb1ed9a1d5d0eeac8ee4c4e11a37ae10ff8a35c53f288e7c69d36f1150e0dcb2a2f5ec76abb2ba5431c9772385a911fb9e54bbbcf37a827dc5b809eee6ce6fa0387c7d44e51c828de2bebf9d6ff13195575fff905311ff67a2366058b70947c5c961bcad8dea4cc51b19d5d70fa4fb25b1b8deacde5e5be3dc4b85d1aa1bf317d2c89b183537bc3f2bddff0d0e11951dce13ccd4e571a2fe0981ed71ae0d036d984362886e303c8cd06404d67f3f3e6b193d0305e573e7113ab476a557e3459c1d34f81eecfcd75d402fd8a86bede21d196f2a1e8f3947cda08dada70a0bf620f0a14664339430de7a5361e8c4f1b8c5cd2d422fae75e5803cf3bdbd1f7add1f5c4f635532c6bb74f9013025f8d3aa50394db23c39883c2369b5327f541c5eb8c6fc8a8efe053619b0b9c4e2a7fe661ffb260fdce3599baf8da5d2058429432e13488cfb523b624d0dac9b0941166aa822656d6ddcba1d60cbc3084d96549699f8b9f36083d84117705153816c7890ea9afc943792f939ce8f8a10a9442687ab03e39e55814d9fb89f533521e00938b7e8dbe20402f7fff3a2095a2715981bf887b6d17e7883e6e363d54ae9e14db0b390b9558d92aaf9b2262342bef04902871ec1f04f87e84dad46e350386153bde38bd4643f001b69997a618de9639820f7a88b5e7a84cc6c7ae342642cb313fd99faa869f50ae7ca6a2436c71336f1530d5c998efd70d8f69513310950c87a10275f3b6c55c449c465228a2535f82f3e805d704eccfa3368aaec8979b23a36988482e62100b73b5b9b32aae183c707c02da00dabb0c55379cebdb6c63548df2d934dafaac997387727ffe4bafcb8b9c055c6fb07433dcb66ab4490a42285446496242d7f33891154abebe063a362492a33df877340e94d4d6b9707ad955356212500bea092d003cb6570a9411cef4fa971336620c7208485e1b162a6ca18462d73588646249078ea881ac32e02f328137a154c67e277de6f14ccfbfb5162eb6fb340fc6eceade2cc29f9cbb5fa54556b90ab27ec9977bc5b95767a6f9bfaf8b5ef0a756044ec27cb76fcd0b3123ab68095dd5c30d72546749bce280c4752745c6c4b5f9e747058ea314989d761340e162d5b585959519ba70494fb339123db4d57ef878edd0541000838993183be31568925c94b5594e819d5ef9392a5757fcc8d5ae23d5a25abd4b5c17b74e5af26ff8ae2b104dd9053ad71292f0ab2cf630afaa3783740cb7aefd0617710f93fe3fd2b93afbb7e38bf2b0564b0c20ba1c9692659ee63569a84fcda106a0c32be9684356e8cb9f2cd3250d8110cb283325af8ccd7a1d3fd823ee550a5b9af3c1eafe0252d4ce6cafcd1905bda6e459b7a8413ae77a983fadbb1acff9fdca43f78ea967297de52ef1c4d9b6b7c2eed95048d0d536b8d2bef9077b0fd9ed1a1843316f13ca5dbf3d8c8d20b2e4c46ba9560eb6a114f33eac3811ef89bbf11e6fc9055fc7b2d3baf265cbe05311599c238b4f1f2a102c0975975bb34216622e4962a44d2f6e34e0213aa71bbe34b9cc6e496bbca51318fbe553d5f523d0bb6a7c996c88d2827e9e0ae331c40e7e7cbcc3d60c04d5ec54f07c82654b9cffb4f6502e20de3676af14432743424db5ada294a2fd8678011b4af73b9935b5daf4633891262f60934049e29a91352ba91d7a05511eb2ad1e41956512b455950bccc086b3df3afbec7dee510c8e8ea2ae14adc348183450453ad7f6fdb517d7b3b3d11a7e5a5b7f335eaea6d47291d44064c72f79599109730377122f2e7b20b14be4adde5adff41ba8c554c741659615f459bb9cb618a4ac3eb008351b35b25f17b49aebe73657f5db61562a1f033c496ba6249e7ff083c789b0a5d0828e7fefdca94168e1f819dc9ef590e16d050ab9bd5bddf8fdf34dc6b4393ef3a75e8b8b4ffaf009b1751a8ad6266e39bb2fb216517fdf93df334d888c55d50071d4e8a70be2c004b76eea9b61fa95863cd594dcb2ee189dd3064d2eff9cf4973743d5c748b5ee87b86618d495d0a445cd3694af142eca809deef50ec725fc4d47ec8143506bd507b10750d83e8f6e7a4d8b6827fc77fd7ce47ed5337ff1fb18bb7b94ba1f1441c177faed8b30f2cb82f0656e22cfd49b3704ecb10e2994084f244042daf127f308e19cf7f24ea293e5543c0c418c7427d37dd79d6e38d89d78a5967fe1b0e82b969ab87b897a9b6fd55e10e36943716c332d121dc29e1b0f1134eefd2a13bf9db337e71a01bca8a26aaa494642dea6098a49b73ed2bf5deea86c6cdef7c3d5af0f5811cd9b85f1c5bc146a434fe6e940feb0628a0db9725e802944dba324c148e4e3a6e611437ebb90e0c4f632332f6e1f13d18f0694e791e1498efc070afc50bceaf264821f10c7abb2f5888f93a70f4a446d7931c07b248a3ae107501980b83719607163acc2192e11465afdf01431d10c96f3b5d8ab01d3c5ea8b2d1e5c961e5b1af58457b3194e5af921325cb3b74f47fffc08d6382e64c8b6406285f875b156658001580c2ea9745fe95054f67901cb9ebb3987b3c5484ae947d9021327f70e79b41b5c89e51c074834849f843043caeb0da651619924fd25d4974a6defc69e9c457c6134ff81a3092f61f13338f744415a2d78ded7d0e5db0a82378c74546a3dc2e7981415200df282c3417f7255180cbdfc5b8e36d0e1d6c96af471d528351858657f1fac7d93559e3749595fb8d5776e6fd1e94f4e2f60b4c2eb849850172dbe1e0c25d8fee65438a952d8e54eb028c928bb4e047efa3e70d87a93a0b0bf5ee85f582eb4efa9ed0768dff914976a56e8fdc971d28b02f9ed66e0b018e94ff72265b06e314ea96ac73e1b26ea7924a849e5114c5a508220c069f84b3b7fa560c481d98a7deb9b5d655491408903a05b74472744597686059339cc29fe3a192c66e9c8f62e12d3a3113440ff800c75e3ad341d5792a0879c0243a8d145a83ea8764e992cf4999a6b48947bd5a4f4b35faa6f00798413c1f5e42089e43c1a844c3398d01cb42c1cf21c86f65f6fe23bf7ac0bb0258ccac67dd433bb7d060d0d83862897bb6394e1c5300cdc60b4f24a52eaf6708e30e15c908fa1f6e70c87afff792b188453f98765a39368e50ed20746007d6beade356bc54bfc8ef1d84d607db44f2a70fa28d94d8e67c1bb926113496ca1d1b6aede3475902c2a18de083e50782c7c8512b34ff93c20964ecf3ccacf0dc75d424f7acd9561c23a6be3c57b992a5905d8e81d561aa06400f7857fdd1ea2850d0e04b8dca2ad7ed54987927411cf111930727acce103935dfe0b0ac10cd23f94dac9f3fd6ed03f80e71deb276b67f4e72695fd99a8de6f0760109da82ab15c86c781bd4fdacdde9cf1870b6a3350f27b3f22f873ab46491702f607a94f75bb4c95650f1554db1e9a1e566e5bf012f885a5319412faf273c7ebb0d0f81b39e79a30d050bab66c7a6acc37439e8fcf5c3b700fe3fa8bf270d52fde50d90a1cf1f9e05549c481f7eb2fed49791fda2d9881811adc27ee889d7bf156f04a1e7a0fcd5151dbff92a872e996e3c7797baedbc17e344233c2bcd98579d1b37facc04a15cbc3321404bc17a53eaed66a78ed09fd264135cef64ec49b1fba93fe34c1e5a70a57e25bd6f32af7b1b844dec57e0ab3b1fdbea5d40b8d77e9e0e1f96d1f8892ebbb7564ba57e45366e74af1f37282adc619636eb4aceb667b503283614079414187281e6a12c6aa32dfb60e6cbc8ae6f4b32d0aa52f5f2", 0x1000}], 0x7}, 0x20008004) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1400) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600203f00000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff17000000000000000000080000000000000041be00000050263153d0f2410393ea17aa848a226991c1e2a2acc42092420402845c930254eab451d93ef897e59c3048eca6abc035ae8400fb0ea9338fedfc5bf93d1d9eeac7c5"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xc9, 0x0) 18:47:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x40c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 165.047170][T12456] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 165.055210][T12456] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 18:47:33 executing program 3 (fault-call:4 fault-nth:8): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:33 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="eb3c11fd2c860401ed01000270ff0900000000000000", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10001) creat(0x0, 0x0) [ 165.252873][T12491] FAULT_INJECTION: forcing a failure. [ 165.252873][T12491] name failslab, interval 1, probability 0, space 0, times 0 [ 165.311742][T12491] CPU: 0 PID: 12491 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 165.319866][T12491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.329916][T12491] Call Trace: [ 165.333488][T12491] dump_stack+0x1d8/0x2f8 [ 165.337801][T12491] should_fail+0x608/0x860 [ 165.342198][T12491] ? setup_fault_attr+0x2b0/0x2b0 [ 165.347230][T12491] __should_failslab+0x11a/0x160 [ 165.352155][T12491] should_failslab+0x9/0x20 [ 165.356639][T12491] kmem_cache_alloc_trace+0x5d/0x2c0 [ 165.361903][T12491] ? binder_new_node+0x59/0x880 [ 165.366732][T12491] binder_new_node+0x59/0x880 [ 165.371391][T12491] ? _raw_spin_unlock+0x2c/0x50 [ 165.376382][T12491] ? binder_get_node+0x1f4/0x290 [ 165.381301][T12491] binder_transaction+0x4616/0xb990 [ 165.386509][T12491] ? unwind_get_return_address+0x4c/0x90 [ 165.392325][T12491] ? binder_free_buf+0xa30/0xa30 [ 165.397258][T12491] ? __kasan_kmalloc+0x178/0x1b0 [ 165.402175][T12491] ? __lock_acquire+0xcf7/0x1a40 [ 165.407116][T12491] ? trace_lock_acquire+0x190/0x190 [ 165.412295][T12491] ? trace_lock_acquire+0x190/0x190 [ 165.417470][T12491] ? __read_once_size_nocheck+0x10/0x10 [ 165.422998][T12491] ? unwind_next_frame+0x415/0x870 [ 165.429453][T12491] ? should_fail+0x182/0x860 [ 165.434379][T12491] ? check_preemption_disabled+0x47/0x280 [ 165.440773][T12491] ? __might_fault+0xf9/0x160 [ 165.445433][T12491] ? kasan_check_write+0x14/0x20 [ 165.450353][T12491] ? _copy_from_user+0xe0/0x120 [ 165.455210][T12491] binder_ioctl+0x1372/0x7bc0 [ 165.459879][T12491] ? stack_trace_save+0x111/0x1e0 [ 165.464902][T12491] ? check_preemption_disabled+0xb7/0x280 [ 165.470608][T12491] ? binder_poll+0x540/0x540 [ 165.475191][T12491] ? kasan_check_write+0x14/0x20 [ 165.480112][T12491] ? do_raw_spin_lock+0x143/0x3a0 [ 165.485136][T12491] ? rcu_lock_release+0x9/0x30 [ 165.489906][T12491] ? tomoyo_path_number_perm+0x5f0/0x740 [ 165.495516][T12491] ? trace_lock_acquire+0x190/0x190 [ 165.500704][T12491] ? tomoyo_check_path_acl+0x180/0x180 [ 165.506140][T12491] ? smk_access+0x4f0/0x4f0 [ 165.510620][T12491] ? smk_access+0x18c/0x4f0 [ 165.515104][T12491] ? binder_poll+0x540/0x540 [ 165.519671][T12491] do_vfs_ioctl+0x7d4/0x1890 [ 165.524508][T12491] ? ioctl_preallocate+0x240/0x240 [ 165.529609][T12491] ? fget_many+0x30/0x30 [ 165.533833][T12491] ? debug_smp_processor_id+0x1c/0x20 [ 165.539186][T12491] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 165.545234][T12491] ? tomoyo_file_ioctl+0x23/0x30 [ 165.550152][T12491] ? security_file_ioctl+0xa1/0xd0 [ 165.555244][T12491] __x64_sys_ioctl+0xe3/0x120 [ 165.559989][T12491] do_syscall_64+0xfe/0x140 [ 165.564487][T12491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 165.570359][T12491] RIP: 0033:0x459519 [ 165.574235][T12491] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 165.593817][T12491] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.602220][T12491] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 165.610194][T12491] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 165.618164][T12491] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 165.626225][T12491] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 165.634177][T12491] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 [ 165.646928][T12492] FAT-fs (loop0): bogus number of FAT structure [ 165.653198][T12492] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:33 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff27}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x408000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4201, 0xc) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f00000002c0)=@ethernet={0x7, @dev={[], 0x11}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000340)="eb7f9728ecb61ec41e2046968cc3c1dfdcaef006711efeb6b2634b603ea2f1002d3b30b351dd7fb5eb52ea058c87acf625d248fc05c01b9178b967fc78abc9aeba203ff36679c2346731a0be15344e7a9c4ab65649b04d38ece7d2b25bd074ef97423947c089f922c9f52d1287a11d7c6cfc6e89b1aef177fd4db00718f73c4226d5d6159566e76eb85656b9d60b733f63e559942a651da272d68d07690c1cd6b4cd416fffe79530a842b1a47c188050b893bebf73082f", 0xb7}, {&(0x7f0000000140)="fb8d09c62d0031", 0x7}, {&(0x7f0000000400)="ba3c14980fd146730d0fd595ff762d89a9fc8a83df14a60eee6934081d32af5aa24869c74dff874d4364d4a17189ff080aab82e393434217fec2c53debabd0151e792a8f08288f63b01cfe1723c2ceffa69573e2a523f6203a1ee85b349e8d89c4fcaef1da9ac0bcd21371042daeb12fac7565fe5a67e08e5ab99ca31deca9b370a1bdf093d6258f605c0f94", 0x8c}, {&(0x7f00000004c0)="9fc5fc258a6922b9ef4acec83fba04aed1d995bc2ce07cb493dfdf02ec032421358dfe4416c35f3558823b85cc61aa66aebd22809691629941a76fcafd5a126582442a488c3ed17aafe5f73f534bdcde5e33736bcf169cb4f6811bcd8b0ab642c26fab62acc8ab9c4dc89deb89b0b27354e4d827af587eee5062ef875e0c3bd8c951c60eed19396b4f3116dcd3", 0x8d}, {&(0x7f0000000580)="209e94b9e777bc372021e259e3fb6a9b9cc91c10cb9d8bb23bb613cc0567d9ed4e022f571db1600f1a741b74acc663a15682b7ecb7c0d5d5665fb81318ef94bf0c6361aa4cf0adf792bf6f79ca9a5434fff78f5228350ab7114f0054193702f742d2886881908e09a380534729c19e89a9178b320e25468adaac7413fa147d947955e4c143abafb846b30caea5eeab0b20f0d74c6f8f2cdcf235d1df302833d772120db42f69ae64c1df2f32aa", 0xad}, {&(0x7f0000000640)="6c6ed8b3f94ff85f12ec701d841e9905ccfb075fafbddf8f8fe43472db9e0233270f81ac57b6e94f10c6f60a64cd44fd024b69ce2ca2f6bd23efe61a58851e3c2502d64f24fd098606479f31ad34e3516d2f3834c7436ff3425aa5553fb87617d886bb362cbd05c4a12c3eb90db13dd99a835f4db80d4f302f5437638599259861563124d025adee19e1a21ba634cef05b92974ffc890649e375354e128e1c1d6909ede48a60", 0xa6}, {&(0x7f0000000700)="fbf37897fd49afd6476057a028bc58fb7524a2c5a2370b02ed546bfbc5d3a50766459133d491b3a723421a3a36b5aa3af7ab8c36bde27d3a0fc9c66667a1d0f3649b67e3447b34cf1c9ec9260950e8ae05a7d50ddfd96284e8780b0e96493dbe7a7bd24f97485d170d2bc847cf7587bf6efc0504f0ac39cac82092c8d277cfd95ead742ce04cd30cbdcbae8dd46b7d2ef0c9e30e88ef7a8b018f80928bd74e405f74b27b03eccdf947826ce086964a2d75119d8cc09965959877c47398be1fd9399af8a11c97d44b4bf18b4dc872fb46bcfacac4c4f3ff4946e60c1664aa9cf9cc40c014370c797d3a7ee17c4f13fd5109690028e20c984121a1846836f5557bf951086a963c3dbcfec2d55c4697b6ddc954d7730198e578f2582bf42cdbf80e0e422a0a9f90850d3244721d5cd5ee1922daf1579675e7355e10f9db100c1b0af30ac37bcb7cefe19cb915b6145e338f62de660237787b2b5f6fc7ff31c16138af5ac00d0fd71c350c50f99c9ca0edbe12c2a594ed20f275a34039ed8e5a50343482f7198284258fae89643d788abd83e50c5262d7eb6cc4e4093b3eb9b15db300cff90b4160618c98b5bfe940f0992e70921f5225aa583bd1fb7cbcd9e5a9369e9396bb26c565619df8278253274d040dac7596a350bfe3ccf84941371883c13cc75e9709c2f64ab31512ae0c22ce8cdfe699463374327c5389a2de86d51a45f03a17340b337ac7795668c8d82937b0204f91c1e1ad14c47734ef93610b39e31c826288b0db3369d8401039435c0a4c4672c7c33038f1dc3f561497ca4aefd0bb3e80262687d079ccae0c82e159ef903f411d5298e8e6f8cf8143764cd0442f83da75634ce74fc38cb70ff0bb89bcd75c522062441bd90989784cbf7042a75304a3f57925a1c815b7bd7b70a3389547dfc0b9b4fbffbf345974f0ccde497e221f4df096de0bbb8962ad30448ea260635ad5ddd8e5a4e44a04a4c456337eae13a943e1b69a83c166679a424c3161a51733a497866860902e822fc0f9f92301acb281d855e3765c7daf7a851dacb446738b1fd5e786834df8da33a79e865a622e0092629c32006d79ffc06a2875d00390578dc7d7cd71c9133f3ec90186f803704a18f0ad58b5f860b50282b7055d51f5dde746277cb0257a4fe55675e3e055d68d0686ffd0aab62c5a21d363abc89bf839bc666233bec8f21b5117437737d4e8e247acb38fd5a4e4bba4de8a0e03ad0d845b4e77fc3260421bb8ab3bcbb397cb19865dbff2c9290b4dfc95a8955f5cca2ef6fb8cef0dd62626b1998b7cbe428951a33b8430eae15bee6f2a042a12d9e0018550270f59371af92aac6105f0da10bd1ae3ecb001d9f19bfe4161f6203cc1d64ed7cfd78df864a6a088d1a68196d99a2abe1a0a8ef03eb7e76d3884b7a6e7b904e4b041503b4187ebb83fcf0a684643842b1647e80fe6ad991de78e1f89d3c020e487468b3c3f747b7c440e1e07a124ed49ed9c33d3660b67c11d29d4fd101cc0af93fd1899c558ff44b9d0891e8dbc3c7e4fe973fbd88f62936397b26c35bd264dba73022609b5fc005939c50d8b3350f07296ae864248841af06daee8f53873098d61a3991c18aa373f9547e7ca90e7e3ff522f9b38822cf1ef98d500dd3de14a8df8e4a56862629360f2842f1708ae1c2114c087a3d533337be56b4f81ca6ff6d46c17e3b0dd32e577d46f415dbb77e99c0f5e1dc3d1081a68eac2c83762dd7d2707890a6369e7beb2a39d744064ccc8fc709fa3b02221112b093bc9769953deb919c9c349b3a8b34c8202dac535a99bc2bcfcd99defb72f47e12f6dc21c205d10bb2c33148a72ef50663d333216a1d67f0b08f1a3d9b7c7aea5b3363a46bb74b14e2c615596cc60bb402a81af92f516930a5a95493fde1df16e16fdaaad912405d2376bd50c360019befae06dc81fc380bae17b25ca202575293c566518fa27bee45fc1c6811285a0e8701f330d292162435a044f1f9b623d9ce63cc5b1d60e60af78aaeb1ed9a1d5d0eeac8ee4c4e11a37ae10ff8a35c53f288e7c69d36f1150e0dcb2a2f5ec76abb2ba5431c9772385a911fb9e54bbbcf37a827dc5b809eee6ce6fa0387c7d44e51c828de2bebf9d6ff13195575fff905311ff67a2366058b70947c5c961bcad8dea4cc51b19d5d70fa4fb25b1b8deacde5e5be3dc4b85d1aa1bf317d2c89b183537bc3f2bddff0d0e11951dce13ccd4e571a2fe0981ed71ae0d036d984362886e303c8cd06404d67f3f3e6b193d0305e573e7113ab476a557e3459c1d34f81eecfcd75d402fd8a86bede21d196f2a1e8f3947cda08dada70a0bf620f0a14664339430de7a5361e8c4f1b8c5cd2d422fae75e5803cf3bdbd1f7add1f5c4f635532c6bb74f9013025f8d3aa50394db23c39883c2369b5327f541c5eb8c6fc8a8efe053619b0b9c4e2a7fe661ffb260fdce3599baf8da5d2058429432e13488cfb523b624d0dac9b0941166aa822656d6ddcba1d60cbc3084d96549699f8b9f36083d84117705153816c7890ea9afc943792f939ce8f8a10a9442687ab03e39e55814d9fb89f533521e00938b7e8dbe20402f7fff3a2095a2715981bf887b6d17e7883e6e363d54ae9e14db0b390b9558d92aaf9b2262342bef04902871ec1f04f87e84dad46e350386153bde38bd4643f001b69997a618de9639820f7a88b5e7a84cc6c7ae342642cb313fd99faa869f50ae7ca6a2436c71336f1530d5c998efd70d8f69513310950c87a10275f3b6c55c449c465228a2535f82f3e805d704eccfa3368aaec8979b23a36988482e62100b73b5b9b32aae183c707c02da00dabb0c55379cebdb6c63548df2d934dafaac997387727ffe4bafcb8b9c055c6fb07433dcb66ab4490a42285446496242d7f33891154abebe063a362492a33df877340e94d4d6b9707ad955356212500bea092d003cb6570a9411cef4fa971336620c7208485e1b162a6ca18462d73588646249078ea881ac32e02f328137a154c67e277de6f14ccfbfb5162eb6fb340fc6eceade2cc29f9cbb5fa54556b90ab27ec9977bc5b95767a6f9bfaf8b5ef0a756044ec27cb76fcd0b3123ab68095dd5c30d72546749bce280c4752745c6c4b5f9e747058ea314989d761340e162d5b585959519ba70494fb339123db4d57ef878edd0541000838993183be31568925c94b5594e819d5ef9392a5757fcc8d5ae23d5a25abd4b5c17b74e5af26ff8ae2b104dd9053ad71292f0ab2cf630afaa3783740cb7aefd0617710f93fe3fd2b93afbb7e38bf2b0564b0c20ba1c9692659ee63569a84fcda106a0c32be9684356e8cb9f2cd3250d8110cb283325af8ccd7a1d3fd823ee550a5b9af3c1eafe0252d4ce6cafcd1905bda6e459b7a8413ae77a983fadbb1acff9fdca43f78ea967297de52ef1c4d9b6b7c2eed95048d0d536b8d2bef9077b0fd9ed1a1843316f13ca5dbf3d8c8d20b2e4c46ba9560eb6a114f33eac3811ef89bbf11e6fc9055fc7b2d3baf265cbe05311599c238b4f1f2a102c0975975bb34216622e4962a44d2f6e34e0213aa71bbe34b9cc6e496bbca51318fbe553d5f523d0bb6a7c996c88d2827e9e0ae331c40e7e7cbcc3d60c04d5ec54f07c82654b9cffb4f6502e20de3676af14432743424db5ada294a2fd8678011b4af73b9935b5daf4633891262f60934049e29a91352ba91d7a05511eb2ad1e41956512b455950bccc086b3df3afbec7dee510c8e8ea2ae14adc348183450453ad7f6fdb517d7b3b3d11a7e5a5b7f335eaea6d47291d44064c72f79599109730377122f2e7b20b14be4adde5adff41ba8c554c741659615f459bb9cb618a4ac3eb008351b35b25f17b49aebe73657f5db61562a1f033c496ba6249e7ff083c789b0a5d0828e7fefdca94168e1f819dc9ef590e16d050ab9bd5bddf8fdf34dc6b4393ef3a75e8b8b4ffaf009b1751a8ad6266e39bb2fb216517fdf93df334d888c55d50071d4e8a70be2c004b76eea9b61fa95863cd594dcb2ee189dd3064d2eff9cf4973743d5c748b5ee87b86618d495d0a445cd3694af142eca809deef50ec725fc4d47ec8143506bd507b10750d83e8f6e7a4d8b6827fc77fd7ce47ed5337ff1fb18bb7b94ba1f1441c177faed8b30f2cb82f0656e22cfd49b3704ecb10e2994084f244042daf127f308e19cf7f24ea293e5543c0c418c7427d37dd79d6e38d89d78a5967fe1b0e82b969ab87b897a9b6fd55e10e36943716c332d121dc29e1b0f1134eefd2a13bf9db337e71a01bca8a26aaa494642dea6098a49b73ed2bf5deea86c6cdef7c3d5af0f5811cd9b85f1c5bc146a434fe6e940feb0628a0db9725e802944dba324c148e4e3a6e611437ebb90e0c4f632332f6e1f13d18f0694e791e1498efc070afc50bceaf264821f10c7abb2f5888f93a70f4a446d7931c07b248a3ae107501980b83719607163acc2192e11465afdf01431d10c96f3b5d8ab01d3c5ea8b2d1e5c961e5b1af58457b3194e5af921325cb3b74f47fffc08d6382e64c8b6406285f875b156658001580c2ea9745fe95054f67901cb9ebb3987b3c5484ae947d9021327f70e79b41b5c89e51c074834849f843043caeb0da651619924fd25d4974a6defc69e9c457c6134ff81a3092f61f13338f744415a2d78ded7d0e5db0a82378c74546a3dc2e7981415200df282c3417f7255180cbdfc5b8e36d0e1d6c96af471d528351858657f1fac7d93559e3749595fb8d5776e6fd1e94f4e2f60b4c2eb849850172dbe1e0c25d8fee65438a952d8e54eb028c928bb4e047efa3e70d87a93a0b0bf5ee85f582eb4efa9ed0768dff914976a56e8fdc971d28b02f9ed66e0b018e94ff72265b06e314ea96ac73e1b26ea7924a849e5114c5a508220c069f84b3b7fa560c481d98a7deb9b5d655491408903a05b74472744597686059339cc29fe3a192c66e9c8f62e12d3a3113440ff800c75e3ad341d5792a0879c0243a8d145a83ea8764e992cf4999a6b48947bd5a4f4b35faa6f00798413c1f5e42089e43c1a844c3398d01cb42c1cf21c86f65f6fe23bf7ac0bb0258ccac67dd433bb7d060d0d83862897bb6394e1c5300cdc60b4f24a52eaf6708e30e15c908fa1f6e70c87afff792b188453f98765a39368e50ed20746007d6beade356bc54bfc8ef1d84d607db44f2a70fa28d94d8e67c1bb926113496ca1d1b6aede3475902c2a18de083e50782c7c8512b34ff93c20964ecf3ccacf0dc75d424f7acd9561c23a6be3c57b992a5905d8e81d561aa06400f7857fdd1ea2850d0e04b8dca2ad7ed54987927411cf111930727acce103935dfe0b0ac10cd23f94dac9f3fd6ed03f80e71deb276b67f4e72695fd99a8de6f0760109da82ab15c86c781bd4fdacdde9cf1870b6a3350f27b3f22f873ab46491702f607a94f75bb4c95650f1554db1e9a1e566e5bf012f885a5319412faf273c7ebb0d0f81b39e79a30d050bab66c7a6acc37439e8fcf5c3b700fe3fa8bf270d52fde50d90a1cf1f9e05549c481f7eb2fed49791fda2d9881811adc27ee889d7bf156f04a1e7a0fcd5151dbff92a872e996e3c7797baedbc17e344233c2bcd98579d1b37facc04a15cbc3321404bc17a53eaed66a78ed09fd264135cef64ec49b1fba93fe34c1e5a70a57e25bd6f32af7b1b844dec57e0ab3b1fdbea5d40b8d77e9e0e1f96d1f8892ebbb7564ba57e45366e74af1f37282adc619636eb4aceb667b503283614079414187281e6a12c6aa32dfb60e6cbc8ae6f4b32d0aa52f5f2", 0x1000}], 0x7}, 0x20008004) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1400) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600203f00000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff17000000000000000000080000000000000041be00000050263153d0f2410393ea17aa848a226991c1e2a2acc42092420402845c930254eab451d93ef897e59c3048eca6abc035ae8400fb0ea9338fedfc5bf93d1d9eeac7c5"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xc9, 0x0) 18:47:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x40d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffef, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:33 executing program 3 (fault-call:4 fault-nth:9): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffffffffffff27}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x408000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4201, 0xc) sendmsg$sock(r0, &(0x7f0000000200)={&(0x7f00000002c0)=@ethernet={0x7, @dev={[], 0x11}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000340)="eb7f9728ecb61ec41e2046968cc3c1dfdcaef006711efeb6b2634b603ea2f1002d3b30b351dd7fb5eb52ea058c87acf625d248fc05c01b9178b967fc78abc9aeba203ff36679c2346731a0be15344e7a9c4ab65649b04d38ece7d2b25bd074ef97423947c089f922c9f52d1287a11d7c6cfc6e89b1aef177fd4db00718f73c4226d5d6159566e76eb85656b9d60b733f63e559942a651da272d68d07690c1cd6b4cd416fffe79530a842b1a47c188050b893bebf73082f", 0xb7}, {&(0x7f0000000140)="fb8d09c62d0031", 0x7}, {&(0x7f0000000400)="ba3c14980fd146730d0fd595ff762d89a9fc8a83df14a60eee6934081d32af5aa24869c74dff874d4364d4a17189ff080aab82e393434217fec2c53debabd0151e792a8f08288f63b01cfe1723c2ceffa69573e2a523f6203a1ee85b349e8d89c4fcaef1da9ac0bcd21371042daeb12fac7565fe5a67e08e5ab99ca31deca9b370a1bdf093d6258f605c0f94", 0x8c}, {&(0x7f00000004c0)="9fc5fc258a6922b9ef4acec83fba04aed1d995bc2ce07cb493dfdf02ec032421358dfe4416c35f3558823b85cc61aa66aebd22809691629941a76fcafd5a126582442a488c3ed17aafe5f73f534bdcde5e33736bcf169cb4f6811bcd8b0ab642c26fab62acc8ab9c4dc89deb89b0b27354e4d827af587eee5062ef875e0c3bd8c951c60eed19396b4f3116dcd3", 0x8d}, {&(0x7f0000000580)="209e94b9e777bc372021e259e3fb6a9b9cc91c10cb9d8bb23bb613cc0567d9ed4e022f571db1600f1a741b74acc663a15682b7ecb7c0d5d5665fb81318ef94bf0c6361aa4cf0adf792bf6f79ca9a5434fff78f5228350ab7114f0054193702f742d2886881908e09a380534729c19e89a9178b320e25468adaac7413fa147d947955e4c143abafb846b30caea5eeab0b20f0d74c6f8f2cdcf235d1df302833d772120db42f69ae64c1df2f32aa", 0xad}, {&(0x7f0000000640)="6c6ed8b3f94ff85f12ec701d841e9905ccfb075fafbddf8f8fe43472db9e0233270f81ac57b6e94f10c6f60a64cd44fd024b69ce2ca2f6bd23efe61a58851e3c2502d64f24fd098606479f31ad34e3516d2f3834c7436ff3425aa5553fb87617d886bb362cbd05c4a12c3eb90db13dd99a835f4db80d4f302f5437638599259861563124d025adee19e1a21ba634cef05b92974ffc890649e375354e128e1c1d6909ede48a60", 0xa6}, {&(0x7f0000000700)="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", 0x1000}], 0x7}, 0x20008004) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x1400) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200aa0802000000000000000000000105000600203f00000a00000000000000000500e50000070000001f000000000000250000000000000200010000000000000000020000627c05000500000000000a00000000000000ff17000000000000000000080000000000000041be00000050263153d0f2410393ea17aa848a226991c1e2a2acc42092420402845c930254eab451d93ef897e59c3048eca6abc035ae8400fb0ea9338fedfc5bf93d1d9eeac7c5"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0xc9, 0x0) 18:47:33 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000100)) fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f0000000440)='fo\x13\xbc\xf5\xfbr_chXld\x1a\xa0h\xd6\x82\x85\x03\n\x1fG\x10\x12&\xc87K\xb3\x92G\xb7\xeaa\xda\x9bi\xa8v\x95b\x16\x88+\x1b\xac1\xc2\xaeA\xd6d\x03H\xbe\xecG\x8di\xda]\n\xea\xd1\xe7\xaf\xd6U\x19gR\x03\xd0\x93E!\xf7\xa5E\x1f\x13a:\xf9$m\x95)u\xf8\xdc\x11e\x92\xe3\\\xe0\xfbc~\xb3\x01:<;\x90\xa5\xf9H\x9a:g\xe7\x0fa\xe6<\xdc,\xa1\xd9&\x8c\xb6`\x9bK\xb9x\xb2N\x01D4\xd8\xcd:\xd3') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x40b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 165.791613][T12511] FAULT_INJECTION: forcing a failure. [ 165.791613][T12511] name failslab, interval 1, probability 0, space 0, times 0 [ 165.816377][T12511] CPU: 1 PID: 12511 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 165.824393][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 165.824404][T12511] Call Trace: [ 165.837750][T12511] dump_stack+0x1d8/0x2f8 [ 165.842088][T12511] should_fail+0x608/0x860 [ 165.846511][T12511] ? setup_fault_attr+0x2b0/0x2b0 [ 165.851581][T12511] __should_failslab+0x11a/0x160 [ 165.856523][T12511] should_failslab+0x9/0x20 [ 165.861031][T12511] kmem_cache_alloc_trace+0x5d/0x2c0 [ 165.861044][T12511] ? binder_inc_ref_for_node+0x1d5/0xdf0 [ 165.861057][T12511] binder_inc_ref_for_node+0x1d5/0xdf0 [ 165.861066][T12511] ? _raw_spin_unlock+0x2c/0x50 [ 165.861079][T12511] ? binder_new_node+0x611/0x880 18:47:33 executing program 4 (fault-call:5 fault-nth:0): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x40e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 165.871968][T12511] ? security_binder_transfer_binder+0x94/0xb0 [ 165.871988][T12511] binder_transaction+0x4a4d/0xb990 [ 165.887255][T12511] ? binder_free_buf+0xa30/0xa30 [ 165.887267][T12511] ? __kasan_kmalloc+0x178/0x1b0 [ 165.887279][T12511] ? __lock_acquire+0xcf7/0x1a40 [ 165.887296][T12511] ? trace_lock_acquire+0x190/0x190 [ 165.887306][T12511] ? trace_lock_acquire+0x190/0x190 [ 165.887320][T12511] ? __read_once_size_nocheck+0x10/0x10 [ 165.929324][T12511] ? unwind_next_frame+0x415/0x870 [ 165.934451][T12511] ? should_fail+0x182/0x860 [ 165.939045][T12511] ? check_preemption_disabled+0x47/0x280 [ 165.939064][T12511] ? __might_fault+0xf9/0x160 [ 165.939082][T12511] ? kasan_check_write+0x14/0x20 [ 165.939091][T12511] ? _copy_from_user+0xe0/0x120 [ 165.939104][T12511] binder_ioctl+0x1372/0x7bc0 [ 165.963902][T12511] ? stack_trace_save+0x111/0x1e0 [ 165.963920][T12511] ? check_preemption_disabled+0xb7/0x280 [ 165.975616][T12511] ? binder_poll+0x540/0x540 [ 165.980218][T12511] ? kasan_check_write+0x14/0x20 [ 165.985161][T12511] ? do_raw_spin_lock+0x143/0x3a0 18:47:33 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:33 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0xfeffffff, 0x0, 0x0, 0xc5f3}) [ 165.990305][T12511] ? rcu_lock_release+0x9/0x30 [ 165.995086][T12511] ? tomoyo_path_number_perm+0x5f0/0x740 [ 166.000724][T12511] ? trace_lock_acquire+0x190/0x190 [ 166.005931][T12511] ? tomoyo_check_path_acl+0x180/0x180 [ 166.011393][T12511] ? smk_access+0x4f0/0x4f0 [ 166.015902][T12511] ? smk_access+0x18c/0x4f0 [ 166.020411][T12511] ? binder_poll+0x540/0x540 [ 166.025008][T12511] do_vfs_ioctl+0x7d4/0x1890 [ 166.029612][T12511] ? ioctl_preallocate+0x240/0x240 [ 166.034734][T12511] ? fget_many+0x30/0x30 [ 166.038982][T12511] ? debug_smp_processor_id+0x1c/0x20 [ 166.044357][T12511] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 166.050421][T12511] ? tomoyo_file_ioctl+0x23/0x30 [ 166.050432][T12511] ? security_file_ioctl+0xa1/0xd0 [ 166.050445][T12511] __x64_sys_ioctl+0xe3/0x120 [ 166.050459][T12511] do_syscall_64+0xfe/0x140 [ 166.050477][T12511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.075547][T12511] RIP: 0033:0x459519 [ 166.075558][T12511] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.075567][T12511] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.107662][T12511] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 166.107669][T12511] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 166.107674][T12511] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 166.107679][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 18:47:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0xfffffffe, 0x0, 0x0, 0xc5f3}) [ 166.107685][T12511] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 18:47:34 executing program 3 (fault-call:4 fault-nth:10): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="c0dc710c0800cfec7be070") syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000080), 0xbffffffe) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$amidi(0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x3, 0x2, 0x5, 0x0, 0x8}, 0x3, 0x81, 0x7f}) 18:47:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0xfeffffff00000000, 0x0, 0x0, 0xc5f3}) [ 166.263010][T12544] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program 18:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x40030000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 166.359688][T12544] futex_wake_op: syz-executor.1 tries to shift op by -1; fix this program [ 166.371009][T12560] FAULT_INJECTION: forcing a failure. [ 166.371009][T12560] name failslab, interval 1, probability 0, space 0, times 0 [ 166.464430][T12560] CPU: 0 PID: 12560 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 166.472457][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.482522][T12560] Call Trace: [ 166.485852][T12560] dump_stack+0x1d8/0x2f8 [ 166.490206][T12560] should_fail+0x608/0x860 [ 166.494656][T12560] ? setup_fault_attr+0x2b0/0x2b0 [ 166.499708][T12560] __should_failslab+0x11a/0x160 [ 166.504678][T12560] should_failslab+0x9/0x20 [ 166.509193][T12560] kmem_cache_alloc_trace+0x5d/0x2c0 [ 166.514494][T12560] ? binder_new_node+0x59/0x880 [ 166.519355][T12560] binder_new_node+0x59/0x880 [ 166.524050][T12560] ? _raw_spin_unlock+0x2c/0x50 [ 166.528906][T12560] ? binder_get_node+0x1f4/0x290 [ 166.533841][T12560] binder_transaction+0x4616/0xb990 [ 166.533890][T12560] ? binder_free_buf+0xa30/0xa30 [ 166.544021][T12560] ? __kasan_kmalloc+0x178/0x1b0 [ 166.548981][T12560] ? __lock_acquire+0xcf7/0x1a40 [ 166.549045][T12560] ? trace_lock_acquire+0x190/0x190 [ 166.549057][T12560] ? trace_lock_acquire+0x190/0x190 [ 166.564362][T12560] ? __read_once_size_nocheck+0x10/0x10 [ 166.569915][T12560] ? unwind_next_frame+0x415/0x870 [ 166.575043][T12560] ? should_fail+0x182/0x860 [ 166.579634][T12560] ? check_preemption_disabled+0x47/0x280 [ 166.579655][T12560] ? __might_fault+0xf9/0x160 [ 166.579672][T12560] ? kasan_check_write+0x14/0x20 [ 166.595016][T12560] ? _copy_from_user+0xe0/0x120 [ 166.595031][T12560] binder_ioctl+0x1372/0x7bc0 [ 166.595051][T12560] ? stack_trace_save+0x111/0x1e0 [ 166.595066][T12560] ? check_preemption_disabled+0xb7/0x280 [ 166.604568][T12560] ? binder_poll+0x540/0x540 [ 166.604582][T12560] ? kasan_check_write+0x14/0x20 [ 166.604592][T12560] ? do_raw_spin_lock+0x143/0x3a0 [ 166.604623][T12560] ? rcu_lock_release+0x9/0x30 [ 166.619923][T12560] ? tomoyo_path_number_perm+0x5f0/0x740 [ 166.619936][T12560] ? trace_lock_acquire+0x190/0x190 [ 166.619948][T12560] ? tomoyo_check_path_acl+0x180/0x180 [ 166.619962][T12560] ? smk_access+0x4f0/0x4f0 [ 166.629887][T12560] ? smk_access+0x18c/0x4f0 [ 166.629897][T12560] ? binder_poll+0x540/0x540 18:47:34 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400002, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x42, "201f20227809aa5c6ee86055f121afe5d51a2c6487ae478173522dea4b167f002a9e44baceafe795156245d0dfa1562c98c2b47047a15c7c32ad58adc30996b55904"}, &(0x7f00000000c0)=0x4a) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000440)={r1, @in={{0x2, 0x4e23, @broadcast}}}, 0x84) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000580)=""/202, 0xfffffffffffffd77) creat(0x0, 0x0) 18:47:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0xffffffff00000000, 0x0, 0x0, 0xc5f3}) 18:47:34 executing program 1: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4003) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000001c0)=0x7) write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x17) close(r0) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='/dev/uinput\x00'], 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)=0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000280)=[&(0x7f00000003c0)='=\xb7\x196[BJ/\x1c\"\xe7@\xbfO\xa2\xa52\x8e\xff\vP\xb4\xc3\x02\xe6!L \xa2\xf0\x06pp\xe7)\xd2l\x13\xb6\xfa\xe8\"\xd48\xb4\xc7\x861j}\\\xa7`\xe6\xc2\"\x1d16\xa0q\x01\xa3\x10H\x16\x8fb\xc9\x98D\xf9\xd4\x1a(V4\xcfw\x7f\x84\n$\x8aW\x86\xb3u!b\xb3W\x83y\xeeS\xa4\x1e\xe0a\xcc\xa8\x13T\x867\xdb\xb1\xe5\xfc\x12\x83sM\xa5\x82/\x96\xd7UT\xc4\x95!<\xff\xbb\xd4J\xf0v\xf3\x146\x051O\xb2\xc6Qq\xd7\x13\xa1\\\x9bY\xe9\xc5\x18?\xd8\xee\xb2\x97\xcb\xf3k\x96\xef\xe2Sj\'0\xe6\x83\n\x99`\xbbRH\xbdh\xde\\\"\xbcx\xe9U\xbe\xa7\xaa\x91\xe7|/\x86#\xec\x05f\'r\x8b\x81C\a\xf2\xb6=\r']) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x85a8) 18:47:34 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = io_uring_setup(0x14b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x40000000}) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xd2, "0ee5712a465e02f02d80234436f1bac599d85db4e2fce410f90b966a8c92e4cc3e339825f0dc0ae7e28b60cbe89d0ac7c973ee3bce5fe23b421b43917ad0812147e082f4c3dd5a9f4d0f2d30c822c38dbde918f9e6deba385729e14356bf04a980da985a697bdb480908827a9d69e28520d8d678e0f7b003118e562bc6e31c1f58941c7283fadfe2a16b1db9660358d9cc6f9e331879d0c5baf102c1eb9d3676d693ca99a2847af9ec55a2c97cc8725404b62fe1b820bdf2f81f005b2869e01807bb13aeed632ee5e49e13e572703fec381b"}, &(0x7f0000000240)=0xda) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r3, 0x100000001}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x1}, 0x8) 18:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x100000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 166.629911][T12560] do_vfs_ioctl+0x7d4/0x1890 [ 166.629927][T12560] ? ioctl_preallocate+0x240/0x240 [ 166.629949][T12560] ? fget_many+0x30/0x30 [ 166.629962][T12560] ? debug_smp_processor_id+0x1c/0x20 [ 166.640326][T12560] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 166.640340][T12560] ? tomoyo_file_ioctl+0x23/0x30 [ 166.640352][T12560] ? security_file_ioctl+0xa1/0xd0 [ 166.640365][T12560] __x64_sys_ioctl+0xe3/0x120 [ 166.640379][T12560] do_syscall_64+0xfe/0x140 [ 166.640394][T12560] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 166.674322][T12560] RIP: 0033:0x459519 [ 166.674332][T12560] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 166.674338][T12560] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.674348][T12560] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 [ 166.674354][T12560] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 18:47:34 executing program 3 (fault-call:4 fault-nth:11): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0xfeffffff, 0x0, 0xc5f3}) [ 166.674359][T12560] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 166.674364][T12560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 166.674392][T12560] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 18:47:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x200000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000100)={0x0, 0x74, 0x6b20, &(0x7f00000000c0)=0x10000}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) r2 = epoll_create(0x7a) r3 = syz_open_pts(r0, 0x0) r4 = epoll_create(0xd968) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)) write$P9_RWSTAT(r1, &(0x7f0000000240)={0x7, 0x7f, 0x2}, 0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000180)=""/147) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x3) [ 166.864304][T12591] FAULT_INJECTION: forcing a failure. [ 166.864304][T12591] name failslab, interval 1, probability 0, space 0, times 0 18:47:34 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0xc5f3}) [ 166.950520][T12591] CPU: 1 PID: 12591 Comm: syz-executor.3 Not tainted 5.2.0-rc6+ #10 [ 166.958564][T12591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 166.968626][T12591] Call Trace: [ 166.971928][T12591] dump_stack+0x1d8/0x2f8 [ 166.976274][T12591] should_fail+0x608/0x860 [ 166.980706][T12591] ? setup_fault_attr+0x2b0/0x2b0 [ 166.985782][T12591] __should_failslab+0x11a/0x160 [ 166.990760][T12591] should_failslab+0x9/0x20 [ 166.995272][T12591] kmem_cache_alloc_trace+0x5d/0x2c0 [ 167.000563][T12591] ? binder_inc_ref_for_node+0x1d5/0xdf0 [ 167.006208][T12591] binder_inc_ref_for_node+0x1d5/0xdf0 [ 167.011677][T12591] ? _raw_spin_unlock+0x2c/0x50 [ 167.016537][T12591] ? binder_new_node+0x611/0x880 [ 167.021496][T12591] ? security_binder_transfer_binder+0x94/0xb0 [ 167.027693][T12591] binder_transaction+0x4a4d/0xb990 [ 167.032936][T12591] ? binder_free_buf+0xa30/0xa30 [ 167.037887][T12591] ? __kasan_kmalloc+0x178/0x1b0 [ 167.042844][T12591] ? __lock_acquire+0xcf7/0x1a40 18:47:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x300000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 167.047812][T12591] ? trace_lock_acquire+0x190/0x190 [ 167.053019][T12591] ? trace_lock_acquire+0x190/0x190 [ 167.058220][T12591] ? __read_once_size_nocheck+0x10/0x10 [ 167.063773][T12591] ? unwind_next_frame+0x415/0x870 [ 167.068898][T12591] ? should_fail+0x182/0x860 [ 167.073509][T12591] ? check_preemption_disabled+0x47/0x280 [ 167.079241][T12591] ? __might_fault+0xf9/0x160 [ 167.079262][T12591] ? kasan_check_write+0x14/0x20 [ 167.088844][T12591] ? _copy_from_user+0xe0/0x120 [ 167.088856][T12591] binder_ioctl+0x1372/0x7bc0 [ 167.088873][T12591] ? stack_trace_save+0x111/0x1e0 [ 167.088887][T12591] ? check_preemption_disabled+0xb7/0x280 [ 167.088906][T12591] ? binder_poll+0x540/0x540 [ 167.088916][T12591] ? kasan_check_write+0x14/0x20 [ 167.088925][T12591] ? do_raw_spin_lock+0x143/0x3a0 [ 167.088956][T12591] ? rcu_lock_release+0x9/0x30 [ 167.088971][T12591] ? tomoyo_path_number_perm+0x5f0/0x740 [ 167.088981][T12591] ? trace_lock_acquire+0x190/0x190 [ 167.088995][T12591] ? tomoyo_check_path_acl+0x180/0x180 [ 167.144727][T12591] ? smk_access+0x4f0/0x4f0 [ 167.149243][T12591] ? smk_access+0x18c/0x4f0 [ 167.153769][T12591] ? binder_poll+0x540/0x540 [ 167.158369][T12591] do_vfs_ioctl+0x7d4/0x1890 [ 167.162975][T12591] ? ioctl_preallocate+0x240/0x240 [ 167.168110][T12591] ? fget_many+0x30/0x30 [ 167.172364][T12591] ? debug_smp_processor_id+0x1c/0x20 [ 167.177838][T12591] ? fpregs_assert_state_consistent+0xaa/0xe0 [ 167.183896][T12591] ? tomoyo_file_ioctl+0x23/0x30 [ 167.188839][T12591] ? security_file_ioctl+0xa1/0xd0 [ 167.193961][T12591] __x64_sys_ioctl+0xe3/0x120 [ 167.198654][T12591] do_syscall_64+0xfe/0x140 [ 167.203174][T12591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 167.209070][T12591] RIP: 0033:0x459519 [ 167.212962][T12591] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 167.212969][T12591] RSP: 002b:00007f2b9c9a2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.212978][T12591] RAX: ffffffffffffffda RBX: 00007f2b9c9a2c90 RCX: 0000000000459519 18:47:35 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0xfffffffffffffffd, 0x4) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001180)={"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"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000040)) 18:47:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0xfeffffff00000000, 0x0, 0xc5f3}) 18:47:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:35 executing program 1: r0 = socket$inet(0x2, 0x2, 0x2200000088) bind$inet(r0, &(0x7f0000000300)={0x2, 0x1004e20, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6_vti0\x00', 0x2}, 0x18) recvfrom$inet(r0, 0x0, 0xfffffeec, 0x0, 0x0, 0xffffffb1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffb, 0x400) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000040)) 18:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x400000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 167.212989][T12591] RDX: 0000000020000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 167.258455][T12591] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.266436][T12591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2b9c9a36d4 [ 167.274512][T12591] R13: 00000000004c09e1 R14: 00000000004d3788 R15: 0000000000000005 18:47:35 executing program 3 (fault-call:4 fault-nth:12): r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0xffffffff00000000, 0x0, 0xc5f3}) 18:47:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 167.342982][T12629] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6_vti0, syncid = 2, id = 0 18:47:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @dev}, 0xffffffffffffff31) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000040)) close(r1) fcntl$getflags(r0, 0x0) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x88001) sendfile(r1, r2, 0x0, 0x800000000024) 18:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x500000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 167.461543][ T7728] binder: unexpected work type, 4, not freed [ 167.476158][ T7728] binder: unexpected work type, 4, not freed 18:47:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:35 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000180)=0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000000)="bb88a3c405fa296760fb3807fdaf6eb2a1617a2f19633a160c84f2334cce5b8b1bfbbc51fd49d651b6aeb199cb40970747112b92922cc560fe06d2de78b7436355c3ff04a6d730be40e74120ae4682333a6be3a98cb9bb34a4af3a30b235fd8e3ef29a338c78ed9ef6cffda99827db401d0199ab52e5f9fa0005f991502fd004bb7722a51bde2af2a6411d0ab3b8d0e6aef8385b6e3bfbbc2a76cad9b09421cafb0b9ad99dba097b2f6a643dd917bf89f390f9fd7b1b885aa7659985e09dfac7bea95b940556", 0xc6) 18:47:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x600000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 167.685323][ T7720] binder: unexpected work type, 4, not freed [ 167.696604][ T7720] binder: unexpected work type, 4, not freed 18:47:35 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0xfffffffffffffffd, 0x4) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001180)={"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"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000040)) 18:47:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 167.815695][T12686] Unknown ioctl 1074029061 18:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x700000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 167.949513][T12686] Unknown ioctl 1074029061 18:47:35 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = creat(0x0, 0x0) sendto$rxrpc(r0, &(0x7f0000000040)="0b43249bd623e2906b9838c88755de6bdf2ef20a5acb066b398e80d101d59b191101bf01498b31c44fb674bf32893c4b405f38e37704ccbbae131d93e8cacad12d7c0fbe052e017dfd105785c21a95132acccae63b4686615bceee1b1738aad8728f92410770fb1665f278162959c551e35d10a01a03b09159e94db505ba777d51b09977fe7b1c289aa6b1e8872eb62634a5901837a656d9f0bb7d0cd61892dc59ab1816fe651000c302d80e16d3dadba05f7600fb", 0xb5, 0x80, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) [ 167.991819][T12710] binder: 12709:12710 ioctl 10 20000440 returned -22 18:47:35 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:35 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x800000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:35 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:35 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0xfffffffffffffffd, 0x4) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001180)={"22faf4952e31ab6e050ed954c224fb9b56462c1201993e8cb7984344f3a8deb9958492d2b5fea59d47ead8188c67fa5e7157f2943539b6b745c37f3bcf224ada75935fb18b281fd702d8f673177d66bdef02f003e0f1eadd31e6bb847b220d05ca9f5c7df3cf370b79804ebcc32e39f3b1c6cdd3ea669d697199f1e0ee02286b1a797c84d3d242277b4929bf19b824d455bb4163e732c5e37fe8fa450110a0d5deaba8e104eeb2e7a54d6db8215eedc8c4b3afcb42c13f158d075afb66ede61e0a5671222f7abcfc5d803e7db104ddb2c983dd70a33237ea8c266338e150b90bb70529a7db50b77acd61194c7e77feb42078523db9e2aa43a3a7767911a4a35afb1158c7b8f3618f63cf424a43099ffc9c8c8bdb49ca134c76cbabb57c20314d977c3c78218a9c1501b23b0db96e238ad8eb369222f0bc45007da308ba140c8aec7380a93042ceeb613174d8448eee0ae4558c4530f94041c7b1208bb6379c87e0680b9a5f4fd94a3222076a6a513c3a6a514da3fe662165f5c597cdbdedcc7e985d952e6900c8e33a513a480c86c5dcdc621bd901067f9bd53e52c07473bd43c6eb785f8184e26513b957a502a8d7a3dddc0119726972b22ac8812060962ffff57ad3ed5647a70f58374f4cbdec348031fb0b30a861fb5ad32a49db011d82156e2960f0ed76a0f91c9adbc1466f767a52bd6eafb14c5fa2d1fd575c8d15790221155710340f836a103434065544dd121d47ebb91c624d123a9b604f81b0b30e78d2369aa59e2dc5b7d29b95dca57a567bdcd8d82e611bc39ea8376a713327b4cdb4bedc6039f28a94eed8e710c956a530642a2fd7e7d9645af1b37a7903351105d9ebbb77dc67464fa106e2afb2d2f2ce0c7a0d349ddb91e37667fa13480bd2befc2403a2a304684fcddd2335b74b3ed5a104acee1fb70ea6b98c0a6a57613a6f3b14a60121de8273cbb2693ddb30ac45b6ee58506c62134bce3ed3c810ada2433959f4e8aa74ec327984444e9a89e1c5c34ebe53f3b119a949183d4ee5584ffaae80df03eb8876a3fde9639326f1d7d1b08d4823b3591fe216dfddd2e7445525fa9e739e643304ef3fb678bb7ade3eb5d1e199d2732410716b309af43b63e7698f6a1a34d95faa93781912545f637c915642d9cddd88baeb1b0b7ce695b0325ca584b328e6dce925b8f5b5e16fe8482d1ff177be0a7d95320a67e98bb32452b6882be32339773d349d3bf6831800d19d90b534868b28de12fb578303e1ff6a6e0a859b97d1b3dd431f84216936d2e3bef58f46f35ee804e6f3d69737414237b1564b35eebd0a193f1a92d19859624690fc81449f4262a634945669a1d962111451514ea72ab795365239a825054a18f390dd585b09106ab1ca4642321b1837613c78b7be1cd6eb6ae49124c414c234b2158782e682875db5f6bd5dd65069b7"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000040)) [ 168.078682][T12710] binder: BINDER_SET_CONTEXT_MGR already set [ 168.084920][T12710] binder: 12709:12710 ioctl 40046207 0 returned -16 [ 168.095852][T12717] binder: 12709:12717 ioctl 10 20000440 returned -22 18:47:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfeffffff, 0xc5f3}) 18:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x900000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x125d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe, 0xc5f3}) 18:47:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xa00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:36 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0xfffffffffffffffd, 0x4) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001180)={"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"}) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000040)) [ 168.362538][T12750] binder: 12747:12750 ioctl 125d 20000440 returned -22 18:47:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x16, 0x1ff, 0x0, 0x6, 0xe8, 0x1, 0x9cb57e7, [], 0x0, 0xffffffffffffff9c, 0x4, 0x7f}, 0x3c) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0xfffffffffffffff9, 0x7ff, 0x1f}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) r2 = creat(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f}}, 0x20) 18:47:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xfeffffff00000000, 0xc5f3}) 18:47:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xb00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c00, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 168.441079][T12758] binder: 12747:12758 ioctl 125d 20000440 returned -22 18:47:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0xffffffff00000000, 0xc5f3}) [ 168.609425][T12774] binder: 12768:12774 ioctl 4c00 20000440 returned -22 18:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 168.672821][T12785] binder: 12768:12785 ioctl 4c00 20000440 returned -22 18:47:36 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:36 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0xfffffffffffffffd, 0x4) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000001180)={"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"}) 18:47:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3, 0x0}) 18:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xd00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 168.927328][T12808] binder: 12807:12808 ioctl 4c01 20000440 returned -22 18:47:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3, 0x0}) 18:47:36 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:36 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x400) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x3, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0xfc) [ 169.002823][T12827] binder: 12807:12827 ioctl 4c01 20000440 returned -22 18:47:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:36 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0xfffffffffffffffd, 0x4) 18:47:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3, 0x0}) 18:47:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:37 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mlockall(0x2) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3, 0x0}) 18:47:37 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:47:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x460f, 0x2000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000a00)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000a40)={@empty, r2}, 0x14) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1100000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:37 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:37 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f0000000180)=0xe8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000440)={0x0, 0x3, 'client1\x00', 0xffffffff80000003, "8068d2507ad13a34", "9e9da8fcf8cb139df8ce3968f1ceedf3f5be57bc350dd0e10e98696ce9cfb86d", 0x9a, 0x3be}) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000680)="0f01f4da9e0e0066b9000100c00f326467f4bad00466ed0f3806451df0114eeabaf80c66b89c927e8966efbafc0c66b8ff7f000066efc4c3a9cf3afb0f01ba0000", 0x41}], 0x1, 0x7, &(0x7f0000000500), 0x0) quotactl(0x6, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000240)="29f20147a5fb62aaade95021842335055f8cdce9e3eab1be928e0c9441a819a673a14ea49c4ae148466873f5c83d600a25707446ef6653327f6d0952dd07dbca579c8d2c478661adba437377f74304b67b96c33ace7f02632756c91c2efbce2f3b99780cc4175abd86a8e05348f676fbe21e8f6c84100a942fbff038465b") r2 = semget$private(0x0, 0x1, 0x670) semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000580)=""/254) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r3 = creat(0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000700)={'filter\x00'}, &(0x7f0000000500)=0x54) 18:47:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x80000) fchmod(r0, 0x100) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1200000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 169.792661][T12916] binder: BINDER_SET_CONTEXT_MGR already set [ 169.803441][T12916] binder: 12906:12916 ioctl 40046207 0 returned -16 18:47:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = geteuid() ioprio_set$uid(0x3, r1, 0x2) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r2 = dup2(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x6, 0x1, 0x3, 0x2, 0x8, 0x3}, 0x20) [ 169.983098][T12939] binder: BINDER_SET_CONTEXT_MGR already set 18:47:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1300000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:37 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x78) creat(0x0, 0x0) [ 170.027221][T12939] binder: 12930:12939 ioctl 40046207 0 returned -16 18:47:37 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x7c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:37 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1400000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1500000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100c5f3}) pipe(&(0x7f0000000040)) 18:47:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140), 0x1000, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0x0, 0xc5f3, r1}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000080)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000100)=0x10) 18:47:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 170.428534][T12998] binder: 12991:12998 ioctl 6364 20000440 returned -22 18:47:38 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1600000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 170.501164][T13004] binder: 12991:13004 ioctl 6364 20000440 returned -22 18:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8912, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 170.640703][T13036] binder: 13025:13036 ioctl 8912 20000440 returned -22 18:47:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) fsync(r0) 18:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1700000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 170.682423][T13036] binder: BINDER_SET_CONTEXT_MGR already set [ 170.687460][T13038] binder: 13025:13038 ioctl 8912 20000440 returned -22 [ 170.692641][T13036] binder: 13025:13036 ioctl 40046207 0 returned -16 18:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:38 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:47:38 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) prctl$PR_SVE_SET_VL(0x32, 0x15c70) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = creat(0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'broute\x00', 0x0, 0x4, 0x5c, [], 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=""/92}, &(0x7f0000000100)=0x78) 18:47:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfda, 0x101380) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x510, 0x101002) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000000c0)={0x29, @remote, 0x4e24, 0x0, 'ovf\x00', 0x10, 0x5, 0x71}, 0x2c) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xc5f0}) poll(&(0x7f0000000040)=[{r0, 0x1}, {r0, 0x100}, {r0, 0x20}], 0x3, 0x81) 18:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1800000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 170.913425][T13062] binder: 13058:13062 ioctl 8933 20000440 returned -22 [ 170.925905][T13062] binder: BINDER_SET_CONTEXT_MGR already set [ 170.932717][T13063] binder: 13058:13063 ioctl 8933 20000440 returned -22 [ 170.939327][T13062] binder: 13058:13062 ioctl 40046207 0 returned -16 18:47:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x89e7, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:38 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x100000000000, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000580)={0x0, @win={{0x1, 0x400, 0x3ff, 0x101}, 0x2fdb2f7e1bd9d933, 0x7, &(0x7f0000000080)={{0x3, 0x35bfbcfe, 0x6, 0xfffffffffffffffc}, &(0x7f0000000040)={{0x3, 0x2, 0x8, 0xfffffffffffffffe}, &(0x7f0000000000)={{0xe13, 0x101, 0x3, 0x7fffffff}}}}, 0x3, &(0x7f0000000440)="a26a2f32015aa3106b19ae1b841365791f5869d50feeb95cd66d962b2cd608554b1d53ad64ac857041e35d581ea34138568408813b07c035eb466f2d6a66144c0b51b386a251f1232c49f4c9ba82af30f0cbfed12a8a67b66a78f55e476806d5695934c2c63db2cf6a7d6c77c2916d95f21548239af1f1a48ad6b49024adf3e5d9ed0ef42f81b6b9edf8691ba6bafd724a9f68c28d37e3", 0x1}}) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1900000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:38 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) accept(r1, &(0x7f0000000240)=@can, &(0x7f00000001c0)=0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x27, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 171.135421][T13088] binder: 13087:13088 ioctl 89e7 20000440 returned -22 [ 171.197270][T13097] binder: 13087:13097 ioctl 89e7 20000440 returned -22 18:47:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x0, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}, 0x2) 18:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1a00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xae01, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:39 executing program 0: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_ch\x04\xb3f\xc7\xfd\xcb\x00\x03FmE!\xbc\xc4\xcc\x15\xe1\x17R\'5\x00U\x9aE\r\x8b.m\x9e\xea~\xa3\x14') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) 18:47:39 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') accept4$inet6(0xffffffffffffff9c, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, &(0x7f0000000180)=0x1c, 0x80800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:39 executing program 5: r0 = socket(0xb, 0x2, 0x7) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0x7, 0x8) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000080)=@bpq0='bpq0\x00', 0x10) 18:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1b00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:39 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) [ 171.438930][T13127] binder: 13126:13127 ioctl ae01 20000440 returned -22 [ 171.461066][T13132] binder: 13126:13132 ioctl ae01 20000440 returned -22 18:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xae41, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000100)) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x40000) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 18:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1c00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:39 executing program 1: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000640)={0x20, 0x4, "55aa59b0aa38900c376ca96f7c35a90eca5463b16b5ccfea26285a252e445c9c", 0x6, 0x7ff, 0x9095, 0x1ff, 0x8}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:39 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0x6, 0x4) [ 171.687829][T13159] binder: 13156:13159 ioctl ae41 20000440 returned -22 18:47:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x14, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x86f8}) pwrite64(r0, &(0x7f00000000c0)="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", 0x1000, 0x0) [ 171.734456][T13164] binder: 13156:13164 ioctl ae41 20000440 returned -22 18:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xae80, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:39 executing program 1: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video1\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1d00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 171.879226][T13179] binder: 13176:13179 ioctl ae80 20000440 returned -22 18:47:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_getscheduler(r1) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 171.943303][T13182] FAT-fs (loop0): bogus number of reserved sectors [ 171.966804][T13194] binder: 13176:13194 ioctl ae80 20000440 returned -22 18:47:39 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x7, 0x0, 0xc5f3}) [ 172.013155][T13182] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1e00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:39 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}, @fwd={0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x75, 0x93, 0x1}, 0x20) 18:47:40 executing program 0: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) syz_open_procfs$namespace(r0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20040, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800014}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x301, 0x70bd25, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x1f00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 172.244178][T13223] binder: 13217:13223 ioctl 400454ca 20000440 returned -22 18:47:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 172.321522][T13231] binder: 13217:13231 ioctl 400454ca 20000440 returned -22 18:47:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 18:47:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x2000, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000100)={'veth0_to_bridge\x00', {0x2, 0x4e21, @multicast2}}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) r2 = getuid() sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20302000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0xb, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x2}, [@nested={0xc, 0x8f, [@typed={0x8, 0x52, @uid=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000080)={0x7, 0x3, 0x1}) 18:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="c5e4fed6e1ec71b4e6bc22483508f2c7", 0x10) r1 = open(&(0x7f0000000200)='./file0\x00', 0xfffffffffffffffe, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x100000000, 0x200800) 18:47:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 18:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 172.669207][T13276] binder: BINDER_SET_CONTEXT_MGR already set 18:47:40 executing program 5: fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2100000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000580)=""/147, 0x0, 0x93, 0x1}, 0x20) 18:47:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r1 = creat(0x0, 0x0) write$binfmt_elf32(r1, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x4, 0x3774d6d2, 0x200, 0x6, 0x3, 0x3f, 0xfff, 0x1a, 0x38, 0xa6, 0x5, 0x33, 0x20, 0x1, 0x0, 0x1, 0xffffffff}, [{0x6474e551, 0x1f, 0x0, 0x9, 0x8a, 0x1f, 0x8, 0xffffffffffffff2d}], "24f3a16d9713413e5b21fc805a5fc6d65d093f639b65be380dd2efde255d2ca214bec585edd6afa9bd9d8e5cefdb7eb15cc9d8916e40e405087751c657f7a3b5208d306b4eaf0bf0d1b44dab49af2e4a201e26ed4fed669d3a7e0d10398e9e818511dd3cb3b7e6acb0eb726abd48296c2bb26d461f3eca524f01c535bbdb11c17b03270eb5eb0d7da78ebffaa8c42fe691f5957bd8c6819e692ca7b5df9117c33e3af134d6bf1f7e93a095981f1526d746de1272a62dd0516a78f277073ec788f8e7d61f78bfe5", [[], [], [], [], [], [], [], [], [], []]}, 0xb1f) [ 172.724159][T13276] binder: 13263:13276 ioctl 40046207 20000440 returned -16 [ 172.792156][T13276] binder: BINDER_SET_CONTEXT_MGR already set 18:47:40 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc5f3}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) 18:47:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000580)=""/147, 0x0, 0x93, 0x1}, 0x20) 18:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2200000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 172.834380][T13276] binder: 13263:13276 ioctl 40046207 0 returned -16 18:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:40 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:47:40 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000580)=""/147, 0x0, 0x93, 0x1}, 0x20) 18:47:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:40 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r0 = socket(0xb, 0x3, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@empty, 0x23, r1}) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2300000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}, @const={0x9, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x69, 0x93, 0x1}, 0x20) 18:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4008ae89, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2400000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:41 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for[children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000080)={0x5, 0x1, @start={0x9, 0x1}}) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r1 = creat(0x0, 0x200355) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @start={0xffffffffffffffbb}}) 18:47:41 executing program 5: fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @const={0xd, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x5d, 0x93, 0x1}, 0x20) 18:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2500000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 173.412563][T13357] binder: 13355:13357 ioctl 4008ae89 20000440 returned -22 18:47:41 executing program 5: [ 173.515003][T13372] binder: 13355:13372 ioctl 4008ae89 20000440 returned -22 18:47:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:41 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) creat(0x0, 0x0) 18:47:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x51, 0x93, 0x1}, 0x20) 18:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2600000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4008ae93, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x402000) getpeername$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) 18:47:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2700000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 173.804998][T13404] binder: 13402:13404 ioctl 4008ae93 20000440 returned -22 18:47:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:41 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x8000) write$P9_RATTACH(r0, &(0x7f0000000100)={0x14, 0x69, 0x1, {0x2, 0x4, 0x7}}, 0x14) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0x278, 0x7f, 0x6, 0x100000003, 0x1, 0x3}) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x2000000, 0x0, 0xc5f3}) 18:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2800000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 173.936551][T13423] binder: 13402:13423 ioctl 4008ae93 20000440 returned -22 [ 173.951510][ T26] audit: type=1800 audit(1561834061.813:42): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17011 res=0 18:47:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:41 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r1 = creat(0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x80010) 18:47:41 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:41 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2900000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 174.138352][T13447] binder: BINDER_SET_CONTEXT_MGR already set [ 174.166109][T13447] binder: 13439:13447 ioctl 4018620d 20000440 returned -16 18:47:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x51, 0x93, 0x1}, 0x20) 18:47:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2a00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 174.226203][T13447] binder: BINDER_SET_CONTEXT_MGR already set [ 174.263782][T13447] binder: 13439:13447 ioctl 40046207 0 returned -16 18:47:42 executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)='trusted\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs$namespace(r0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000000)=""/202, 0x315) creat(0x0, 0x0) 18:47:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x51, 0x93, 0x1}, 0x20) 18:47:42 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x20440, 0x141) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, 0x3, 0x5, 0xa0, &(0x7f0000ffb000/0x3000)=nil, 0x6}) recvfrom$inet(r0, &(0x7f00000000c0)=""/44, 0x2c, 0x40000000, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x259}, 0x0, 0xc, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2b00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:42 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) syz_mount_image$iso9660(&(0x7f0000000140)='iso9660\x00', &(0x7f0000000180)='./file0/file0\x00', 0xac, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="eccfcc0eed291fb953b19b518b934ffe2a88de81d8578817bbf92119a8add1a0e6f8cf1ec96583bfc0ba419391ae59fc8d8e305f848d1a4b553cbb553a3d9d298bae69a318782fe976278ddf7c6096e9ad4c3602ac94fb90c1fd2b528e45bbdc2c7a0ec29786b7bb3df4000ef805fa69c4dd96977ea6a3d57caad01ead96a525cd8f5f8600dcb913ee75d334906bc33db0a8c580a15a7d2fe445824d3819e02f4fe5d276ef72ae3b56af13ee4f3dd4316cc54397e491b5f173d884c8331d4f11addca859fe69746e81ecda86153746d716", 0xd1, 0xfffffffffffffffd}, {&(0x7f00000002c0)="ad7fcb47c850c8d7789b", 0xa, 0xf4}], 0x100020, &(0x7f0000000580)={[{@iocharset={'iocharset', 0x3d, 'cp860'}}, {@gid={'gid', 0x3d, r1}}, {@gid={'gid', 0x3d, r2}}, {@map_acorn='map=acorn'}, {@uid={'uid', 0x3d, r3}}], [{@dont_appraise='dont_appraise'}]}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x14) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0x7, 'queue0\x00', 0x3}) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x51, 0x93, 0x1}, 0x20) 18:47:42 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8000, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) socket$kcm(0x29, 0x5e97f88253dff792, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000180)={0x3, 0xfffffffffffffffc}) r1 = creat(0x0, 0x0) getsockname$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 18:47:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4040534e, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @func={0x7, 0x0, 0x0, 0xc, 0x4}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x51, 0x93, 0x1}, 0x20) 18:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2c00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 174.809466][T13532] binder: 13516:13532 ioctl 4040534e 20000440 returned -22 [ 174.833985][T13536] binder: 13516:13536 ioctl 4040534e 20000440 returned -22 18:47:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2d00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:42 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:42 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x101, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:42 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x20000000000) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) r2 = creat(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000040)={0x0, r2, 0x1}) socket$kcm(0x29, 0x5, 0x0) 18:47:42 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4068aea3, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2e00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 175.081782][T13560] binder: 13559:13560 ioctl 4068aea3 20000440 returned -22 18:47:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x2f00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 175.179112][T13568] binder: 13559:13568 ioctl 4068aea3 20000440 returned -22 18:47:43 executing program 0: mmap(&(0x7f00001a4000/0x1000)=nil, 0x1000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, 0x0, &(0x7f0000000080), 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r0 = open(&(0x7f0000000200)='./file0\x00', 0x480801, 0xffffffffffffffff) prctl$PR_GET_SECCOMP(0x15) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f00000000c0)=0x174800) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x40000, 0x0) r1 = creat(0x0, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast2}, &(0x7f0000000040)=0xc) 18:47:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x408c5333, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00'}, &(0x7f00000000c0)=0x54) [ 175.394795][T13586] binder: 13585:13586 ioctl 408c5333 20000440 returned -22 18:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 175.464587][T13597] binder: 13585:13597 ioctl 408c5333 20000440 returned -22 18:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x41007701, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x889, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2, 0x9}, 0x8) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, 0x20}) 18:47:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:43 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x4, 0x3, 0x3, 0x9, 0x5, r2}) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 175.640973][T13610] binder: 13607:13610 ioctl 41007701 20000440 returned -22 [ 175.704616][T13625] binder: 13607:13625 ioctl 41007701 20000440 returned -22 18:47:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3100000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:43 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r1 = dup(r0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3f}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, 0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, &(0x7f00000000c0)=0x4) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000440)='./file0\x00', 0x101002, 0x1) fcntl$getflags(r1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000480)={0x0, 0x6d0, 0x5, 0x1, 0x9, 0x80}) getdents64(r3, &(0x7f0000000300)=""/202, 0xffffffffffffffae) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000280), 0x4) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={r2, 0x4, 0x8c100000, 0x1, 0x40, 0x5, 0x100000001, 0x8001, {r2, @in={{0x2, 0x4e20, @multicast1}}, 0xfffffffffffffe01, 0x10001, 0x3, 0xc069, 0x5}}, &(0x7f0000000240)=0xb0) creat(0x0, 0x1fc) 18:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4400ae8f, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:43 executing program 5: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffff9c) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x7, 0x7, 0x4, 0x800, {0x0, 0x7530}, {0x4, 0xc, 0x4, 0x6, 0x7, 0x0, "9c9415f3"}, 0x4c6, 0x6, @userptr=0x5, 0x4}) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() fcntl$lock(r2, 0x11, &(0x7f0000000000)={0x0, 0x20000000000000, 0x4000000000000, 0xc5f3, r3}) [ 175.845889][T13635] binder: 13634:13635 ioctl 4400ae8f 20000440 returned -22 18:47:43 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xffffffff7fffffff, 0x8080) bind$rds(r1, &(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x4, 0x4) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:47:43 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x2d, 0x93, 0x1}, 0x20) 18:47:43 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 175.923746][T13649] binder: 13634:13649 ioctl 4400ae8f 20000440 returned -22 18:47:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x800448d2, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:43 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3200000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:44 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x2d, 0x93, 0x1}, 0x20) 18:47:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc5f3}) [ 176.175904][T13672] binder: 13671:13672 ioctl 800448d2 20000440 returned -22 18:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3300000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x2d, 0x93, 0x1}, 0x20) [ 176.330996][T13693] binder: 13671:13693 ioctl 800448d2 20000440 returned -22 18:47:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300042f3aa6000005a4a4038d66a63a000000000080"], 0x1, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x8000, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}, {@privport='privport'}, {@cache_mmap='cache=mmap'}], [{@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}]}}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000200)='\x00', 0x0, 0x92) getdents64(r3, &(0x7f0000000300)=""/202, 0xca) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) creat(0x0, 0x0) 18:47:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3400000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80045301, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) [ 176.573234][T13716] binder: 13710:13716 ioctl 80045301 20000440 returned -22 18:47:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3500000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 176.669972][T13727] binder: 13710:13727 ioctl 80045301 20000440 returned -22 18:47:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1000000000000) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 176.740110][T13728] 9pnet: Insufficient options for proto=fd 18:47:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x800454d2, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3600000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:44 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x480000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x5, 0x81, 0x52, 0x800, 0xfff, 0x3ff, 0x8], 0x7, 0x3, 0x7, 0x6, 0x6, 0x9, {0x1, 0x6, 0xa63, 0x73, 0x8, 0x6, 0xc5, 0x2, 0x9, 0x10001, 0x2, 0x1, 0x7f, 0x9, "8f331cd05e02d5f02f69877d52a320bfa456d9a9ab89ec2b6ca7181de9e10e68"}}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:44 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[r0, r0, r0, r0], 0x4) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 176.905074][T13753] binder: 13750:13753 ioctl 800454d2 20000440 returned -22 18:47:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3700000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:44 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:44 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x0, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) [ 176.979248][T13753] binder: BINDER_SET_CONTEXT_MGR already set [ 177.016023][T13765] binder: 13750:13765 ioctl 800454d2 20000440 returned -22 [ 177.054363][T13753] binder: 13750:13753 ioctl 40046207 0 returned -16 18:47:44 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x10001, 0x503400) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000080)=""/120, 0x78) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20201000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r1, 0x308, 0x3, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, [{0x8, 0x1, r0}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r2, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:44 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)=0x0) fcntl$setown(r0, 0x8, r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x551e, 0x3000, 0x40, 0x9, 0x401, 0x4bb, 0x3, 0x2, 0x401, 0x4, 0x7, 0x4, 0x200, 0x6]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, 0x100000001}, &(0x7f00000001c0)=0x18) getdents64(r1, &(0x7f0000000300)=""/202, 0x40f) creat(0x0, 0x0) 18:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x0, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3800000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x404000, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000080)={0x4, 0x0, @name="d7e5e9d4617789d4a311defdb01f5961c8938a1c35575b96369d2b5493ad3221"}) 18:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x0, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) [ 177.262724][T13791] binder: 13790:13791 ioctl 80086301 20000440 returned -22 [ 177.305178][T13806] binder: 13790:13806 ioctl 80086301 20000440 returned -22 18:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3900000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) 18:47:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3a00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x6, 0x6, &(0x7f0000003640)=[{&(0x7f0000000080)="69d993d8abc647b197ed4b79e38ef263c9eb52a9cae0f97d2634a31f56841f85264b7dd68c982e009c94e10e4deee1503b61089fd63ea43fa8feb60c56e129d1b7a458a4e52366e2189ddc3a0de78349b47dcb7d39d2822348c824f2682b063fcdb490d197c9f8ff6350e8a33865a37bca98afd64b853063ea", 0x79, 0x6}, {&(0x7f0000000440)="74679b02d6dbea329a34d07b3072314f7eced247c26e599a1f0048014b26045a43c9426d4566d89ed4a5a6ce70ebad6f31a693051c2cdc4ef03921b4edb948d9789eb4703710c7f2ba9d2c5b497c52e14deb5d1e5daee85b942d2796b8d2be542bd01a418a5c8f7aca6af946b07b39190b82820035550559139c4460053598dacdf6218759719809c07db0f87bc91e6d8a027ecdf60864a78266dbc98d3e37ccbee4b555cf89c6d20c65beb89ee85dc0a8c0ad71f30bca27e6098a416cf253517783b053996514b073ebd525d04c8904e4b1eb", 0xd3, 0x1000}, {&(0x7f0000000580)="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", 0x1000, 0x8}, {&(0x7f0000001580)="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", 0x1000, 0xffff}, {&(0x7f0000002580)="06a3b9a1b701f22761fae852f910add3eecf964e156e9933de1eb8f6ee2d4daa7a9cfdbe63bd902d15de839581423406bbec6e51942aac104a3f81d76bbfa539194d807b1de56025d60c6653f240157eedd5597d76414031c84614569924ff9ab1599fe601c9f45f6868dddb74996014ebff4e1457e11aa89f60dba0d79b879f0cf215656fd94af6b392d3961674027b3dd20b722021113fd9c520d0a54a288824965bfdfa634df2863304906e83d0e27b33bc95285ef3a54f2faafd900e653316af386c4b28bca16d7d75fd7dc83dd17112b5b36127f32c562263dffb53db744641cbd0ba33b3a6270cae896aca86471914147e6e45d5235dd5b69bf738acb246b0638c357af17c69145dcfc4cefcd6d6d9791ced3e324bbf058081919cbb201f795fa6f0d2d546fa15f8d07c77971ff2f91647510adbc2f3bc78d7310fd35907f6174988a71443aecee98bf1268902cb5a341c1fc1b3723aadd1432c372764d92b1dccf021e964edbaffb2d7c712221cf4b3ddf9662a1373036576473a1013d240c84d9a2380170a0678147df60c6e50164730e9132688a28c534d0c664f54d4e2de09a1b8acdad64e462f7268185bf7a3888e1370011a02fca673f943e3571031adc18e062f6cee81f94bcd61ece46827dcdc96f5ab34f884d9180de2fa9393e3ba15f9363fbfc59eb5af657d6730ecc1ce51a8758dfd52cb1687d9a25e96d45788ed15896f8e4bc88707a280f0c5bc25663e5371efcde3447277ca4bdfab047209cdf1cdfbaf11e097bfb5b8445fab9b6c3760d043f14379ea317817829db55cfba59150064faec15e5ed712a03936f0b2ba37bb0494fba8f1aa26edf890a584fbeb1e12e8156c2300cb54da0b15336f79333a8955c783a5b0eedf24718dbe19b3169b899440f1f798e6b87c41cbff40925d774633ca568bdee4d4223025bcd09165164a38fd9408e0468e22e43c2a2e5f554ae2ea7521eaa4e0537103c9b5978a8a5808cf6a82e0d81b0c5a58ce565e4604a3a9afcfcdc922d0e65401f8d67d8c4bb5e1ec5ec7cb1aef8c105d38659f56db360a751884e56e5afa8d058bc647bfc8b4f5671331575c840aaa85dac990edb04c092fbebef6c5181608b30674f591b16610125c4b5941ef40081d50beba266bf5e5fa51d274bf9312902d8aa1776c266b14776bfdf10254fbfe5f9cb1cada69eb67736325655d559684c4e7ea9a7ce73529376da95978b67923c4ce691fa1e929505da71aeda5916810fb2a8e93156a060fd050dd7b762d6677446487d5610421774c87fc6acecaf58cd548c2178a1b048c89e2994017d00b5e24fc80f0edb126c9bc73ab664c0c7db586bd6748fa4f773347d72f209d7ca765931fbd697583f0831c436ee7561f561d6d2b0f1face02723c1b9d546de9fc7f3c3510e1eae765edc698feb1b192755db65321a43a8f893e3e44b66cb14e0c312e9fd2f4fd6d339b6106a10d8ca55c8ee01950c77517bb77c761d40b841927902ec1c2e50d128a611440ae024724fd13b9bb03478cf1fa134a4bfef8724251079c11a4c6fc8159bf812ca361479dbf65a9434f43ab7eff35bf6bf2bac6d00d68649800c50d9d05925f61bb11bd1430158cec84173ed92b725006e88b2ac5a4aac6fa6c6fbca763b4a0114c9c7adee45e914f9c0837bf25527c6fb495ac8a6dc96c50c3975d2c1d60820858b8bea3dbd03eeca817cdc0bc30edf2896ab31a1e689caba2de17c34d9ccfbca7ce00f7ca019f35238717f100d85c30d3b06cd0e9c97e96d6ca27d24275bee1845b42bb3c1f7197f22a083c5c097d9fe98cb61a74a391890607998f3da7d5805360bab6852c6dc9f94b9d92fdb0921924ae8f3d7af21bc58f4527bf425664b44e7628828e77bfac399bb9c870993700cd6fb14ff602e73004f8a53062a174c28a55ee21eb2160587610b387c0a030c4321939983857c355ec4e1eb04f92219b5b5f1c483088a8dbd759e013fe06c824174f30a114b1ea98d8267dee278b176d3e24845beeb7836111d3321358ab2b5fe05cb1ba9eca585c6c49bec675ac98aeb60a7b05e2aa07db0a7b65d07ea0d76c9df0441636081d258e92265065c21b6f9153c3d99b1e1b3594e434b8244aa1cd846f20d75f4e57d7b289975a187590cbf7709d1c39b72e0ab84f6bd82b0b03d87585d843611e6f399700f51a98f7d0a8464e4d8df5dd0f780d95ac80f2621558726d38753cde6e59a080a3dcab2f74c8f7aa00849f51d4ccc78a133a218e620208ac6024f1caacd09e14831fa6473225b27f02369dbc5618d44f883e7e90f62b3f4ba3fa6319c1334d738de71331a6d1c1bece86172871241d5165da2806f405a6df7843e85f5a6bb0e47c7a85025776366e742dc4ce6cfdd05528780161c71665a066d5538ac928280e548bd2e9c7dec127ea6120481d97a007c8be0c25088b698cda786e574218a008087b62de02828e4b04743bc2f4a13cbd7b41d2b5c8f3fabc196874521887a5418b986cc45bee59ff4e0525f08de3dfea38ccbc94d54561a3fb0ad5a617f1a2056b8948bd136c812439b423a00b074154c1b15b86ea6a1309686bf68278b2461558fa1dc22ecd1673550286cc1391e0b881a4a507605879647afa5e0de8ab86ff5c55bfd06fe66d4b679c347352aefaa650df2923e72ba2789986da3f356c106ddeb5d65421599bf9f22916c0d3ba8eeb168b97a54adb7050ec398822ee00694510b8209cbb328bcf6206cba80b94077aaced13bc1324d5f7ae6a30bbfe71f685958b297634517c43d25206b3d34f38db86252c13adf9e7fab022c8e39e09e5bec808403dc063ea85d50b0107231962901c06822af229d1befc1926265bccd7ba9b92dcfa1307287f18082ff7c32a5ad764e43398244c3b1bb9dcdf8e5cea3d9eb0ae6945339b4fdca9edb4ed71127d07d5ea2a1019a15cd54a6fbc30c589a967b5277366f67bbdd6d2f37a11c81d967add8d34bf8fa32c375ab440de93c61b7812aa2a35d357d91670b4a17c18a0eae2d78760b3b8e56c359ec8ba93bce9afffb0f9c6f9cc2d79fff69f53e9a732f1bceed117ebaca3b6c46f2f07852a744b22b7c1ab1c7e427580e58b9b5cefb58a8c8f423682aec3eeebf463c17878a9a88a8a532455d1c593e82e3c1686c4c2c17eb4142c1fa1739d204e357bc7f720c2c6b2a966d2f57fb8b680d74b4a07bb6b4b88e00f3433674352d9bd6a5b62e40ddf0a9118e991288845ecc0e793242c220032ad04941088b79f446b82f91feb28bf5347ce0b66e574258cda14ed15fcf1f64cbcd371c0ad182a451834f6f6211a758348b83ca2a7fc61497632b0e2023714b987dd4c5ae137d74f575582996d5f22034a41909de9a27a4c80a4cec273a04444cf3f0f7b350bd421565ab97dbab6566c103474204a09a5e9b278b5aafe4e71a10c70a153ef36d25bed21dcabfd585aa6fca346b8c3271bc6f5eb1b170b2cdcc75cc91b64f7a6f07b339973f876a4e6d23f22a6790c1f468828d7141763400969b3770b71743e3d6f087b4bf2d530a0248a785d693d6d8f4965064f82760bd9425a5eb1ae75c0a4f0090a394a71007bf3a98cca66cf36a559955565ef7a5eaacc1e4d2c0e772026a01d8ce6151aa1c79b5c1348e58cdc89e14b2f664858c6bee47f5b7c055ee0345845bdb2f6fbabb9fe8cfa93d5ab32ed25561f681068b1367c1573ba667466f87a7fac8e8dc9ccd2b78671f04383604fdf7f5f18acf434b40646d265dcd9056c472c0ef1b8f00260f2ae04729acb01b5b1d633dbcbeac28c3096304e157d1f5405a5f34e3f4465f3a92463772d11b619c5c60ee9ea326825d7ebbc22e9e50a71c007c48ee122833f76f1929c733e1e17a52cbfa214e3697c6e32f2db8be541ae1f32cc840dc76300f320bd4338eb7434ccb2f2228ee4922f714c7624f12001dcae50ea20c3cd98c3aafd76ccf413f6b6208b55f9fed4fd9fbe3a3c2b8e45ab2b091b0dce0f97f4e90de0642ee1a25f4e62b6a441b8d68965dbb77bb4bc72ad1acf6d1316870b2f89684b5240ebbe15710b938fc56e524724aa0dc12e0b190e0caa9fa1824c1e47bbc784ff04d2eeca43b96212c0aabfc9ff7fcc2a9288fb12b4bb52687ef3d5b3880bd452495b410e82366c0914feaae65f1dc62fd51fa2e556cdf6cd39fce65045d4f8d2d2e611de68da3866d54066692f7b7660ce6864f905611b58985749547b60197c4a1c9c5f570274d696f29176c80ea5f11dc17f123f6e0fd62d5ccb49d59c92a71325958b2b5087f877824c39140d73d201227fcdc021ee8f9e1fd74f491c14832ee8283bc8c2996c013bf09a60106408ebc49b1471e9ca0f5e60a3cbdfced0d0b527ad9c3353e03f25315f916e9c84fbe5932fdfbe56ee029726e976bde05414e4f21a01f67fc5ac959c92e461e3b6fcf0c6bc63057a05dcda367ece3ade26c827ed41ce5791fff5910caac903da14b0fd8c03156a61364827db5c77555b8305101f558503ffeab8b0d7ca949807574057a84b7556d7f41f00109a54e4ec086a057052901aaced5edda2ae1cdc5b48a339574d0a58e876c6f49f0d3920b5fd76a441c8a4c874c024059c8bfd6ac2428f59231208967301768f8704f2797603188bd8d324c405a1dba2082f577a6bcce0cc9044e990d153c627bbf83fd23870eb0f22e889839620c879d077fd1734d8477d03f29a0bd097185d33bf301151b3007c29d2a2b99ea96c1441ca203a02c1bc5c9a694bab7620743cec9450949f49c834d117649c715900818bb908f80a66790614f3e6b04769f6706325568f6f5a83e114bd629380d00fcbbf340e8c751a42567d987cd7729fce05290193c6f44e33a29fdb4188111587f10e64b2530cd747b192cc60446112f14fbbf7440ce359a82c15bdbc80fa67c98d5257cefee2ad36751e8e5f3aaa5e7faafbea69e4615a5d86181190c3cafb4771a4590cb8ecd08fffaf647d602aed3f27db4013f94f148bda9a21a43f028c26652a7d64104f95d8383ece39f2bad2ebd88868753c733e9fd6de7eadb3d94829169e2517bb58994f43641bedfaaeeec92fb334f36d30a12264195349ac80b72e1aeeaa873eb742c0d1fb3c1210c964c6c8ef8bafbcdcb9d4d1e21594ac236e98068925a86e08715afaa49ed7867af0e71058cb02251c9d95613e40ccb959b36b22610d9576f36836588c292f5c5d803e607f7b03dd6d45cf7a0409dbc0b7a1b50f54ca60205be023d6c27f99a86623bcbeea8522a2b721bc39db94b2e00a1da89dd2a06927c3e05a6ed878b33696c731f00c2092ad25bad523c6ecd5e13aafef7c45b4fe44091257d9893d7c020a032322ce2bae583bf1f0af4524687d4ae39e06e27fe81b509f7c34161f787c33118c470f8f624018b99b588aced8d6d019b09e869534c0751677f713e8d7863a903cc823d755cdb8df3d911c08e462bad2e455abb09fc5afb00a458611f9bcadf736b52fd123fd31dfdea9a51ff027c29516cef847060b79bd867516cbb675fff99653feb907d0eef3707de32e226db7437ab79845e236fd641a9963c85cad5072009ee1911ee729f3e4503b2ee2cdf5c9a4703a9fa5069f199269e34fb551f13bdea193a55eff7a141504ee270c0af166a54867e38d3d092037c12dc2450a49f08e1bb3292fc88247c16f2c4b0c44069692e1340aad07b7681142cc33b44880f8a5087dd98be2823cb4f7a4dab59d1792042197808ebb2f73b3836bb568c9804c2359fe367ccb7508cb81e1d2a062d3fcaeee9ece8", 0x1000, 0x10000}, {&(0x7f0000003580)="3255fb4ac88f079a62ac2ac8008b4bc92817201e121208042ae48ceecf589790f4ffa0acfa5cfb9eeda3b9aa4772a50fc38d46c613283e163931a080d67df12bafaae7d9f376d73794a199464e3c48f8fbe290024791674607a2e36d499d118c15c70632dec9bb312e82fd823fcad74dd548e8cff4968cfc639fac5df8c4d4fac32bc92940bda4c71c073eb848f87fbe8c0893257c74c036", 0x98}], 0x400, &(0x7f0000000100)='vfat\x00') getdents64(r0, &(0x7f0000000300)=""/202, 0xca) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000280)={0x9, 0x80000001, 0xae80, 0x9cf}, 0x10) syz_mount_image$minix(&(0x7f0000000180)='minix\x00', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x4, &(0x7f0000003940)=[{&(0x7f0000003700)="04d885b9769d44507026c37d80a4d86e2155ca8047bea45f7f9d2de09d7c2b61387673e732bb0d440feb6ba3335dcebad8f182e9562d738da05fa676e40abcf67a40a9509373a15fcab0f316ba40fb272f5a6bccb242314cc0a51773472c872ac35cd84b6c6a5a4a4d01cdf88cc349ef814015e06b3f2edf0fd4f8ddb0a7e566fb0b3ef96941dc52b6bf", 0x8a, 0x1}, {&(0x7f0000000240)="2cc40b5e2d4bb3cf4246c3de89fb200b84dcb4aca2ffae1340bded43d3fb7bf52ed7e33d3a440c61ed", 0x29, 0x3}, {&(0x7f00000037c0)="e45f66a12d48b43bcd06d66019608947aef8c650241498b8adb01e5c63f46e9025035fdebd256dd3110df2ce25ad142f1e7b63364ca76902f43f5b1160dd537f52e6e87dc10ce440480283fca171508db7c7b198d2", 0x55, 0x3}, {&(0x7f0000003840)="723efe0c56511f9f5a7c8e79baf31dd73fbe7bb01be63497492561cb8d233e73c6614bcdb416d28ef6365448d3f2a2fe0887d2e93ef16e91fdddcf720b5bc39131c20f54f295b055c2cd81d49e3dd59b6bf7d6a41007311de58b9d63c609b9ab84fe81263c96a2786f02637ff23cc49400339d8418354527a90cca3ba2a7ee9a1694be8497cc5d3eb328957b5e4ae1258bb4c42196d0a6ddc4c21dc02648c118285fe94b4ec568d83cdaf106bde886b2b9e6d96ec7896f2a2f730ec7640c1c1091bae060c49f2476fa0bed8b2e84e7b3fdfc3abdcc6efb5bc04e28b5647953f971091b5ecd3008", 0xe7, 0x2}], 0x8882, 0x0) creat(0x0, 0x0) 18:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffff9c, 0x109001) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x11, &(0x7f0000000080)={0x3, 0x0, 0x0, 0xc5f3, r2}) 18:47:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3b00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7, &(0x7f00000000c0)=""/20) 18:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:45 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x305000, 0x0) fcntl$setstatus(r0, 0x4, 0x0) 18:47:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3c00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x3d00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x47fc) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000002540)={0xb4, 0x0, &(0x7f0000001480)=[@clear_death={0x400c630f, 0x4}, @increfs_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x2, 0x2, 0x13}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/55, 0x37, 0x0, 0x35}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/111, 0x6f, 0x1, 0x39}}, &(0x7f0000000380)={0x0, 0x20, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000013c0)={@ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/4096, 0x1000, 0x1, 0x3d}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x2, 0x0, 0x31}}, &(0x7f0000001440)={0x0, 0x28, 0x40}}}, @release], 0x1000, 0x0, &(0x7f0000001540)="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"}) ioctl$TIOCCBRK(r1, 0x5428) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000002580)) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x82000) ioctl$RTC_PIE_ON(r3, 0x7005) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000080)={0x5, 0x9, 0x4, 0x8, 0x6, [{0x7, 0x4, 0x3f, 0x0, 0x0, 0x400}, {0x7, 0x80000001, 0x200}, {0x1376, 0x2, 0xe6, 0x0, 0x0, 0x208a}, {0x4, 0x7fffffff, 0x4324d61c, 0x0, 0x0, 0x100}, {0x7, 0x1, 0x10001, 0x0, 0x0, 0x883}, {0x7, 0x0, 0x81, 0x0, 0x0, 0x1180}]}) [ 177.903995][T13883] binder: BINDER_SET_CONTEXT_MGR already set 18:47:45 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 177.987535][T13883] binder: 13871:13883 ioctl 40046207 0 returned -16 18:47:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:45 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:46 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4000005, 0x81) read(r1, &(0x7f0000000000)=""/122, 0x7a) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 18:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x4000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:46 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2a6000, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x80, 0x0, 0x3, 0x0, 0x0, 0xab, 0x0, 0x8, 0x97a1, 0x5, 0x3ff, 0x2, 0x0, 0x100000000, 0x6, 0x5, 0x7fff, 0x4, 0x8000, 0x9b11, 0xd06, 0x0, 0x2, 0x4, 0x6, 0x200, 0xc99, 0x800, 0x4, 0x9, 0x40, 0x8000000, 0x8, 0x8001, 0x7fffffff, 0x2, 0x0, 0x9, 0x4, @perf_config_ext={0x10001, 0x6}, 0x400, 0x5, 0xffff, 0x0, 0xfff, 0x5, 0x90c0}, r0, 0xb, r3, 0x2) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0)=0x713e, 0x4) fchownat(r4, &(0x7f00000002c0)='./file0\x00', r1, r2, 0x1000) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffb000/0x2000)=nil) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil}) fcntl$lock(r5, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000280)={0x7f, 0xfff, 0x86, 0x0, 0xca4, 0x6, 0x3, 0x6, 0x157, 0x7, 0x1d27, 0x40, 0x0, 0x32, 0x5, 0x10, 0x8, 0x8000, 0xe10}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) 18:47:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 178.209448][T13907] binder: BINDER_SET_CONTEXT_MGR already set 18:47:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x0]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x5000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)={0x4, 0x3, 0x4, 0x7fff, 0x7, 0x800, 0x7, 0x4, 0x2, 0x0, 0x100000001, 0x6}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x4, 0x4) ptrace$pokeuser(0x6, r2, 0x8000, 0x1ff) 18:47:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b}, 0x0, 0x0, &(0x7f0000000200), 0x0) [ 178.292167][T13907] binder: 13905:13907 ioctl 40046207 0 returned -16 18:47:46 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x10) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x10001, 0x4) creat(0x0, 0x0) 18:47:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x0]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0185879, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9aca00}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x521000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{}, {0x0}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000180)={r2, 0x10}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x2) r3 = semget(0x1, 0x5, 0x42) semctl$SEM_STAT(r3, 0x4, 0x12, &(0x7f0000000040)=""/6) write$P9_RFLUSH(r1, &(0x7f00000001c0)={0x7, 0x6d, 0x1}, 0x7) [ 178.572846][T13958] binder: 13957:13958 ioctl c0185879 20000440 returned -22 18:47:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x0]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:46 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0x360) creat(0x0, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xe5b) 18:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x6558000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 178.652361][T13969] binder: 13957:13969 ioctl c0185879 20000440 returned -22 18:47:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="d400000075af7e4d1cd40587a9625737c6e9b1da734b1fddeacce06a51604fbd6ff6609988c3a559d8fa8c0204958f0fad6d1d4733ea10286ee0b4e1b2f515b39c43200773a86a69bf1a95b03205a1867f780509d5ebc44581b49c8c3a743871c4e1f969c6d847c228e2f7bf707d60e3b03aa390857ac8ee43a1324c45204d25b13f03aebb99c59a6abf039dce4fc4bb684d28d32ea0e689514542668236fe64c37f14c9b10898f862979aa39260623e29eeccc22660a727b9c716c8e5cb99f8e7d53a0228139774b600"/216], &(0x7f00000002c0)=0xdc) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f00000004c0)={0x7d9, 0xa23}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r2, 0x4, 0x7, 0x3, 0xe2, 0xffff}, &(0x7f0000000340)=0x14) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000380)="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") write$eventfd(r1, &(0x7f0000000480)=0xb23a, 0x8) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0x1, 0x8}) 18:47:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:46 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e20, @loopback}}) creat(0x0, 0x160) 18:47:46 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfe}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:46 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1004b069}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, 0x4) 18:47:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:46 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8100000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xca9a3b00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000080), 0x4) ioctl$FIBMAP(r1, 0x1, &(0x7f00000000c0)=0x1) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000100)={0x4cd, 0x20, 0xfffffffffffffff9}, 0xc) [ 179.121479][T14018] binder: 14014:14018 ioctl c018620c 20000440 returned -22 [ 179.168143][T14033] binder: 14014:14033 ioctl c018620c 20000440 returned -22 18:47:47 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e006, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0xaa9f}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x0, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8847000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefdffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x80000003, 0x0, 0x8000000, 0xc5f3}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000240)) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x0, 0x50400) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000002c0)="823f4dae03d1cf23ee904ab088fe736037936a2e6cadaec8a2c94296caa7a63044ae48e2180f08978362da340876b26774e2d80d9f26df0359c49af0abec951cb91478b3eede1e9fc6d05bd72076ae96b935964676e0a9646b04608bd0d30f88c909b5ccb97e6714445ab2927d1d46edb93629ad273651") r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x13, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000140)={{0x2, 0x4e20, @multicast1}, {0x306, @local}, 0x20, {0x2, 0x4e22, @local}, 'gretap0\x00'}) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000340)=0x811, 0x2) splice(r1, &(0x7f00000001c0), r3, &(0x7f0000000200), 0x5f, 0x7) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000080)=""/134) 18:47:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x0, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x8848000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 179.437545][T14062] FAT-fs (loop0): bogus number of reserved sectors [ 179.495121][T14062] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8080, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000280)={r2, 0x0, 0xb7, 0x3, 0x1, 0xd, 0xfffffffffffffffa}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, [0x7f, 0x81, 0x9, 0x5]}) read(r0, &(0x7f0000000040)=""/165, 0xa5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000001c0)={'HL\x00'}, &(0x7f0000000200)=0x1e) 18:47:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x0, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:47 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x80600, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x11e) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000100)=0x1d, 0x4) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000040)={0x4, "dd0378c50c8b8a7bb5e306404576b6c867295623e0ebcf9cfac696977ce2d6f24a93f1a692b6ae9fb9416cf1d48878686dfe05835a88282b00229cd571d62847ca5984e33d1ebf03a7a0a96a9bdd01c3309a6135a4fa1af2e89cbcd0bdcd75bf4b6352a1fd7cd9820eb27a572a397bb417ef2573409e90405ede60783087b134"}) 18:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x88a8ffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") fsetxattr$security_smack_entry(r1, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='(cgroup-\'vboxnet0proc\x00', 0x16, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x9effffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 179.867907][T14115] binder: 14110:14115 ioctl c0306202 20000440 returned -22 18:47:47 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x1, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/133, &(0x7f0000000100)=0x85) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xc00e000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 179.911361][T14121] binder: 14110:14121 ioctl c0306202 20000440 returned -22 18:47:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:47 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xa330, 0x800) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:47 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x1000, 0x400) setsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000500)=0x5ddb, 0x4) vmsplice(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="ab91f8a0b1214b122422c2736fd37ba07f853f271d83bbdb0b270158a01f83e404d997169813ad5806791d95ac75bbdca52e529870b47d9c078b92189508cd975b7ac697ff74765dc411b9d5c75953e2941e238a415d79bd263adb9257eddad037d6064225d32ae062b3be6b50337da94d2298938456a5d10ae3d324419171632ace4b743f0fda1ad0441fa2623aa270ce836a5966b657e5b7d63308313c3cb927bc2dd271f9bca3623f37bdb0c579dadd02b9f6085e6fe34a03aa455543d9cd830772041c97beb26d4425", 0xcb}, {&(0x7f0000000140)="14e50a562f16ccb3d95409e51226cb3ff4f00af1e01421c5f5e6b0049f0b9d64fbb75f876c8e9f6a", 0x28}, {&(0x7f0000000180)="f600b0f6f4a31b413644f2ab5012570e8d", 0x11}, {&(0x7f00000001c0)="efc186dab4287c028b555388d789375548e11ac65f8899ecb87367c7a144bb6d19d272c322785de7f3eacdcfb510d6ca42bb32bd4e93bd9cd0404d6f17145c224ad58716c38e0af2b106f37b0aff720cf1067a19e62dabc5a39d53abcb4aaedee84dfe0f08a6b6881e2c258cf1a951c9ef87854e09e95e4449f12d25ba349436d93172bdc1ebaf63b7f53900ca4975be369ede53a8c7a0aa06cb0bc88d87fdb40055594086a5cc029ecd29dbe06b23d6ac96f26018606f53e128dc763f639408e9dd", 0xc2}, {&(0x7f00000002c0)="559682e7a731fbb1193e0e659c06fb1aee", 0x11}, {&(0x7f0000000300)="4ff726fc84ba94bee864e35826d842c66e594c19818663c01c5fd70ab2de44b1dbf4813bf03f4b6d35acc1c3744ee7fc0b4c5e4d355c051c1c876d8d556206107f2e29fade295163265f61b92036cb493fb08f50ff5c0821a78bbb623298e629066e6d4818994c7ad743ae0d30a13829372890352abb3a911580180f63402c3dc42b163e7e6f4687", 0x88}], 0x6, 0x4) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r2 = socket(0x15, 0x7, 0x8) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000440)) openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x8301, 0x0) 18:47:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:47 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xefffffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 180.123744][T14147] binder: 14142:14147 ioctl c0306203 20000440 returned -22 18:47:48 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) getpgid(0xffffffffffffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r0, 0x0, 0xb, &(0x7f0000000440)='cpuset#em1\x00'}, 0x30) syz_open_procfs$namespace(r1, &(0x7f00000004c0)='n\x00\x1ci\xd6\n\xa4\xe6\xe1b\xfa\x91\xda\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendto(r0, &(0x7f0000000040)="14a372cf349555d7a52db126ff7a5e009daeb010c5e9bb268d9389823bb43caabb586bc3f2f0e555a8cef75759e8fab3ef71f7e75a391f2c6b8523d4ab9d70bce2cf4fe337a8cf13e48db26bb25ab433d50bb1298b0eb363b910d60754bb35cc35d0738062182b4b365e403f655e44985b57e644add3939d4c2ec145219281920f14d363e4abb0a5944bec86d7eee1a116baede058217eb26492bd0b0dc1c4a49c943980cc5096ed7197bea687b9ccfd6707997b40448fc50773100d4ae6db9f6676d53cc112e07d00e312fa02baa140b835aa2a1bb75185cba7bc75f6d49037511fb58f", 0xe4, 0x0, &(0x7f0000000180)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x80) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x4, 0x0) creat(0x0, 0x800000b) 18:47:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xcaa9, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/36) socketpair(0x2, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000140)={0x8, 0x101, 0x1000}) bind$bt_sco(r2, &(0x7f0000000080)={0x1f, {0x6, 0x8e500000000, 0x1f, 0x100000001, 0x8, 0x8}}, 0x8) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000180)) 18:47:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x0, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 180.221273][T14163] binder: 14142:14163 ioctl c0306203 20000440 returned -22 18:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xf0ffffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 180.343494][T14173] binder: 14172:14173 ioctl c0306205 20000440 returned -22 18:47:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x0, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = dup2(r0, r0) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) utimensat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000580)={{0x0, 0x7530}, {r2, r3/1000+30000}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000002c0)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000300)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r4}) r5 = socket$vsock_dgram(0x28, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xa, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000380)=0x6) syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x2e, 0x101000) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000100)=0xc) r7 = getpid() getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f00000004c0), &(0x7f0000000500)=0x8) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xffffffffffffffa3, 0x5, 0x200, 0xa7, 0x0, 0xffffffff, 0x2200, 0xc, 0x7f61, 0x5, 0xb6c, 0x0, 0x173, 0x0, 0x0, 0x8292, 0x8000, 0x7fff, 0x7fff, 0x6, 0x2c51, 0x8001, 0x0, 0xfffffffffffff000, 0x9, 0xfffffffffffff4a3, 0x400, 0x2, 0xff, 0x0, 0xff, 0xffffffff, 0x1, 0x2, 0x5, 0xfff, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000400), 0xa}, 0x10000, 0x800, 0x800, 0x1, 0x3, 0x2, 0x10000}, r7, 0xd, r6, 0x2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x101000, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x8008, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, &(0x7f0000000140), 0x0) 18:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 180.428992][T14190] binder: 14172:14190 ioctl c0306205 20000440 returned -22 18:47:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x108eeed2, 0x88400) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000140)=""/171, 0xab}], 0x3) 18:47:48 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) fcntl$notify(r0, 0x402, 0x80000000) r2 = creat(0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000000)={'syz_tun\x00', 0x8001, 0x8b}) 18:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0485660, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f00000003c0)) write$P9_RWRITE(r0, &(0x7f0000000000)={0xb, 0x77, 0x2, 0x2}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x0, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffff7f00000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 180.652182][T14216] binder: 14213:14216 ioctl c0485660 20000440 returned -22 18:47:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 18:47:48 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x40000) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0='bpq0\x00', 0x4, [@null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') socket$inet_dccp(0x2, 0x6, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f00000001c0)=0x5) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xf60, &(0x7f0000ffe000/0x1000)=nil, 0x5) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x89ea, &(0x7f0000000180)) getdents64(r1, &(0x7f0000000440)=""/202, 0xffffff51) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x4) creat(0x0, 0x0) 18:47:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 180.733706][T14226] binder: 14213:14226 ioctl c0485660 20000440 returned -22 18:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x1c0, 0x20200) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000280)=r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x1, 0xc00000000000000, 0x9, 0x2, 0x3, 0x3}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x13, 0x1) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000002c0)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0xe, 0x4e79, 0x2d, 0x2c13}]}) r4 = semget(0x3, 0x4, 0x28) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000006c0)={0x1, 0x8, 0xae2f0d2646a2f31f, 0x8, 0x5, [{0xa2, 0x6, 0x9, 0x0, 0x0, 0x200}, {0x20, 0x1, 0x91d, 0x0, 0x0, 0x400}, {0x6, 0x3d7, 0x0, 0x0, 0x0, 0x80}, {0xf3, 0x9, 0x9, 0x0, 0x0, 0x9}, {0x0, 0x2, 0x10000000000000, 0x0, 0x0, 0x2}]}) semctl$IPC_INFO(r4, 0x0, 0x3, &(0x7f0000000300)=""/35) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)={0x18c, r5, 0x30, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6cea}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xfc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c00000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80200000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb801}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000240)={0x2f, 0x2}) 18:47:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0585611, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:48 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xda4}) 18:47:48 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x9, 0x8) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 180.997431][T14259] binder: 14254:14259 ioctl c0585611 20000440 returned -22 18:47:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:48 executing program 0: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/pid\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x900) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x20, @loopback, 0x9}}, 0x0, 0x8, 0x0, "92774ab0bb47e0c9c736dd87021206bfbe43435278984a1b70b2ab2c8ff3a7e8eb2f3823708e0148cdcb70c56596ace99767617ca08a3a874e8729f2a298b4bbba896056e3cf42b87333945b8c8b2876"}, 0xd8) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x1) r2 = semget(0x0, 0x7, 0x450) semctl$GETNCNT(r2, 0x3, 0xe, &(0x7f0000000380)=""/240) fcntl$lock(r0, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xc5f3}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @local}}, 0x9, 0x8}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r3, 0xfff}, &(0x7f0000000200)=0x8) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) [ 181.077631][T14266] binder: 14254:14266 ioctl c0585611 20000440 returned -22 18:47:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x0, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xef, "75da114088a91530e4bb460bde56ce2fa855f7e44172f10b21759464b1221952169ab8205150f726c44d0cfa3ab3d1077d1837383bfb94e12fad21fc0822437f1b2e3e69b4882b83137a7d065654edd3f2941f40de555d7467f25174daf3c317d3c5f6b9d4d3effe6022b84bd0fad7c845f311b5f8eddc86cc646aa6b117b25249c388eee0e0c0dc48857cf1c252b454bfcfad698849c5b1169d1dbcc92adb4e328a0911f8db29ee6fd0c3d786d8c4626d640094700ad22a4e60bf5c3f7fe82c3a8793223c8e497752b1ab08ce40d37b6ab70473bce236cc0354c17c3f4f484a753071085d13e5f3efd39b886374c0"}, &(0x7f0000000000)=0xf7) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e24, 0x8, @remote, 0x1}}}, &(0x7f0000000300)=0x84) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x5e, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x0, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x10000, 0x0) [ 181.305722][T14293] binder: 14291:14293 unknown command 0 18:47:49 executing program 4: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) [ 181.388010][T14293] binder: 14291:14293 ioctl c0306201 20000440 returned -22 18:47:49 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000000)={0xfffffffffffffffc}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 181.451578][ T7720] binder: unexpected work type, 4, not freed [ 181.464314][ T7720] binder: unexpected work type, 4, not freed [ 181.474847][T14315] binder: BINDER_SET_CONTEXT_MGR already set 18:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x0, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) [ 181.500589][T14315] binder: 14291:14315 ioctl 40046207 0 returned -16 [ 181.500962][T14316] binder: 14291:14316 unknown command 0 18:47:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x6, 0x1) ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000180)=0x1) openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x2001, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2002, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r2) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) sendfile(r0, r0, &(0x7f0000000140), 0xb3) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x6, @vbi={0xb9b, 0x6, 0x10001, 0x4745504d, [0x400, 0x6], [0x5, 0x3], 0x3}}) 18:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x200080) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100)) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 181.579226][T14316] binder: 14291:14316 ioctl c0306201 20000440 returned -22 [ 181.605132][ T7720] binder: unexpected work type, 4, not freed 18:47:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 181.651629][ T7720] binder: unexpected work type, 4, not freed 18:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x2, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:49 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) readahead(r0, 0x40, 0x9) syz_mount_image$reiserfs(&(0x7f00000001c0)='reiserfs\x00', &(0x7f0000000240)='./file0\x00', 0x2f380016, 0x0, &(0x7f0000000280), 0x101000, &(0x7f0000000440)={[{@tails_on='tails=on'}, {@usrjquota='usrjquota'}, {@user_xattr='user_xattr'}, {@balloc_notest4='block-allocator=notest4'}, {@jqfmt_vfsold='jqfmt=vfsold'}], [{@context={'context', 0x3d, 'system_u'}}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, @in={0x2, 0x4e20, @rand_addr=0x4}, @in6={0xa, 0x8, 0xff, @mcast1, 0x450580}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0xffffffffffffffff, @remote, 0x9}, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in6={0xa, 0x4e24, 0x56, @dev={0xfe, 0x80, [], 0x1c}, 0x1efe}, @in={0x2, 0x4e22, @remote}], 0xb0) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) 18:47:49 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x8000) getpeername$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000180)={0x9eeb, 0x1000, 0x8001, 0x1, 0x6, 0x40000b40e, 0x8e0, 0x4, 0x0}, &(0x7f00000000c0)=0x20) connect$rose(r1, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @null, @null]}, 0x40) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r2, 0xff}, &(0x7f0000000140)=0x8) 18:47:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000100)=0x4) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4$netrom(r1, 0x0, &(0x7f00000000c0), 0x800) ioctl$KDADDIO(r1, 0x4b34, 0x2) 18:47:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 181.850048][T14354] binder: 14350:14354 unknown command 16448 [ 181.894720][T14354] binder: 14350:14354 ioctl c0306201 20000440 returned -22 18:47:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:49 executing program 5: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = gettid() fcntl$lock(r0, 0xcba7237abb904c5f, &(0x7f0000000040)={0x1, 0x1, 0x8a9, 0x0, r1}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xea, 0x5927b518, 0x8000}, 0xc) fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 181.943102][T14370] binder: 14350:14370 unknown command 16448 [ 181.975930][T14370] binder: 14350:14370 ioctl c0306201 20000440 returned -22 18:47:49 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x409, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:49 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r1 = creat(0x0, 0x0) write$P9_RAUTH(r0, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x89, 0x2}}, 0x14) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000000c0)=[0xee00, 0xee00]) fchown(r1, r2, r3) 18:47:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x3, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:49 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:50 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000240)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0x2, 0x7, 0x0, 0xae, 'syz0\x00', 0x73}, 0x6, 0x3ff, 0x8001, r1, 0x3, 0x7, 'syz0\x00', &(0x7f0000000280)=['\x00', '/dev/bus/usb/00#/00#\x00', 'trusted&-em1\x00'], 0x23, [], [0xe47, 0x0, 0x1f, 0x5]}) ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000400)={&(0x7f0000000480)="d9b85425274d5e817b961f5f0546c566cd88ab3f0c11efc0063997e9948cf26b99cd2ba548f7fb363616d348d414c55392d173084d620ef8bddddd9b381bfde1e022041f383e56b06add68322a3785c58aeb5052a4634121530d716802ae04bc13932fc198a0196fe63503e25dbf4bffa65b5870741c16b0f9c26c8b455923cea3c35c47a324960603ab", 0x8a}) write$ppp(r0, &(0x7f0000000100)="83303a94a29ec25b2b74d51c26dc4d099638eb301b740210e253af61ff171d6d089e56050302adf1b67c0e4bf0746cf0d8af481e703114a995ec880344a445a13056c293025204d018341e0d45ec18cb83916678a8eca04bb9dffe682853538ff3b3f99f60403a3ef33e161a345eec10b529f158978469ae3415bfcb61b4439957d1f379cf65a8f9b9af0eb825e0c818145aa4d2af383336e8a250ae667595adaec6903579e733deeb1289cc44e2df8c72994bd7ee36b262d5b1e1c2793e938f104f228438aa9189f2df1bd83cf2c728e666", 0xd2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x100) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) [ 182.197676][T14396] binder: 14392:14396 unknown command 64 [ 182.249729][T14396] binder: 14392:14396 ioctl c0306201 20000440 returned -22 18:47:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:50 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x80) [ 182.307542][T14413] binder: 14392:14413 unknown command 64 [ 182.342420][T14413] binder: 14392:14413 ioctl c0306201 20000440 returned -22 18:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x4, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000000)={0x4, "89c5859f55b7ff573b928a043d8bc9d8d95fee84fbf2f83b3bdba339ca06f1be", 0x1, 0x1}) bind$x25(r0, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) 18:47:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x0, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) write$P9_RCLUNK(r1, &(0x7f0000000080)={0x7, 0x79, 0x2}, 0x7) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioprio_get$pid(0x2, r2) [ 182.525036][T14434] binder: 14429:14434 unknown command 0 18:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000000400}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r2, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 182.601377][T14434] binder: 14429:14434 ioctl c0306201 20000440 returned -22 18:47:50 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x6, 0x3, 0xfffffffffffffffb, 0x3ff, 0x0, 0x2, 0x1400, 0xf, 0x7e9, 0x4, 0x6, 0x5, 0x3000000000, 0x9, 0x10001, 0xfffffffffffffc01, 0x3, 0x101, 0x1, 0xfffffffffffffffb, 0x71, 0x4, 0x4, 0x1, 0x3ff, 0x2, 0xffffffff, 0x3f, 0x5, 0x4, 0xbc, 0xa03, 0xfffffffffffffff9, 0x10001, 0x7, 0x0, 0x0, 0x4800, 0x4, @perf_config_ext={0x8001, 0x5}, 0x100, 0x7, 0x1000, 0x8, 0x1f, 0x6}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:50 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22000, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 182.680156][T14453] binder: 14429:14453 unknown command 0 [ 182.703764][T14453] binder: 14429:14453 ioctl c0306201 20000440 returned -22 18:47:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x5, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000280)=0xe8) pipe2(&(0x7f0000000240), 0x800) 18:47:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 182.931200][T14488] binder: 14485:14488 unknown command 0 [ 182.970344][T14488] binder: 14485:14488 ioctl c0306201 20000440 returned -22 18:47:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0xfffffffffffffffc, 0x0, 0xc5f3}) 18:47:50 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x400101, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000040), 0x800) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x100000000, @mcast1, 0x7fff}, 0x1c) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$assume_authority(0x10, r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x800000000) 18:47:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:50 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000480)={0x0, 0x0, 0x2080}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:50 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) [ 183.054261][T14498] binder: 14485:14498 unknown command 0 [ 183.060853][T14498] binder: 14485:14498 ioctl c0306201 20000440 returned -22 18:47:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x6, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x7, 0x80000000, 0x374, 'queue0\x00', 0x8000}) accept4$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e, 0x800) 18:47:51 executing program 4: r0 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x800) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000280)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x80000, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') splice(r1, &(0x7f00000002c0)=0x1e, r2, &(0x7f0000000300), 0x401, 0x9) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x9}, 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000580)=""/202, 0xca) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000240)=ANY=[@ANYBLOB="050000000000125400000040050000a90000001000fa00000000e23f0003000001000000000000002560b700fff0ffff0403ffffffff00000a00000006"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000200e1ffff7fffffffff00"/24]) creat(0x0, 0x0) 18:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 183.319943][T14533] binder: 14527:14533 unknown command 0 18:47:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x0, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 183.362272][T14533] binder: 14527:14533 ioctl c0306201 20000440 returned -22 [ 183.380802][T14541] binder: 14527:14541 unknown command 0 [ 183.386572][T14541] binder: 14527:14541 ioctl c0306201 20000440 returned -22 18:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x7, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xd7, 0x3, 0x80000000, 0xff, 0x3, 0x3e, 0x7, 0x3b3, 0x40, 0x169, 0x6f, 0x7d7, 0x38, 0x1, 0xffff, 0xffffffffffffffff, 0x7ff}, [{0x3, 0x78, 0x8, 0x2c, 0xffffffffffff8000, 0x1, 0x2, 0xd69}, {0x7, 0x3, 0x3, 0x100000000, 0x100000001, 0xe27, 0x10000, 0x7fffffff}], "c4787db4674c5519e8461893e6dc468be67450753b5a528c5b15c9208331b93ce124a5b8c899db2b751f89ac08e478d9df071ba316bcae3ebf04a5544b8072", [[], [], [], []]}, 0x4ef) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 183.563949][T14560] binder: 14554:14560 unknown command 0 [ 183.576533][T14560] binder: 14554:14560 ioctl c0306201 20000440 returned -22 18:47:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 18:47:51 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) write$apparmor_exec(r0, &(0x7f0000000000)={'exec ', '\x00'}, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) [ 183.686805][T14560] binder: BINDER_SET_CONTEXT_MGR already set 18:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 183.738993][T14560] binder: 14554:14560 ioctl 40046207 0 returned -16 18:47:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40, 0x80) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x420, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000140)) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x8, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:51 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x600000, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), 0x4) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) r5 = request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000240)='ppp1\x00', 0xfffffffffffffff8) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast2, @empty}, &(0x7f00000004c0)=0xc) accept4$packet(r0, &(0x7f0000005140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000005180)=0x14, 0x80000) accept4$packet(r4, &(0x7f00000051c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005200)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000005240)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000005340)=0xff90) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000005380)={{{@in6, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000005480)=0xe8) getsockname$packet(r1, &(0x7f00000054c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005500)=0x14) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000006900)={@empty, 0x0}, &(0x7f0000006940)=0x14) getsockname$packet(r2, &(0x7f0000006980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000069c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000006a00)={'vcan0\x00', 0x0}) r17 = accept4(r0, &(0x7f0000006a40)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000006ac0)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000006b00)={'veth1\x00', 0x0}) setsockopt$inet6_tcp_TCP_ULP(r17, 0x6, 0x1f, &(0x7f0000000bc0)='tls\x00', 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000006b40)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000006c40)=0xe8) recvmsg$kcm(r1, &(0x7f0000006e00)={&(0x7f0000006c80)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006d00)=""/130, 0x82}], 0x1}, 0x0) fchmod(r17, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000007540)={&(0x7f0000000340), 0xc, &(0x7f0000007500)={&(0x7f0000001300)=ANY=[@ANYBLOB="b0060000", @ANYRES16=r6, @ANYBLOB="100827bd7000fbdbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="5c01020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400e6a4000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400ffff000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004007f0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400040000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d000008000100", @ANYRES32=r9, @ANYBLOB="6002020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040070000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400080000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="4000018d8200000071756575655f69640000fbbd92b0000000000000000000000000000000000000000000008ce7834303000000080004000100000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040001000000080007000000000040000100240001007072616f726974790000000000000000000000000000000000000000807b31f07f4ca7251b00000008000400c2000000080006000668bc0c8910f945305d872ffb94bb6691c28a34204ee9ba28b77583", @ANYRES32=r13, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000400000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040003000000080007000000000008000100", @ANYRES32=r14, @ANYBLOB="bc0002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r15, @ANYBLOB="40000100240001006c625f74785f68966173685f746f5f706f72745f6d61703c696e67000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c000400686173680000000008000100", @ANYRES32=r18, @ANYBLOB="0402020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400170000005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000200a70001800000010006d70100000005000001d317000009000500ffff000006000001b3d200003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r19, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000800000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004003f000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000000000008000600", @ANYRES32=r20, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r21, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040079000000"], 0x1f}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r22 = request_key(&(0x7f0000000280)='.dead\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='&vmnet1%{:\x00', 0x0) keyctl$instantiate(0xc, r5, 0x0, 0x0, r22) 18:47:51 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@ipv4={[], [], @multicast2}, 0x0}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x10, 0x70bd28, 0x25dfdbff, {0x0, r1, {0xffff, 0x5}, {0x9, 0xfff2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) r3 = creat(0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 18:47:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x44, 0x93, 0x1}, 0x20) 18:47:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 183.914342][T14597] binder: 14595:14597 unknown command 0 [ 183.951293][T14597] binder: 14595:14597 ioctl c0306201 20000440 returned -22 18:47:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400800, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000100)={0x0, @aes256}) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000140)={0x28, 0x2, 0x0, {0x1, 0x20, 0x48ed7328}}, 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000002a80)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x2, 0x8000, @remote, 0x6}, @in={0x2, 0x4e22, @multicast1}], 0x3c) write$P9_RSTAT(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="6f0000007d0200000068000800200600000003000000040000000000000000fb1f21c0ffffff0100010014c10000000000001700656d316e6f6465765b6e6f6465762b6b657972696e67000e007379738d656d76626f786e6574310b006c6f6370757365745e287d05002573656c66"], 0x6f) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000002980), &(0x7f00000029c0)=0x4) ioctl$UI_SET_PROPBIT(r2, 0x4004556e, 0x15) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000002c00)={0x7, @output={0x1000, 0x1, {0x5, 0x9}, 0x3f, 0x7a}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$nfc_llcp(r4, &(0x7f0000002a00)=[{&(0x7f00000002c0)={0x27, 0x1, 0x1, 0x1, 0x9, 0x0, "7719dc4ee7de58c33d30c6892a1c6fd76ecd367b58fa464eb1b2dbd7bdc4abed0e05d359711363738dd97f78e7c64865d1816b73c152071ed24277baf98636", 0x3c}, 0x60, &(0x7f0000001780)=[{&(0x7f0000000340)="7c0644b46a82acc397dedfec3b764ae3f66d830ca8b1945b305285a4a9fa7be2c5dace581c1de747c66f84cc8c937667431c219dc2d58d746380f7de6cb22c0a4322ba59d21744e862e01d98ef0b02432a8342e6efcc5129ca976aafe7c6d1c99bccdd98fc0b9c5dc5b5208e653291f27e7ddae2c01eb86548061775b8028ac35916d9e3a701dccf76f79c7c7b825c147cf5e53365154acb3e926fa470f05172113e1f1c0a99fd2a9348ae60652b50c4e48651", 0xb3}, {&(0x7f0000000480)="b9fff3af6d952c08cf7556ed59130a4214f028c04ea29f9b0bc80891aa735cb4f46657c4e3357af33e81919c4e310d08899aecae5b7113717cd5503a9f0cc3c8e31aafed76640dd556c2e2ba3f6d7f7962f5d8752a381f25fe8ca34bb6ef8f4c8a69f8", 0x63}, {&(0x7f0000000500)="0c3c3c605c79dfa09cd896b579f43821a81489468e1ff10e2a570f58064f76ba6eb6f9adfda7d4b8c0bfe3590173645896c929ca91eb022c0c507ec5401f20ff276c70ae3c010ca59190d4ec39eb7d89a68e759a5f3e02519069e247230ebd572529c610700a10edee98f1c3d183f1af99", 0x71}, {&(0x7f0000000580)="9fe7854ebdcd7ce265f427c9320f28b3d07a2ca28c0c1ca03dd6f109338a19165bbd9bc0b871adb2e6579969e39146a70f37af7ca270d041abac76dd63122c0efa856cc24ba2450ce860491e9800aabaf78d2ca2cef1b33c16120d2dc071c3888a2f06aa684133929e7ad10b04541a2ced49ac21e6342c14f8a910aa6cdbec2810340dc9e3f6923e43bf5382fb5c55c515ce6725c6fd1a", 0x97}, {&(0x7f0000000640)="8670bfbeef1837193d8b8eaadd6a0fea089b9535ed09bf75e63a74fcd97acbc8a17dd841f87167f72d0b8779e7d50e2d9f8fe2667da6d1d69f6cafb81416a4200b5c76714f671bbf0eb55726eb043ebf", 0x50}, {&(0x7f00000006c0)="22703b752e961f6e78b1a9b7a7da49eb9c90092d91a7d2c27c0c5444c9615d62c529e1b95a41586502b6dec3828c16d53553523712611b6ede35e638a885d9cf0553b5e3385697cb55ce726807e5ff9b7483c425e919709a5ad51848c2222ee0edd68524d36813c42772bb0384ddc4a0f51526b0dcc092b718bdf2ce86b77e1e11e3d4c6", 0x84}, {&(0x7f00000001c0)="44656cc7da4cdb37365519feb23e7e9b", 0x10}, {&(0x7f0000000400)="20c3663f3db23c5043156a48170bf7e7baff9262f21e07255e56c041c3dabb647285c7860164fe3f80b5864a4a931844ca196b", 0x33}, {&(0x7f0000000780)="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", 0x1000}], 0x9}, {&(0x7f0000001840)={0x27, 0x1, 0x0, 0x5, 0x6, 0xffffffff, "5a62b7aee45ab29ded166afc90a832d880297216b2616b43f805a7d80025ef2dadc62c3c47a68d4d43f49298a0a0ec026562c92ecba7d407bc75e3547c3da2", 0x33}, 0x60, &(0x7f0000002900)=[{&(0x7f00000018c0)="a3a3cccb240e517b43e5dcea08c4a918ef3be0bc16a8128baacae0f1f87e57eeca1da0166338be25e9246c", 0x2b}, {&(0x7f0000001900)="d75835796282d01af0d66e9e807f58e72d4ae0b99eb544cb65652623430d693eac8dbde03748be5c7303e82cdfbba5dcbbcb694517e142c9084cb07318d25af01dec0ba08250df48737d8b7d8911e452179ad4d38c7511fdab8f2204ba4515134ee86336b197d0227e9763a94f329a1b4619ddce7554057d869128d3fcb48b9256710096d07360d6cfbcfedc35d1de269f31aa099722e6d0ee2abce0bb13ccd71af715c58ae8fac58faea5c6e2c040cde400640730a665d566be60bf6f4569c909314110178d45c2368083ad3e97529a6c28cfce5d663d2afc690e17e52e7318d804e6b69716ee1f07c3ef3c62a83f024b15cd66bff19871b0fb6e4153cb5fd6a3ce95643098006643d892f4efdaf6371ff93d527f62dc149ad9e4030794c108436aeea46a9b7bd71049911f347e6af0b09db5f5eac322094396f1e63a8094ec0751f419ee7ee7a6f13b36a4f79e1d09c97b8558f5e1c390ce6acd52a99f27c89391bff7d15e94e8d7882e5f3bb0cea927f2d7b39c997b6c23b919584944ef5412810224d34c256618a4e4aa176b7154997186a966104977ed29766aa08ccdf9e1e8a40789b5bea79695356921b6f65070a0afaf13c95c558e52519459c3821e295a50b603e195b57540f8e88effcd7194bbce703bcef49c0840b773dbd036f23a19812d30d43e988cb417f37298cc612e4201765fcaef6e487adaa29dcdeb3808f2edce8caf1f4537dc37b5e7e018a3ca366736051c9a65c80d075e9bc4e1b2ac034dba902219dd3453b3d3c10e8e7233e60eba708eaacc52532e6d0a3c4314089fd995b2016b3594ed60d1d732ffecdad16e953051b6a5ccdb5fa37cdb2ef461fef5e8dac6fcb3673c094dd201865412744a5eac152afa4dfdab726da4ef7a37e4d20ffb5af6ee700be5f914ef20aa207cc7190516162eb3c917fc7c725c8f40a41209f94559bcf578a6007b85dfe493b6bc317c9bb26a36b99aefaf36ca4539d4d76047e4ecdbecf2fba0c7f4dfc8370728c50a095f1c479e14f59d1a9223e295529ee39ca4c459061dec45baf7d623e423195017a42cc24995d3073e6fe65944088b5f598f7f1cee40bd63de9bd0396cf91e74f1858604989ca6fb50aa22d50b467ec44adfd1e64cba46f5ed5e4eda7bd1aa20ce4c1647436b990235276677199da5d15eaeb190418f91164a3f8e2ad60698874b721c30032eb39d3709a2ba70369e2d30b8f97e5ecf4f7d72124ded9f51754bb7da978d4c3f10e19309c9bf0018b5f928ec3a43df1de0f1d8949f18ecdabdd21e63398461f11f79a8db28fc1595b598edbc0769e96d0f9a9a7b250bc6fc08ebbcd62727c2cb4f9fa34d727653ad8d90118389f26419d5a07de0f237108873fac2510f95054b45e5b749f24a392bfb12306f77c02b482b600e6e2b95693eb8ae2d1492eecf71bd7912b4d8bfc8ebaccf0fbe3bc1f8b3b78afd8fe08708f31c55bcae1ed16d839a81e5fcc42a8922fd000aa7fac7fc812ba6c8c23edea37b824cb9e6e7119dbf95172cdf99675ca9027f5e66d9ca5f37de31ce9756a97890fc70c1ccf62c6ae42d5f0182478117a49348a791aaf867b91694b5dad3d822a63bbbc895800686bd6a135e24bf503a59e29764950fea401f011f6f053db0cdbb8844a3f43f8d724d271d34ed9d3ff2828dbf3d53f827e533c9527994b6fa6aaac5074f9388e3c98ce9ebc98edd2400aed7cee7703d6431109d5126f85fe6c1b15aa3ba0bd1879ed7877a8ff817d60a1f83cef0b0c11b7afe5f350561696e11533012285e2240d828c59ebd9eaed0a77338fe08ea090b94d0ec4258f7488e7bf968488179f5f55ce762ed5442c8b45e693a0042989b11cd0e4a8e60ae34cb534f2d065f27ee98dcf11e4538eca4d430415f1ef17d3fee2f8a05500e02037d8a76f919248b282260323e1ca1b5f09ab104ef560040e8e56c28470bfad2bbb47b361984cd2d9543950db4663ed7afde1fa06a859b997bccc1cdb35872acff3b22e57ab0e47adc5356da213646d67d564d738ce7f25585811d0363715dc31774468a09d8315a83fb5698d0005c1c4f263009d7f6c04812e6b2180a5cfe177c7c7576f98ea97efd89a341f2305bf0b760ff76ab8290f54fb0a47fc85f0f2f1104b1c7f2a2312a35230d9a7808102e5d7e03c7ec1ece30c80cade7c25f19e2a974cdb05ef5d43012ccd6e46f8f8fcb6d9b3c08897acb0b6b5a0f3288e0ce477ad93cd263fd52522da05c13f301d752f86ef64f615e76d6e81ae108522db364820e12e8f08c32836c0f5fed031804e7c1cb69374508d8604d21d517bd3bac813cf98ecd5aac041f12566806a92c08befc45d67836242bc7f591c4c0b47d287db6525aa1ed246b83ab198c57e4df380b135ce42465d916be453c8a350cf0ce9c7ff6e649e34db3e981ef654a6265f4a4442f19d9d2b169dc53eab46c2c86da2ff571cd6bc5a08b404f98a31d2b6881bd67b7d6570e5e23b9693ea9a461623698a0841b88ba4e77cf82c1fdcb9cfd4cad6e03863f872ff62a511a57d6edf19dc728c829c9cf3bb15613919897d38ceef606aa23a47f4665129443dc73359687efb22e4d97ab44859d92093196ac18d8e51d85f9c0a053ae146da79ebc48f96341c10ac227618abd9816c042a7a60fcb623529824be6f9773c8f00df4c2f5c104c763dc5d27fc781cd55a9083704127e75359b63c8ce9c449f30e064b3950ada3c8a5094047f954b1a60d183e205ed6acd51e694bac0dfa1ab72dba392a7f3e23b889ed2dd3e8a643fe0a56fc852ada5bf3730fbd69fe38e9cceee18ac565d37af58c065325d9fdffe1fe8f869d36b5e8a0e141238f0603a070d106556759d1580f88a9d5107f2d9000dc019cbdba838b4eeeef7a76faca3fc50a0c5603dfac06421b48e9017b88a7a25a8b327d6490dedee58d101bf8f84c43dc5a9a2f3d1a36b737b201d3228c4639c3784cea490863f50b1a5f8193b39d54d3688faf5bb47eae9cf4deb62d27de3387a4216c45927c1c0c5d1ae462fba85a4c4a80507bff274d702d9e040bb29890865e54fdcbf287de8b3454f4c4bd2ed2865db9117d359f94e726ec6c520ef71408df357b56c5dd3ab809ff662f66c333442d9d50fb951ecdc64ce8447f3630dbbd2c8a6ababdaa307f2d517e617eab260b6bc2c04fe2fe2b8c5fe5582a403a0f237f4c1d95f1b33f52f389c568967d490e4a9ace7fce814dd69b6005c5ce3e5209a674a36aea929ddddaf032b1db11e3c98f525bbaa45b7aad538dbf5229625ecb5eb28c5319e04943a8d60418195dd64da15e0aeb178025ebbc396a14bd0d45ce0e3d50b748e0b2249d32e7b56e22ea245dce630db2826c36b3a5f47900bbc964b0225f74268b5ed700fd41b59fccffe8f512f0862204f8ae98ea0eaf785cd173d5b7b91f6b6f81efaa65826a6cdbdcce5d81ae563afdaac364af194d2e865f759fb87a9f0b8777e47320f1a73355c19de4a3c5118ae1edd6da800801f8f82f477e97fe5da1b86165eafb57ebe2ff20e9a1ef703bbf851e0cdc455df67e4405b69eec13e8373657d1c8ecdf2c744338157ea8acbb39ca5838933b832a1a4c8a613c6ae9951c939fa712377dffe0756c0c32d0f3d18ea32c7afbaed8d905d91c4ab6147d361697ce8a5acd8bf83bf641304624285fde1f7c4f96deb002080b5c55d43e84b0c3c871771f4b3f7db53dde4c237597320f58795c09bda215456f0eebb11b88e698f1715bb13a90ceb8d5b5d5cac3f1fb7a689697c00268da5d32278b1b72879154f0fa75bea4e306ebbc293c0e04f4c34612a743f17d981eb096af551b47cab6ba3ff8b512e632dcda7369c8053f043f0dba246cb3395e198576dd75cf50e9578da6ee3ae1bee303aa534479d7cf03fd74ff389f03ef071a7473857f3eafab72b39e104261c11a0b1550da537fa0595977dc1d7ece254ede13885c174af9ff729864726237f96af9ed5d90a7fe9d568eb3ea59dc9f66b6a420cc328896ad8ba18bcf2249dc7a0047842bd4881d8654502432241e7fb2f7dc224b19b08c63ba1a131d627fd96c37568f510996e092be4332019f0cd71500fdbc174784c0c6e071c49d26444c3c6f8d2739388e3e0cd62d32139ed4d9608cca210791148847270bebc3ac4f7dd42a8228238fc8d9165d9f218aeca6af28b99004218a37696ebc3db408473476e93306419abafd237e557d492666bc5b175f4388a3e829ea54b32aca5c912559f4eeede6856fc288bfe71b6c76457724f05e6b508bc71a3190ee6f6cf6ded304965963f65141d300ecf5e6705e5174e17b0e389174c66a0bfa3f64d0efb0909fbfdc8223e52640bb000b8a54763b4ce2300b63e21ca50f4ffceb0847254034d7f742999341b5d46806e93b3699dbfe9f2a608e9b89d27364216e9b967c13ecfb4edf6c2f6a509859292ef3d47b55f5bb6c86519319b245f1da37cae6d1b8b1345504f17318237a55b4a86f14e10821f3250565564373ee92bb32ecb500adf9925568c8b07247d748a0a6f51b6813431e2dd6328d748954076dd7116792f1fbf1eea67edde27dbdbcf090cb962d5440e2290e786540867c18ac64ee7eba7227f6fbd608194e89a2fdec502d9360f45137c2cf4c100e008b3500513c0c56ec041c07f74a2789b7d52f26643482044ad050aca51a0a95b65d2acb93b0166913745b2447e8bc0b3ccba910294d1f055c73c9fdd961f9015ae591a467893132b12d0bd543a5b726867cde53fa6ff77fb44423df01c71d28c0e48413899cc946ec3dbfa93585df65ed4213cd7ae667b3eae2124a2cf2f47b71ab82589bb75856dd8dff165663bf23c1b0d35868fbb530be4827eaf935bda590ba27e166343e373ae4ac036c99813acb8174f71b672ed91f1dac8a218b03da22c43af2caba027dd7fcaf55846583971b79f6b5a10922f69fd900f2ec528615673e84ad726558bc71a07d51b635a1addeb488eed996f20d8f4b9873b6071fba5301fa14e83be13fa072255254f76fafc6d99192af72c6e90d9b3cd5a80b6ba1c12133eb64183cc948c1b983a2f6a4c592d9cb7048dcd68d257e8bba67d09c943527205c4ae399a03ab678b8dbbfe768c3e3a578bfc3ff76a9d61d6a3094317e40b80dbcc35766d642c8da8d32f8185f0bc1d17a09f9fb2acbcdb8cdd1d6faa5dff94c53225bc628448a91eecc50e81abc3cbb8dd2f02d93a3cfcdfa7a4880543301adce60a010f575863f7a849c87638a08c1011cacde0a35ca0f1c82082363ae3fb2d392a1d342c61a5c8be640f564628bfd69e69f255873835935a7177f45dd0d443e8087dadbb7d42e15e45f6ab99fccf33d0c975660ee64c582b71c89259c617fcbcb8e97900721a0f14c667957919ba2a11a03940482ce900b94d27be8f3de3778b40705b8e4ff79d35475ede96f8e21d4a6fa45910a2aeac80c18472b31ab86206ec79758a51c6a61c2811f164723037089de549df1627947f4fbbdf7e408e3f6b4cc1aeb8ac5de14a4582df9436fee71e1455ba1b6a3658f974d9dceac269d653a20630e9f26e200b68dd2376189096590416122ac1e786b40c55243005dd113071422eec0bf9501a0316f06c10165983e581fd549a965413191b548581e2c4aade5f3ba47f56334a2616e00b5c1fd3dba0a55ce24d854898edacc771fe4e499114ef602e662a9bfa9564b30f6b065ad2a35c88913dfcf174ba2050b63b7ae59614ace81458a68321c384744a701688b22fa67b6bda3abc28c5030ac2bdc9e7d5b2c817bf13", 0x1000}], 0x2, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], 0x98, 0x4800}], 0x2, 0x4000000) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000000)={0x4, 0x402, 0x20000000001000}) pselect6(0x404, &(0x7f00000000c0)={0x0, 0x3}, 0x0, 0x0, &(0x7f0000000200), 0x0) syz_open_dev$vcsn(&(0x7f0000002940)='/dev/vcs#\x00', 0x6df, 0x100) prctl$PR_GET_FP_MODE(0x2e) 18:47:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2a00, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x5) [ 184.022955][T14611] binder: 14595:14611 unknown command 0 [ 184.061158][T14611] binder: 14595:14611 ioctl c0306201 20000440 returned -22 18:47:51 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x0, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:52 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r1 = creat(0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000580)=""/179, &(0x7f0000000080)=0xb3) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0202a8bd7000fedbdf25010000000000000008410000004c0018000000fa73797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c988fab0b87bc58984dddc21d960b5def1a3430b3ccf93ef375e8d5755eeaa0bc6b44b14c7909d047a884be428a02"], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 18:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x9, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x1d, &(0x7f00000000c0)={0x0, 0x0, 0x6a7}, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x0) 18:47:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x0, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) [ 184.288793][T14639] binder: 14630:14639 unknown command 0 18:47:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) 18:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:52 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x583003, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback}, &(0x7f0000000100)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', r4}) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 184.356711][T14639] binder: 14630:14639 ioctl c0306201 20000440 returned -22 18:47:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x0, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xa, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x640000, 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f0000000080)=[0x1, 0x2], 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200000, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xbada, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000180)={r3}) 18:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 184.422458][T14653] binder: 14630:14653 unknown command 0 [ 184.432453][T14653] binder: 14630:14653 ioctl c0306201 20000440 returned -22 18:47:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) [ 184.585887][T14672] binder: 14667:14672 unknown command 0 18:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x80800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x178, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1473}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4d}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd1c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3581}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x72}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x10}, 0x8001) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 184.640195][T14672] binder: 14667:14672 ioctl c0306201 20000440 returned -22 [ 184.694118][T14684] binder: 14667:14684 unknown command 0 [ 184.734390][T14684] binder: 14667:14684 ioctl c0306201 20000440 returned -22 18:47:52 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x2, 0x1) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, &(0x7f0000000200)={0x77359400}, 0x0) 18:47:52 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) 18:47:52 executing program 0: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) write$P9_RREADDIR(r0, &(0x7f0000000440)={0xe4, 0x29, 0x2, {0xb7, [{{0x20, 0x1, 0x6}, 0x6, 0xffffffffffff8000, 0x7, './file0'}, {{0x10, 0x2, 0x5}, 0x5, 0x8, 0x7, './file0'}, {{0x41, 0x3, 0x8}, 0x7, 0xfffffffffffffed8, 0x7, './file0'}, {{0x22, 0x0, 0x6}, 0x6, 0x3, 0x7, './file0'}, {{0x90, 0x3, 0x6}, 0x8, 0x915, 0x7, './file0'}, {{0x0, 0x0, 0x1}, 0x6, 0x5, 0x7, './file0'}, {{0x8, 0x2, 0x4}, 0xfffffffffffffff9, 0xffff, 0x7, './file0'}]}}, 0xe4) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000000580)=@dstopts={0x32, 0x21, [], [@enc_lim={0x4, 0x1, 0x80000000}, @enc_lim={0x4, 0x1, 0x6}, @enc_lim={0x4, 0x1, 0x9}, @calipso={0x7, 0x48, {0x4, 0x10, 0x5, 0x81, [0x7, 0x2, 0x80000000, 0x10001, 0x7ff, 0x6, 0xffffffffffff8001, 0xfffffffffffffffa]}}, @generic={0x7, 0xa2, "8e73bdadd02f2eebc28356552169aaf8b79519e9cdef464c5b2090d6f6d70d469e8a330dab0be7d0a1077fbdeb424a4568e234fff5bb13a08a3e682a31880e739f59bbc80478a244b808e27f7e4cbab45c5c541037e211c3bfbbe9d715c77be34e79cfc9d178ce74b762611e2a21d8de8381cadbfdb2a113ae5bde6c35a2e6f1f0f7c8d2c27334e564cabc89c53f2cacdfea50338fbc64d55d52fa189aac20c835e0"}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x3}, @enc_lim, @enc_lim={0x4, 0x1, 0x10001}]}, 0x118) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) r2 = creat(0x0, 0x0) write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x9) 18:47:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xb, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:52 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, 0x0, 0x45, 0x0, 0x1}, 0x20) [ 185.153917][T14710] binder: 14708:14710 unknown command 0 [ 185.191699][T14710] binder: 14708:14710 ioctl c0306201 20000440 returned -22 18:47:53 executing program 0: r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x80000001, 0x48000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x8001007, 0xcccb, 0x1}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xee01, 0xee00, 0x0]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={r0, r3, r4}, 0xc) getdents64(r2, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x8140, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000100)={0x1, 0xb97d}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x1, 0xfffffffffffffffb, 0x20, 0x3}) 18:47:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 185.238226][T14727] binder: 14708:14727 unknown command 0 [ 185.271854][T14727] binder: 14708:14727 ioctl c0306201 20000440 returned -22 18:47:53 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0xa}}, 0x20) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xc, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93}, 0x20) 18:47:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffffff8}) 18:47:53 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) r1 = creat(0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000000c0)={@broadcast, @dev, 0x0}, &(0x7f0000000100)=0xc) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002880)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000002980)={&(0x7f0000002840), 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) getpeername(r0, &(0x7f0000000180)=@can={0x1d, 0x0}, &(0x7f0000000240)=0x80) recvmmsg(r1, &(0x7f0000002400)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000580)=""/173, 0xad}], 0x1, &(0x7f00000004c0)=""/27, 0x1b}, 0x8}, {{&(0x7f0000000640)=@can={0x1d, 0x0}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/175, 0xaf}, {&(0x7f0000000780)=""/255, 0xff}, {&(0x7f0000000500)=""/21, 0x15}, {&(0x7f0000000880)=""/171, 0xab}, {&(0x7f0000000940)=""/182, 0xb6}], 0x5, &(0x7f0000000a80)=""/99, 0x63}, 0x400}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000b00)=""/147, 0x93}, {&(0x7f0000000bc0)=""/201, 0xc9}, {&(0x7f0000000cc0)=""/226, 0xe2}, {&(0x7f0000000dc0)=""/193, 0xc1}], 0x4, &(0x7f0000000f00)=""/172, 0xac}, 0x7fff}, {{&(0x7f0000000fc0)=@sco, 0x80, &(0x7f0000001640)=[{&(0x7f0000001040)=""/245, 0xf5}, {&(0x7f0000001140)=""/250, 0xfa}, {&(0x7f0000001240)=""/109, 0x6d}, {&(0x7f00000012c0)=""/113, 0x71}, {&(0x7f0000001340)=""/120, 0x78}, {&(0x7f00000013c0)=""/213, 0xd5}, {&(0x7f00000014c0)=""/136, 0x88}, {&(0x7f0000001580)=""/176, 0xb0}], 0x8, &(0x7f00000016c0)=""/181, 0xb5}, 0x180000000000000}, {{&(0x7f0000001780)=@tipc=@id, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001800)=""/31, 0x1f}, {&(0x7f0000001840)=""/174, 0xae}, {&(0x7f0000001900)=""/42, 0x2a}, {&(0x7f0000001940)=""/18, 0x12}, {&(0x7f0000001980)=""/189, 0xbd}, {&(0x7f0000001a40)=""/208, 0xd0}, {&(0x7f0000001b40)=""/29, 0x1d}], 0x7, &(0x7f0000001c00)=""/95, 0x5f}, 0x1}, {{&(0x7f0000001c80)=@nl, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001d00)=""/198, 0xc6}, {&(0x7f0000001e00)=""/31, 0x1f}], 0x2, &(0x7f0000001e80)=""/132, 0x84}}, {{&(0x7f0000001f40)=@nfc, 0x80, &(0x7f0000001fc0)}, 0x956000}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002000)=""/200, 0xc8}, {&(0x7f0000002100)=""/153, 0x99}, {&(0x7f00000021c0)=""/27, 0x1b}, {&(0x7f0000002200)=""/129, 0x81}, {&(0x7f00000022c0)=""/102, 0x66}, {&(0x7f0000002340)=""/57, 0x39}], 0x6}, 0x800000000000000}], 0x8, 0x2000, &(0x7f0000002600)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000002800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002640)={0x150, r2, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x134, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x40}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x80}, 0x4) connect$can_bcm(r1, &(0x7f0000001fc0)={0x1d, r6}, 0x10) 18:47:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:53 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93}, 0x20) [ 186.012161][T14763] binder: 14759:14763 unknown command 0 18:47:53 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r0, 0x0, &(0x7f0000000000)={0x2, 0x0, 0x0, 0xc5f3, r1}) modify_ldt$read_default(0x2, &(0x7f0000000080)=""/64, 0x40) [ 186.080792][T14763] binder: 14759:14763 ioctl c0306201 20000440 returned -22 18:47:54 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xb6e8be757cf9221e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x8c, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000000}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfffffffffffffe01}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1f90}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x800}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x504b8777}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000000)={0x3a, 0x9247, 0x4, 0x1}, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:54 executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x800001, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000='version=9p2000'}], [{@smackfsdef={'smackfsdef'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'ns/pid_for_children\x00'}}]}}) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000)) creat(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) [ 186.131358][T14781] binder: 14759:14781 unknown command 0 18:47:54 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr={0xa}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93}, 0x20) 18:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 186.185692][T14781] binder: 14759:14781 ioctl c0306201 20000440 returned -22 18:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xd, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:54 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22000, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 186.384321][T14811] binder: 14809:14811 unknown command 0 [ 186.452665][T14811] binder: 14809:14811 ioctl c0306201 20000440 returned -22 18:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:54 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x20, 0x800) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'ip_vti0\x00', 0x200}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x4000, 0x79) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xc6ff, 0x4100) fcntl$lock(r1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x3f, 0xc5f3}) 18:47:54 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000240)) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) setsockopt$packet_int(r0, 0x107, 0x1c, &(0x7f00000001c0)=0x5b1, 0x4) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_raw(r1, &(0x7f0000000180)={&(0x7f0000000000), 0x10, &(0x7f0000000140)={&(0x7f0000000100)=@can={{0x0, 0x0, 0xc386, 0x3}, 0x5, 0x3, 0x0, 0x0, "6f529df8c8b0a8e5"}, 0x10}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000010) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000000)={0x4008, 0xbd, 0x1f, 0x8001}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'caif0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x3, r1, 0x7, r0}, 0x10) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 186.493468][T14819] binder: 14809:14819 unknown command 0 [ 186.514727][T14819] binder: 14809:14819 ioctl c0306201 20000440 returned -22 18:47:54 executing program 5: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80, 0x0) write$apparmor_current(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7065726d70726f66696c65206c6f7070f7ff282f00"], 0x15) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0xe, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:54 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/stat\x00') ioctl$VIDIOC_G_ENC_INDEX(r1, 0x8818564c, &(0x7f0000000080)) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000008c0), &(0x7f0000000900)=0x4) [ 186.690271][T14838] binder: 14837:14838 unknown command 0 18:47:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x5, "57e20e898fa82bab0499a483ade4f02c29722b7b4b3c8bbc5a26453358109dd5", 0x3, 0x1}) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 186.739592][T14838] binder: 14837:14838 ioctl c0306201 20000440 returned -22 18:47:54 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:54 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300042f3aa6000005a4a4038d66a63a000000000080"], 0x1, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 186.804175][T14838] binder: BINDER_SET_CONTEXT_MGR already set 18:47:54 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x100) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 186.847228][T14856] binder: 14837:14856 unknown command 0 [ 186.863513][T14856] binder: 14837:14856 ioctl c0306201 20000440 returned -22 [ 186.878917][T14838] binder: 14837:14838 ioctl 40046207 0 returned -16 18:47:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:54 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x7fffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1b, &(0x7f0000000100)=""/204, &(0x7f0000000000)=0xcc) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:54 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x80000001, @loopback, 0x9}, @in={0x2, 0x4e23, @multicast2}], 0x3c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x1, 0xa52, 0xc5f3, r2}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x20480, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f00000000c0)) 18:47:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x10, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:54 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16, 0xffffffffffffffff}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4, 0x0) getdents64(r0, &(0x7f0000000440)=""/202, 0xca) creat(0x0, 0x0) [ 187.092149][T14882] binder: 14880:14882 unknown command 0 [ 187.103331][T14882] binder: 14880:14882 ioctl c0306201 20000440 returned -22 18:47:55 executing program 5: fcntl$lock(0xffffffffffffffff, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x480000, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 18:47:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x2) msgsnd(r1, &(0x7f0000000100)={0x3, "ac53c8adf681f116e54cff7a459f5bdb5c212896b57751c3622ef0ebf0a7e79ce5b71e415ec06e0bc223c74bb44e80b940fca1ba669b1b16bc7d0aa73ef8a2c4c5df30b25b5f2f341180557615ecd64c54ba487853547c1bbe635baa2afd2b74dc349d6fd769525b0e144062818a82710d0fb81684e7d4aa10f1cb2e3f5bf4c7a9a4e8666359d3c94ea42bddbaaa43e3ccfbeeb7a2ef4b7fbe640b099f22c0cc02928ac7408fed9026c6f10514d561ae7a35113ead81d2a6e2bca9eda69f72a442cf1d545b828a1c2cbd5cb218f5f780ecc8d4094418e3c796e3f84b1db59897e971fa"}, 0xeb, 0x800) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0xffffffffffff8001, 0x8, [0x14f3, 0x80000000]}) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 187.176616][T14893] FAT-fs (loop0): bogus number of reserved sectors [ 187.206806][T14893] FAT-fs (loop0): Can't find a valid FAT filesystem 18:47:55 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = fanotify_init(0x20, 0x8000) r2 = dup2(r0, r1) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = getpid() perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x8, 0xffffffffffffb2a8, 0x7f6, 0xbd12, 0x0, 0x2, 0x6000, 0x6, 0xcf, 0x3, 0x3f, 0x8, 0x9, 0x8, 0x2, 0x88, 0x1, 0x3, 0x0, 0x200, 0x2, 0x2, 0xe3, 0x1ff, 0x100000000, 0x0, 0x3, 0x0, 0x6, 0x80000000, 0xe711a79000000000, 0x7, 0x200, 0x2, 0x8, 0x4de, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100), 0x6}, 0x1c000, 0x5, 0xaba4, 0xf, 0x3, 0x10001, 0x8}, r4, 0x9, r2, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000080)={0x401, "49c3180d0ef6974bd3fcf952d21add239bcf302f17fd628600864583441c4b1c", 0x7, 0x1, 0xb65, 0x100, 0x1, 0x3, 0x80000001}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x8, 0x0, [{0x2, 0x6, 0x8, 0x619, 0xed}, {0x7, 0x5, 0x2, 0x80000001, 0x3ff}, {0xc000000b, 0x7fffffff, 0xff, 0x8001, 0x2}, {0x6e98d3e6a2fbf7aa, 0xfff, 0x1, 0x81, 0x8001}, {0x0, 0xfd0, 0xfffffffffffffff7, 0x2, 0x9}, {0xc0000001, 0x3, 0x4, 0x7, 0x6}, {0x80000007, 0x7, 0x0, 0xfffffffffffffff9, 0x100}, {0xc0000001, 0x5, 0x40, 0x5, 0x8}]}) ioctl$sock_ifreq(r2, 0x89b0, &(0x7f0000000040)={'bond_slave_0\x00', @ifru_addrs=@l2={0x1f, 0x200, {0x3f, 0xec8, 0x8, 0x3, 0x5, 0x8d90}, 0x8000, 0x2}}) fdatasync(r1) fcntl$lock(r3, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) [ 187.225818][T14882] binder: BINDER_SET_CONTEXT_MGR already set [ 187.245657][T14896] binder: 14880:14896 unknown command 0 18:47:55 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) 18:47:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) [ 187.305744][T14882] binder: 14880:14882 ioctl 40046207 0 returned -16 [ 187.314203][T14896] binder: 14880:14896 ioctl c0306201 20000440 returned -22 18:47:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}, @ptr]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x45, 0x93, 0x1}, 0x20) 18:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x11, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:55 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={r1, 0x80000, r0}) creat(0x0, 0x0) 18:47:55 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x23) fgetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', &(0x7f0000000100)=""/123, 0x7b) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454cc6060507000700000000000000020000000d0000007b0300000000000040000002e7477bdce6f020acaf499ccc553a000400000000000000160000003f0038000100"], 0x45) recvmmsg(r2, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') 18:47:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 187.568785][T14934] binder: 14933:14934 unknown command 0 [ 187.592909][T14934] binder: 14933:14934 ioctl c0306201 20000440 returned -22 18:47:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x400000000, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0xf653f4dd00de8347}, "144925ddaa60387f", "013bc3713c5268086db58fb019127b05", "d62754bd", "c96ac31481e2b634"}, 0x28) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x12, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 187.659760][T14951] binder: 14933:14951 unknown command 0 [ 187.690463][T14951] binder: 14933:14951 ioctl c0306201 20000440 returned -22 18:47:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 18:47:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:55 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/206) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) creat(0x0, 0x0) [ 187.802916][T14965] binder: 14963:14965 unknown command 0 18:47:55 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x82002, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x20000000000013, 0xfffffffffbfffffd) socket$vsock_dgram(0x28, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000440)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000180)={0x6, 0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000000)={0x8, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}}}, 0x88) 18:47:55 executing program 1: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) [ 187.852855][T14965] binder: 14963:14965 ioctl c0306201 20000440 returned -22 [ 187.880786][T14973] binder: 14963:14973 unknown command 0 [ 187.887045][T14973] binder: 14963:14973 ioctl c0306201 20000440 returned -22 18:47:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x13, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 188.039479][T14994] binder: 14992:14994 unknown command 0 [ 188.092493][T14994] binder: 14992:14994 ioctl c0306201 20000440 returned -22 [ 188.110222][T15000] binder: 14992:15000 unknown command 0 [ 188.115878][T15000] binder: 14992:15000 ioctl c0306201 20000440 returned -22 18:47:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000580)=""/147, 0x0, 0x93, 0x1}, 0x20) 18:47:56 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x4) fsetxattr$security_ima(r0, &(0x7f0000000240)='security.ima\x00', &(0x7f0000000280)=@v1={0x2, "a69a39431e85aae6306ec874f548909a"}, 0x11, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0x0, r1, 0x0, 0xe, &(0x7f0000000440)='procwlan1ppp0\x00'}, 0x30) tkill(r2, 0x3b) getdents64(r1, &(0x7f0000000300)=""/202, 0xca) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x5, 0x0, &(0x7f0000000180)={r3, r4+10000000}, &(0x7f00000001c0)) creat(0x0, 0x0) prctl$PR_GET_KEEPCAPS(0x7) 18:47:56 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x400) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) 18:47:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x18, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000580)=""/147, 0x0, 0x93, 0x1}, 0x20) [ 188.478079][T15017] binder: 15013:15017 unknown command 0 [ 188.506624][T15017] binder: 15013:15017 ioctl c0306201 20000440 returned -22 18:47:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x15, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x5, 0x0, 0x20000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 188.534657][T15025] binder: 15013:15025 unknown command 0 [ 188.571280][T15025] binder: 15013:15025 ioctl c0306201 20000440 returned -22 18:47:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xfffffeec) r1 = creat(0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000000)={0x9, 0x2, {0x52, 0x10000, 0xffffffffffffff01, {0x0, 0x1}, {0x8, 0x100000000}, @const={0x3, {0x8000, 0x1000, 0xca}}}, {0x57, 0xc1, 0x101, {0x3, 0x1ff}, {0x7d46, 0x4}, @rumble={0x6, 0x6}}}) 18:47:56 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) fcntl$lock(r0, 0x411, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000, 0xc5f3, r1}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) 18:47:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) fcntl$addseals(r0, 0x409, 0x1) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000100)={0x1, 0x7, 0x8001, 0x0, 0x1e}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) 18:47:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000580)=""/147, 0x0, 0x93, 0x1}, 0x20) 18:47:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x25, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 18:47:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:56 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x101800, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RMKDIR(r0, &(0x7f00000003c0)={0x14, 0x49, 0x2, {0x0, 0x0, 0x1}}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000400)={0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000480)={r4}) getsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000240)=""/126, &(0x7f00000002c0)=0x7e) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r5, 0xc0305602, &(0x7f0000000180)={0x0, 0x4, 0x301f, 0x1}) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.impure\x00') ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f00000001c0)={0xa, 0x8, 0x2}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, r6, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x880) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x6, [0x80, 0x2, 0x7f, 0x4, 0x8001, 0x8]}, 0x10) 18:47:56 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/pid_for_children\x00') syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000300)=""/202, 0xca) ioctl$CAPI_CLR_FLAGS(r0, 0x80044325, &(0x7f0000000080)=0x1) r1 = creat(0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:47:56 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x8}}]}, {0x0, [0x61, 0x61, 0x61, 0x2e, 0x7f, 0x7f, 0x5f]}}, &(0x7f0000000580)=""/147, 0x39, 0x93, 0x1}, 0x20) [ 188.812362][T15063] binder: 15057:15063 unknown command 0 [ 188.821822][T15063] binder: 15057:15063 ioctl c0306201 20000440 returned -22 [ 188.848862][T15064] binder: 15057:15064 unknown command 0 [ 188.854929][T15064] binder: 15057:15064 ioctl c0306201 20000440 returned -22 18:47:56 executing program 5: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xc5f3}) [ 188.957638][T15071] kasan: CONFIG_KASAN_INLINE enabled 18:47:56 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x1c, 0x1a, 0xffffff1f, 0x0, 0x0, {0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}}, 0x1c}}, 0x0) 18:47:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x30, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat, @flat=@binder={0x73622a85, 0x0, 0x12}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) [ 188.980985][T15071] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 188.996527][T15071] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 189.003516][T15071] CPU: 0 PID: 15071 Comm: syz-executor.1 Not tainted 5.2.0-rc6+ #10 [ 189.011502][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 189.021573][T15071] RIP: 0010:btf_array_resolve+0x1b4/0x18f0 [ 189.027463][T15071] Code: 00 00 00 00 00 fc ff df 42 80 3c 30 00 74 08 48 89 df e8 7f 85 25 00 48 8b 03 48 89 44 24 70 48 8d 50 04 49 89 d7 49 c1 ef 03 <43> 8a 04 37 84 c0 48 89 54 24 30 0f 85 ec 10 00 00 44 8b 32 44 89 [ 189.047297][T15071] RSP: 0018:ffff88805ad1f560 EFLAGS: 00010247 [ 189.053345][T15071] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000040000 [ 189.061295][T15071] RDX: 0000000000000004 RSI: 00000000000007f6 RDI: 00000000000007f7 [ 189.069245][T15071] RBP: ffff88805ad1f690 R08: ffffffff8189537d R09: ffffffff8188fac1 [ 189.077202][T15071] R10: ffff88805c05e140 R11: 0000000000000003 R12: 0000000000000002 [ 189.085185][T15071] R13: 1ffff110151cfac9 R14: dffffc0000000000 R15: 0000000000000000 [ 189.093184][T15071] FS: 00007f04a1bd8700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 189.102096][T15071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.108768][T15071] CR2: 0000000000758080 CR3: 0000000098dcc000 CR4: 00000000001406f0 [ 189.116728][T15071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.124689][T15071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.132732][T15071] Call Trace: [ 189.136002][T15071] ? __btf_verifier_log_type+0x5c0/0x5c0 [ 189.141644][T15071] ? btf_array_check_meta+0x2b0/0x2b0 [ 189.147004][T15071] btf_resolve+0x3ed/0xda0 [ 189.151399][T15071] ? btf_sec_info_cmp+0x110/0x110 [ 189.156590][T15071] ? kasan_kmalloc+0x9/0x10 [ 189.161119][T15071] ? __kmalloc_node+0x4d/0x60 [ 189.165799][T15071] btf_new_fd+0x216a/0x37b0 [ 189.170284][T15071] ? __might_fault+0xf9/0x160 [ 189.174963][T15071] ? btf_release+0xd0/0xd0 [ 189.179362][T15071] __do_sys_bpf+0x1212/0xc5d0 [ 189.184042][T15071] ? tomoyo_file_ioctl+0x23/0x30 [ 189.189048][T15071] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 189.195115][T15071] ? __bfs+0x550/0x550 [ 189.199183][T15071] ? __lock_acquire+0xcf7/0x1a40 [ 189.204099][T15071] ? __bpf_prog_put_rcu+0x320/0x320 [ 189.209301][T15071] ? __lock_acquire+0xcf7/0x1a40 [ 189.214223][T15071] ? trace_lock_acquire+0x190/0x190 [ 189.219404][T15071] ? kasan_check_read+0x11/0x20 [ 189.224228][T15071] ? do_raw_spin_unlock+0x49/0x260 [ 189.229317][T15071] ? __might_fault+0xf9/0x160 [ 189.233975][T15071] ? kasan_check_read+0x11/0x20 [ 189.238830][T15071] ? _copy_to_user+0xca/0xf0 [ 189.243404][T15071] ? put_timespec64+0x106/0x150 [ 189.248230][T15071] ? ktime_get_raw+0xf0/0xf0 [ 189.252801][T15071] ? prepare_exit_to_usermode+0x1e1/0x4f0 [ 189.258498][T15071] ? __x64_sys_clock_gettime+0x1c5/0x220 [ 189.264108][T15071] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 189.269550][T15071] ? trace_irq_disable_rcuidle+0x23/0x1c0 [ 189.275334][T15071] ? do_syscall_64+0x1d/0x140 [ 189.279994][T15071] __x64_sys_bpf+0x7a/0x90 [ 189.284388][T15071] do_syscall_64+0xfe/0x140 [ 189.288870][T15071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 189.294752][T15071] RIP: 0033:0x459519 [ 189.298622][T15071] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 189.318236][T15071] RSP: 002b:00007f04a1bd7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 18:47:57 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x11, &(0x7f0000000000)={0x40000000000000, 0x0, 0x0, 0xc5f3}) 18:47:57 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x13, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) pipe(&(0x7f0000000440)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fdatasync(r0) pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0) [ 189.326656][T15071] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459519 [ 189.334617][T15071] RDX: 0000000000000020 RSI: 00000000200004c0 RDI: 0000000000000012 [ 189.343022][T15071] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 189.350975][T15071] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f04a1bd86d4 [ 189.358946][T15071] R13: 00000000004bf726 R14: 00000000004d0fe0 R15: 00000000ffffffff [ 189.366901][T15071] Modules linked in: [ 189.373829][T15071] ---[ end trace 8eee0ff1f9998825 ]--- [ 189.379506][T15071] RIP: 0010:btf_array_resolve+0x1b4/0x18f0 [ 189.385369][T15071] Code: 00 00 00 00 00 fc ff df 42 80 3c 30 00 74 08 48 89 df e8 7f 85 25 00 48 8b 03 48 89 44 24 70 48 8d 50 04 49 89 d7 49 c1 ef 03 <43> 8a 04 37 84 c0 48 89 54 24 30 0f 85 ec 10 00 00 44 8b 32 44 89 [ 189.387370][T15077] kobject: 'loop0' (0000000092bd7398): kobject_uevent_env [ 189.405038][T15071] RSP: 0018:ffff88805ad1f560 EFLAGS: 00010247 [ 189.405048][T15071] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000040000 [ 189.405053][T15071] RDX: 0000000000000004 RSI: 00000000000007f6 RDI: 00000000000007f7 [ 189.405058][T15071] RBP: ffff88805ad1f690 R08: ffffffff8189537d R09: ffffffff8188fac1 [ 189.405063][T15071] R10: ffff88805c05e140 R11: 0000000000000003 R12: 0000000000000002 [ 189.405068][T15071] R13: 1ffff110151cfac9 R14: dffffc0000000000 R15: 0000000000000000 [ 189.405074][T15071] FS: 00007f04a1bd8700(0000) GS:ffff8880aea00000(0000) knlGS:0000000000000000 [ 189.405079][T15071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.405091][T15071] CR2: ffffffffff600400 CR3: 0000000098dcc000 CR4: 00000000001406f0 [ 189.415903][T15077] kobject: 'loop0' (0000000092bd7398): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 189.418294][T15071] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.418299][T15071] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.418309][T15071] Kernel panic - not syncing: Fatal exception [ 189.516940][T15071] Kernel Offset: disabled [ 189.521267][T15071] Rebooting in 86400 seconds..