Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.081377] audit: type=1800 audit(1569054117.815:33): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 [ 34.103497] audit: type=1800 audit(1569054117.815:34): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 45.916372] audit: type=1400 audit(1569054129.645:35): avc: denied { map } for pid=7272 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.10.2' (ECDSA) to the list of known hosts. 2019/09/21 08:22:15 fuzzer started [ 52.206295] audit: type=1400 audit(1569054135.935:36): avc: denied { map } for pid=7281 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/21 08:22:16 dialing manager at 10.128.0.105:45297 2019/09/21 08:22:16 syscalls: 2488 2019/09/21 08:22:16 code coverage: enabled 2019/09/21 08:22:16 comparison tracing: enabled 2019/09/21 08:22:16 extra coverage: extra coverage is not supported by the kernel 2019/09/21 08:22:16 setuid sandbox: enabled 2019/09/21 08:22:16 namespace sandbox: enabled 2019/09/21 08:22:16 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/21 08:22:16 fault injection: enabled 2019/09/21 08:22:16 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/21 08:22:16 net packet injection: enabled 2019/09/21 08:22:16 net device setup: enabled 08:24:04 executing program 0: [ 161.125105] audit: type=1400 audit(1569054244.855:37): avc: denied { map } for pid=7299 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=4469 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 161.201960] IPVS: ftp: loaded support on port[0] = 21 08:24:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffff000fffea, 0xffffffff000fffea, 0x349, [@const={0x2}, @func_proto={0x2, 0x0, 0x0, 0xd, 0x0, [{}, {}]}, @fwd, @enum={0x0, 0x200000cb, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}, @ptr]}}, 0x0, 0x10034b}, 0x3b) [ 161.301853] chnl_net:caif_netlink_parms(): no params data found [ 161.347478] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.363952] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.380940] device bridge_slave_0 entered promiscuous mode [ 161.403404] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.409785] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.417066] device bridge_slave_1 entered promiscuous mode [ 161.453844] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 161.474363] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:24:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00@@\xea\xff\xff\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00\x00 \x00 \x00\x00\x00/\x98\x00', @ifru_names='bond_slave_1\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x31, &(0x7f0000000000)=0xf788, 0x4) [ 161.499723] IPVS: ftp: loaded support on port[0] = 21 [ 161.506981] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 161.514636] team0: Port device team_slave_0 added [ 161.529776] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 161.545679] team0: Port device team_slave_1 added [ 161.571987] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 161.590903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:24:05 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$tun(r0, 0x0, 0x0) [ 161.664124] device hsr_slave_0 entered promiscuous mode [ 161.701897] device hsr_slave_1 entered promiscuous mode [ 161.751585] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 161.758570] IPVS: ftp: loaded support on port[0] = 21 [ 161.764205] IPVS: ftp: loaded support on port[0] = 21 [ 161.771115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 161.875836] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.882368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.889079] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.895426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.919515] chnl_net:caif_netlink_parms(): no params data found 08:24:05 executing program 4: [ 161.995906] chnl_net:caif_netlink_parms(): no params data found [ 162.061993] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.068594] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.091730] device bridge_slave_0 entered promiscuous mode [ 162.126903] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 162.141040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.152667] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.159118] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.169761] device bridge_slave_1 entered promiscuous mode 08:24:05 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000380)={0x0, 0xfffffe9c, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x19, 0x205, 0x0, 0x0, {0x1d, 0xd601}, [@nested={0x18, 0x3, [@generic="d1a4ccaf88d5e8c67f56aecee39a5f3c86"]}]}, 0x2c}}, 0x0) [ 162.207341] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 162.246424] IPVS: ftp: loaded support on port[0] = 21 [ 162.280555] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 162.287121] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.302459] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.308817] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.315677] device bridge_slave_0 entered promiscuous mode [ 162.322558] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.328881] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.336024] device bridge_slave_1 entered promiscuous mode [ 162.342243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 162.349990] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.357066] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.364048] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 162.373643] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.384060] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.405113] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.412514] team0: Port device team_slave_0 added [ 162.425810] chnl_net:caif_netlink_parms(): no params data found [ 162.437645] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.444913] team0: Port device team_slave_1 added [ 162.450046] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.457986] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.469505] IPVS: ftp: loaded support on port[0] = 21 [ 162.470855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 162.495746] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 162.507975] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 162.517264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.525142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.532830] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.539152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.583375] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 162.590681] team0: Port device team_slave_0 added [ 162.600034] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 162.653527] device hsr_slave_0 entered promiscuous mode [ 162.691242] device hsr_slave_1 entered promiscuous mode [ 162.731144] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.737471] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.744967] device bridge_slave_0 entered promiscuous mode [ 162.753131] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.759489] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.766525] device bridge_slave_1 entered promiscuous mode [ 162.773789] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 162.781048] team0: Port device team_slave_1 added [ 162.786301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 162.795156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 162.802610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.810246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.817872] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.824210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.832858] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 162.839856] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 162.852799] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 162.875281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.886784] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 162.899951] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 162.932858] device hsr_slave_0 entered promiscuous mode [ 162.971330] device hsr_slave_1 entered promiscuous mode [ 163.012952] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 163.020590] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 163.028464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.037464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.060723] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 163.074411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 163.131509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.139196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.148215] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 163.172654] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.179769] team0: Port device team_slave_0 added [ 163.185421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.198156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 163.208845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.216731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.225000] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.232566] team0: Port device team_slave_1 added [ 163.237848] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.246737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 163.263483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 163.272562] chnl_net:caif_netlink_parms(): no params data found [ 163.295199] chnl_net:caif_netlink_parms(): no params data found [ 163.352308] device hsr_slave_0 entered promiscuous mode [ 163.381267] device hsr_slave_1 entered promiscuous mode [ 163.431618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.439101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.448057] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 163.457260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.467581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 163.473671] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.489856] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 163.500634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.508399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.534044] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 163.540720] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.547590] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.555575] device bridge_slave_0 entered promiscuous mode [ 163.566468] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.575407] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.582775] device bridge_slave_1 entered promiscuous mode [ 163.589648] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 163.611934] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 163.619875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.646022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.661811] audit: type=1400 audit(1569054247.395:38): avc: denied { associate } for pid=7300 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 163.700032] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.710885] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.718458] device bridge_slave_0 entered promiscuous mode [ 163.727745] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.734362] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.741491] device bridge_slave_1 entered promiscuous mode [ 163.755613] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.765856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.773766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:24:07 executing program 0: r0 = open(&(0x7f0000000200)='./file0\x00', 0x15984a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x1, 0x74, 0x2}, {}], 0x30) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) [ 163.800852] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 163.808476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 163.827236] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.837528] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 163.860095] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.872889] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 163.880093] team0: Port device team_slave_0 added [ 163.886134] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 163.894953] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 163.901353] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.908199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.916504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.923649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.930360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.939804] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 163.939811] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.956667] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 163.964485] team0: Port device team_slave_1 added [ 163.969790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 163.981676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 163.989552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.998051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.005738] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.012094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.019113] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 164.027044] team0: Port device team_slave_0 added [ 164.032656] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 164.039762] team0: Port device team_slave_1 added [ 164.046014] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 08:24:07 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffffffffffd9d, 0x0}}], 0x400000000000004, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='projid_map\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) [ 164.065473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.073297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.080509] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 164.088309] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 08:24:07 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_matches\x00') lseek(r0, 0x4, 0x0) [ 164.134876] device hsr_slave_0 entered promiscuous mode [ 164.201166] device hsr_slave_1 entered promiscuous mode [ 164.241766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.249068] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 164.256470] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 164.263339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 164.271839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.279479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 08:24:08 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_matches\x00') lseek(r0, 0x4, 0x0) [ 164.297989] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.304461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.304796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.327516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.335652] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.342058] bridge0: port 2(bridge_slave_1) entered forwarding state 08:24:08 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = epoll_create1(0x0) splice(r1, 0x0, r0, 0x0, 0xfff, 0x0) [ 164.350294] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.360333] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.368917] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 164.383461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.390519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 08:24:08 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\x00') getdents64(r0, &(0x7f0000000080)=""/83, 0x39f) getdents64(r0, &(0x7f0000000180)=""/83, 0x53) [ 164.407723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.418363] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.424795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.431980] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.441973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 164.450704] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 08:24:08 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0xfe85}, {0x0}, {0x0, 0x20b}, {&(0x7f0000000100)=ANY=[@ANYBLOB="0000000008000098a2ff55c88ccbfa300d7c00", @ANYRES32=0x0, @ANYBLOB='d\x00\x00\x00\b\x00\x00\x00', @ANYBLOB="5f25ee1f8dba6294446892e7c5d0e35c2dc01545f13188f379a11c8ab46f754c81681a70b1eee02f89fdae001f68177affa923c5657aa7fdafe984d2a9dbba18797bd4d4ab95", @ANYBLOB="bf204fbac99fab165a5bce", @ANYRES32, @ANYBLOB="7902023e85aec177d7fc1157ddeeef95b20e524d04308282fa3b79f3301c89ab2be91103f9a9c39f1b39323ac0d6c5936b97bcefb9472d90a1e9af71fbf5ffdfb21bdb4cc50a00000028000000d112b3e78fd8fa76329d28c2d2c2ab3901110f4a6eb6832897b8e79644c93c67ce000000"], 0xa4}], 0x4}, 0x0) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x4) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) [ 164.467209] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 164.473891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.491442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.499055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.509821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.569956] device hsr_slave_0 entered promiscuous mode [ 164.611274] device hsr_slave_1 entered promiscuous mode [ 164.651407] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 164.659630] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 164.670047] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 164.682400] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 164.688556] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.695484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.703934] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 164.714759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 164.723313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 164.732126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 164.745727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.753696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.761551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.769050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.777303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.785228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.792938] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.799245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.806033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.813414] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.820241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.829052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 164.844118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 164.855108] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 164.863404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 164.870267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.878409] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.886096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.893807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.901577] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.907907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.914772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.922627] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.931882] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 164.940715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 164.954650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 164.961935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.969380] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.977072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.985485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.993231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.000561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.009908] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.016349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.025027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.037448] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.046059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.054011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.063295] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 165.070708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.081573] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.087563] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.099087] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.109648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.117121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.124683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.132568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.139972] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.148974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.157791] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 165.165997] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 165.176854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 165.186428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.193551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.201414] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.208885] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.216763] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.227123] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 165.236765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 165.244969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.251453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.258877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.266734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.273557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.283727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.295004] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.301507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.309936] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 165.317421] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.324522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.366948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.391736] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 165.400726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.415305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.428916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.444698] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.451078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.459401] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 08:24:09 executing program 1: [ 165.470438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.479771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.489104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.499738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.516430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.533011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.540731] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.547106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.558139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.567675] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 165.580170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.590210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 165.606663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.620608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.627686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.635521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.643160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.652826] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 165.658879] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.668502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 165.676535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.684569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.692349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.702529] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 165.712206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 165.720369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 165.728872] bond0: Releasing backup interface bond_slave_1 [ 165.753657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.761393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.768867] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.775211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.782290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.789915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.797643] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.804006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.810749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.818471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.826996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.838618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 165.846756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.855325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.863258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.872074] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 165.880293] bond0: Releasing backup interface bond_slave_1 [ 165.922810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.932700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 165.941135] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.948895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.958474] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.964773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 08:24:09 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000000)=[{0x15, 0x1401, 0x4000000000401}, {0x60}, {0x6}]}, 0x10) 08:24:09 executing program 3: [ 165.973434] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 166.000178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.008471] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.017123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.026876] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 166.045787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.058495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.069419] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 166.078264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.097113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.107457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 166.123332] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 166.130058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.137993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.147761] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 166.154877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.168009] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 166.176601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.200002] 8021q: adding VLAN 0 to HW filter on device batadv0 08:24:10 executing program 4: pause() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2ae}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x400000000000259, 0x0) 08:24:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00@@\xea\xff\xff\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00\x00 \x00 \x00\x00\x00/\x98\x00', @ifru_names='bond_slave_1\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x31, &(0x7f0000000000)=0xf788, 0x4) 08:24:10 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\x00') getdents64(r0, &(0x7f0000000080)=""/83, 0x39f) 08:24:10 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x15984a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x2) write$evdev(r0, &(0x7f0000000040)=[{}], 0x18) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, &(0x7f0000000000), 0x100000001) 08:24:10 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) creat(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000004ff0)={0x3, &(0x7f0000000000)=[{0x15, 0x1401, 0x4000000000401}, {0x60}, {0x6}]}, 0x10) 08:24:10 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) clock_getres(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, r1}, {0x0, 0x9}}, 0x0) rt_sigsuspend(&(0x7f0000000680), 0x8) tkill(r0, 0x1000000000016) 08:24:10 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) lstat(0x0, 0x0) setgid(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$usbmon(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) setfsgid(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0xe}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) [ 166.333827] bond0: Releasing backup interface bond_slave_1 08:24:10 executing program 0: ustat(0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 166.383377] hrtimer: interrupt took 37038 ns [ 166.397090] bond0: Enslaving bond_slave_1 as an active interface with an up link 08:24:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'bond0\x00@@\xea\xff\xff\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00\x00 \x00 \x00\x00\x00/\x98\x00', @ifru_names='bond_slave_1\x00'}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff7c, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x31, &(0x7f0000000000)=0xf788, 0x4) [ 166.472914] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:24:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) [ 166.584747] bond0: Releasing backup interface bond_slave_1 08:24:10 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) pipe2(0x0, 0x80000) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 08:24:10 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) lstat(0x0, 0x0) setgid(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$usbmon(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0xe}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) [ 166.693376] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 166.730594] syz-executor.1 (7409) used greatest stack depth: 22336 bytes left 08:24:10 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 08:24:10 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) lstat(0x0, 0x0) setgid(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$usbmon(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r0) setfsgid(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, 0x0, {0x0, 0xe}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 08:24:10 executing program 0: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c27ed0e8"}, 0x2e) 08:24:10 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x2, {0x2, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177863b1f3c453ffc3707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) 08:24:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) getgid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 08:24:10 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) [ 167.272011] SELinux: failed to load policy [ 167.314043] SELinux: failed to load policy 08:24:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) getgid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 08:24:11 executing program 5: setgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 08:24:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 08:24:11 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setregid(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 08:24:11 executing program 4: openat$usbmon(0xffffffffffffff9c, 0x0, 0x800, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) [ 167.554323] kvm: emulating exchange as write 08:24:11 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x3, &(0x7f0000000000), 0x4) getgid() dup2(0xffffffffffffffff, 0xffffffffffffffff) 08:24:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01dfdde80f32d9e90f086665676426f7c5000000000f2245deef", 0xffffffffffffffde}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000c000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:11 executing program 5: setgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x481, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 08:24:11 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) pipe2(0x0, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8004700d, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 08:24:11 executing program 4: ustat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x600000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pkey_alloc(0x0, 0x3) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:24:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x0, 0x0, 0x1, r3, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:11 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) [ 168.273719] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 168.299698] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 86364763) 08:24:12 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x4000000000000004) r1 = socket$inet(0x2, 0xa, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) [ 168.327477] FAT-fs (loop5): Filesystem has been set read-only 08:24:12 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:24:12 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)={0xf97cff8c, 0x8, 'SE Linux', "1200000000c46f0006000000070000003c9f0300000000000000c27ed0e81f00020000000000000067681bfd070000000100000000fb6c7a2ce2"}, 0x4a) 08:24:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) [ 168.459752] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 168.513930] SELinux: failed to load policy 08:24:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) [ 168.565342] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 168.572353] SELinux: failed to load policy [ 168.577530] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 86364763) [ 168.587817] FAT-fs (loop5): Filesystem has been set read-only 08:24:12 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) pipe2(0x0, 0x80000) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8004700d, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 08:24:12 executing program 1: [ 168.669253] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 168.700542] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 86364763) [ 168.779825] FAT-fs (loop5): Filesystem has been set read-only 08:24:12 executing program 1: 08:24:12 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) [ 169.037700] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 169.126410] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 86364763) [ 169.197419] FAT-fs (loop5): Filesystem has been set read-only 08:24:13 executing program 4: ustat(0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x600000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pkey_alloc(0x0, 0x3) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000300)) syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') getdents(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 08:24:13 executing program 1: 08:24:13 executing program 2: 08:24:13 executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) pipe2(0x0, 0x80000) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8004700d, 0x0) creat(&(0x7f0000000280)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x1000000, 0x0}}], 0xc6, 0x24000000) 08:24:13 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:13 executing program 0: 08:24:13 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2000, &(0x7f0000000480)={'trans=unix,', {[{@access_any='access=any'}]}}) 08:24:13 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) ftruncate(r0, 0x2007fff) write$cgroup_type(r0, &(0x7f0000000180)='threaded\x00', 0x9) 08:24:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000003240)=""/4096, 0x1000, 0x0, 0x0, 0xfe5f) 08:24:13 executing program 1: [ 169.786251] audit: type=1800 audit(1569054253.515:39): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16561 res=0 08:24:13 executing program 2: 08:24:13 executing program 3: 08:24:13 executing program 4: 08:24:13 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:13 executing program 2: 08:24:13 executing program 1: 08:24:13 executing program 3: 08:24:13 executing program 1: 08:24:13 executing program 2: 08:24:13 executing program 3: 08:24:14 executing program 0: 08:24:14 executing program 4: 08:24:14 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:14 executing program 2: 08:24:14 executing program 1: 08:24:14 executing program 3: 08:24:14 executing program 2: 08:24:14 executing program 1: 08:24:14 executing program 3: 08:24:14 executing program 4: 08:24:14 executing program 0: 08:24:14 executing program 1: 08:24:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', 0x0, 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:14 executing program 3: 08:24:14 executing program 2: 08:24:14 executing program 4: 08:24:14 executing program 1: 08:24:14 executing program 0: 08:24:14 executing program 4: 08:24:14 executing program 3: 08:24:14 executing program 2: 08:24:14 executing program 1: 08:24:14 executing program 4: 08:24:14 executing program 0: 08:24:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', 0x0, 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:14 executing program 3: 08:24:14 executing program 2: 08:24:14 executing program 1: 08:24:14 executing program 4: 08:24:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', 0x0, 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:14 executing program 2: 08:24:14 executing program 1: 08:24:14 executing program 0: 08:24:14 executing program 3: 08:24:14 executing program 4: 08:24:14 executing program 1: 08:24:14 executing program 3: 08:24:14 executing program 0: 08:24:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:15 executing program 2: 08:24:15 executing program 4: 08:24:15 executing program 1: 08:24:15 executing program 1: 08:24:15 executing program 2: 08:24:15 executing program 3: 08:24:15 executing program 0: [ 171.330349] FAT-fs (loop5): bogus number of reserved sectors [ 171.340884] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:15 executing program 4: 08:24:15 executing program 0: 08:24:15 executing program 1: 08:24:15 executing program 3: 08:24:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:15 executing program 2: 08:24:15 executing program 4: 08:24:15 executing program 0: 08:24:15 executing program 2: 08:24:15 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4}}}, 0x108) 08:24:15 executing program 3: socket(0xa, 0x20000000001, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 171.639243] FAT-fs (loop5): bogus number of reserved sectors 08:24:15 executing program 4: 08:24:15 executing program 0: 08:24:15 executing program 2: [ 171.680982] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:15 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x9}}, 0x0) 08:24:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63473686", 0x30}], 0x0, 0x0) 08:24:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) 08:24:15 executing program 0: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r1 = dup(r0) ptrace$getenv(0x4201, 0x0, 0x0, 0x0) r2 = gettid() clock_gettime(0x0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, 0x0) write$P9_RMKDIR(r1, 0x0, 0x0) pipe(0x0) getxattr(0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) link(0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) tkill(r2, 0x1000000000016) 08:24:15 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000440)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000040)={0x0, 0x0, 0x0}) 08:24:15 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) [ 171.907396] FAT-fs (loop5): bogus number of reserved sectors 08:24:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r0, 0x1, 0x5, 0x0, &(0x7f0000000000)) 08:24:15 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='stack\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 171.956189] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x8) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) prctl$PR_GET_TSC(0x19, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000280)=""/134}, 0x18) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x4]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0xfffffffffffffff8, @rand_addr="440e06e3d07da913e0bf83acf2418443", 0x3ff}}}, 0x88) fallocate(r1, 0x11, 0x0, 0x100000001) set_thread_area(0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000440)=@hat={'permhat '}, 0x1b) 08:24:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x0, 0x0, 0x0, 0x0) 08:24:15 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x9}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffff68, 0x7f528b679000, 0x0, 0x4c5) 08:24:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffa) 08:24:15 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000000)=""/53, 0x35}, 0x120) [ 172.187104] FAT-fs (loop5): bogus number of reserved sectors [ 172.227047] audit: type=1400 audit(1569054255.955:40): avc: denied { create } for pid=7807 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 172.242003] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffa) 08:24:16 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8941, &(0x7f0000000240)=0x1) [ 172.307875] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:24:16 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x9}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffff68, 0x7f528b679000, 0x0, 0x4c5) 08:24:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x0, 0x0, 0x0, 0x0) [ 172.364011] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.380181] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.419085] audit: type=1400 audit(1569054255.965:41): avc: denied { write } for pid=7807 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 172.443024] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:24:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffa) [ 172.470169] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.473749] audit: type=1400 audit(1569054255.995:42): avc: denied { read } for pid=7807 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 172.497105] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.547258] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.595312] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.660920] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.667613] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.674337] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.681050] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.687718] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.694428] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.701128] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.707690] FAT-fs (loop5): bogus number of reserved sectors [ 172.715063] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.728177] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.735682] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.749236] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:24:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffa) [ 172.756075] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.757461] FAT-fs (loop5): Can't find a valid FAT filesystem [ 172.764026] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.776612] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.783728] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.790487] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:24:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x0, 0x0, 0x0, 0x0) 08:24:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x8) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) prctl$PR_GET_TSC(0x19, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000280)=""/134}, 0x18) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x4]}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0xfffffffffffffff8, @rand_addr="440e06e3d07da913e0bf83acf2418443", 0x3ff}}}, 0x88) fallocate(r1, 0x11, 0x0, 0x100000001) set_thread_area(0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000440)=@hat={'permhat '}, 0x1b) [ 172.828451] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.842562] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.861005] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.867806] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.876152] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.890904] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.900755] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.918729] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:24:16 executing program 4: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffa) [ 172.925508] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:24:16 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x9}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffff68, 0x7f528b679000, 0x0, 0x4c5) [ 172.958784] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.967791] FAT-fs (loop5): bogus number of reserved sectors [ 172.981324] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 172.988107] FAT-fs (loop5): Can't find a valid FAT filesystem [ 172.994414] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.003387] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 08:24:16 executing program 4: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffa) [ 173.031242] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.038681] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.050628] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.060692] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.070104] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.119674] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.143481] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.150832] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.157515] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.182760] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.192128] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.199002] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.217788] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.230862] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.237539] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.251371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 173.267983] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 08:24:17 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syslog(0x4, &(0x7f00000000c0)=""/110, 0x6e) 08:24:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 173.385307] audit: type=1400 audit(1569054257.105:43): avc: denied { syslog } for pid=7880 comm="syz-executor.1" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 08:24:17 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') getdents64(r1, &(0x7f0000000080)=""/83, 0x39f) 08:24:17 executing program 4: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffa) 08:24:17 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) creat(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000100)={'nr0\x00', 0x9}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffff68, 0x7f528b679000, 0x0, 0x4c5) [ 173.469606] FAT-fs (loop5): bogus number of reserved sectors [ 173.502659] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffa) 08:24:17 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000e8009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xf0ffff, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a400400063a377fbac141414e9", 0x0, 0x100}, 0x28) 08:24:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x0, &(0x7f0000000040), 0x0, 0x0) [ 173.762953] audit: type=1400 audit(1569054257.495:44): avc: denied { prog_load } for pid=7897 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:24:17 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 08:24:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffa) 08:24:17 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffd16) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x10000000000000}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0xe8) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x880000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000004c0)={0x1f, 0xffffffffffffff28, &(0x7f0000000700)="34561df07c5dfb30c5329179ade3b8a0fe680063d78a29da1850673a2fc27f4205a0966be3fc421b916ea51bda2f289913a3942a0386f64f3d04e8ccb864b3ae1c8512c9780afef931dc65d299f5fc0b94cc9edc9353cf3245266574e1bc910406d3e9a48b50b633424969716795cd24ebe0a58d5290dff3ed6d5a7c4e0530da0b"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000280)=0xfffffffffffffffd, 0x227) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e21, @dev}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x800000000}) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0xfffffffffffffc24}, 0x9}], 0x1, 0x40000001) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000580)={0x8, 0x5, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x3, 0x0, 0x4}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$eventfd(r5, &(0x7f0000000080), 0x8) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0x3, 0x0, 0x4}) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./file0\x00') socket$key(0xf, 0x3, 0x2) unshare(0x60000000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xad3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:24:17 executing program 2: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) eventfd(0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000240)=""/246) close(r0) [ 173.877087] FAT-fs (loop5): bogus number of reserved sectors [ 173.909590] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffffffa) [ 173.935803] audit: type=1400 audit(1569054257.665:45): avc: denied { prog_run } for pid=7897 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 08:24:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x0, &(0x7f0000000040), 0x0, 0x0) 08:24:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x8) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/134}, 0x20) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x0, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0xfffffffffffffff8, @rand_addr="440e06e3d07da913e0bf83acf2418443", 0x3ff}}}, 0x88) fallocate(r1, 0x11, 0x0, 0x100000001) set_thread_area(0x0) write$apparmor_current(0xffffffffffffffff, 0x0, 0x0) 08:24:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_wait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x8) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) prctl$PR_GET_TSC(0x19, &(0x7f0000000140)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=""/134}, 0x20) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r4, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x1, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0xfffffffffffffff8, @rand_addr="440e06e3d07da913e0bf83acf2418443", 0x3ff}}}, 0x88) fallocate(r1, 0x11, 0x0, 0x100000001) set_thread_area(0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000440)=@hat={'permhat ', 0x0, 0x5e, ['vmnet1]-\x00']}, 0x24) [ 174.098779] FAT-fs (loop5): bogus number of reserved sectors [ 174.105759] IPVS: ftp: loaded support on port[0] = 21 [ 174.114554] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:17 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffa) 08:24:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 08:24:18 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) 08:24:18 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffa) 08:24:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xffffffff000fffea, 0xffffffff000fffea, 0x349, [@const, @func_proto={0x2, 0x0, 0x0, 0xd, 0x0, [{}, {}]}, @fwd, @enum={0x0, 0x200000cb, 0x0, 0x6, 0x4, [{}, {}, {}, {}, {}]}, @ptr]}}, 0x0, 0x10034b}, 0x3b) [ 174.408133] FAT-fs (loop5): bogus number of reserved sectors [ 174.422821] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:18 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffffffffffa) [ 174.725912] IPVS: ftp: loaded support on port[0] = 21 08:24:18 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffd16) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x10000000000000}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0xe8) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x880000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000004c0)={0x1f, 0xffffffffffffff28, &(0x7f0000000700)="34561df07c5dfb30c5329179ade3b8a0fe680063d78a29da1850673a2fc27f4205a0966be3fc421b916ea51bda2f289913a3942a0386f64f3d04e8ccb864b3ae1c8512c9780afef931dc65d299f5fc0b94cc9edc9353cf3245266574e1bc910406d3e9a48b50b633424969716795cd24ebe0a58d5290dff3ed6d5a7c4e0530da0b"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000280)=0xfffffffffffffffd, 0x227) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e21, @dev}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x800000000}) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0xfffffffffffffc24}, 0x9}], 0x1, 0x40000001) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000580)={0x8, 0x5, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x3, 0x0, 0x4}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$eventfd(r5, &(0x7f0000000080), 0x8) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0x3, 0x0, 0x4}) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./file0\x00') socket$key(0xf, 0x3, 0x2) unshare(0x60000000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xad3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:24:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 08:24:18 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000001, 0x0) close(r1) socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000380)=@in={0x2, 0x0, @multicast2=0xe0000001}, 0x80, 0x0}, 0x0) 08:24:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 08:24:18 executing program 0: pipe(&(0x7f00000002c0)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001580)='/dev/vga_arbiter\x00', 0x0, 0x0) clone(0x9000, 0x0, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000080)) unshare(0x24020400) pselect6(0x40, &(0x7f00000000c0)={0x3}, 0x0, &(0x7f0000000140)={0x1b3}, 0x0, 0x0) 08:24:18 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) 08:24:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{0x0}], 0x0, 0x0) 08:24:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) [ 174.967021] FAT-fs (loop5): bogus number of reserved sectors [ 174.990949] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:18 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0, 0x16b}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800, 0x1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0xfffffffffffffd16) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x10000000000000}, 0x0, 0x0, 0x80000000000001, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0xff}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x40000}}, 0xe8) perf_event_open(&(0x7f00000005c0)={0x0, 0x70, 0x800005, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x880000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3ff, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000480)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000004c0)={0x1f, 0xffffffffffffff28, &(0x7f0000000700)="34561df07c5dfb30c5329179ade3b8a0fe680063d78a29da1850673a2fc27f4205a0966be3fc421b916ea51bda2f289913a3942a0386f64f3d04e8ccb864b3ae1c8512c9780afef931dc65d299f5fc0b94cc9edc9353cf3245266574e1bc910406d3e9a48b50b633424969716795cd24ebe0a58d5290dff3ed6d5a7c4e0530da0b"}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x0, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000000280)=0xfffffffffffffffd, 0x227) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x4e21, @dev}, {0x2, 0x4e21, @local}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x2, 0x46a, 0x0, 0x0, 0x0, 0x800000000}) sendmmsg(r3, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0xfffffffffffffc24}, 0x9}], 0x1, 0x40000001) ioctl$sock_inet_SIOCGARP(r1, 0x8954, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000580)={0x8, 0x5, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, r4, 0x3, 0x0, 0x4}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$eventfd(r5, &(0x7f0000000080), 0x8) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x0, r6, 0x3, 0x0, 0x4}) renameat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', r5, &(0x7f0000000500)='./file0\x00', 0x5) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./file0\x00') socket$key(0xf, 0x3, 0x2) unshare(0x60000000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xad3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000000, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:24:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) 08:24:18 executing program 1: [ 175.181290] FAT-fs (loop5): bogus number of reserved sectors [ 175.219333] IPVS: ftp: loaded support on port[0] = 21 [ 175.265411] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:19 executing program 4: [ 175.358161] IPVS: ftp: loaded support on port[0] = 21 08:24:19 executing program 3: 08:24:19 executing program 1: 08:24:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x0, 0x0) 08:24:19 executing program 4: 08:24:19 executing program 0: 08:24:19 executing program 2: 08:24:19 executing program 1: [ 175.671422] FAT-fs (loop5): bogus number of reserved sectors 08:24:19 executing program 4: 08:24:19 executing program 0: [ 175.715244] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:19 executing program 3: 08:24:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x0, 0x0) 08:24:19 executing program 1: 08:24:19 executing program 2: 08:24:19 executing program 4: 08:24:19 executing program 3: 08:24:19 executing program 1: 08:24:19 executing program 2: [ 175.947625] FAT-fs (loop5): bogus number of reserved sectors 08:24:19 executing program 0: [ 175.988066] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:19 executing program 3: 08:24:19 executing program 4: 08:24:19 executing program 2: 08:24:19 executing program 1: 08:24:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)}], 0x0, 0x0) 08:24:19 executing program 0: 08:24:19 executing program 3: 08:24:19 executing program 4: 08:24:20 executing program 1: 08:24:20 executing program 2: 08:24:20 executing program 3: 08:24:20 executing program 1: 08:24:20 executing program 0: [ 176.332554] FAT-fs (loop5): bogus number of reserved sectors 08:24:20 executing program 2: 08:24:20 executing program 4: [ 176.401225] FAT-fs (loop5): Can't find a valid FAT filesystem 08:24:20 executing program 0: 08:24:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000", 0x18}], 0x0, 0x0) 08:24:20 executing program 3: 08:24:20 executing program 4: 08:24:20 executing program 1: 08:24:20 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x2000400) select(0x40, &(0x7f0000000040)={0x3f}, 0x0, 0x0, 0x0) 08:24:20 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0) 08:24:20 executing program 3: 08:24:20 executing program 1: 08:24:20 executing program 4: 08:24:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000", 0x18}], 0x0, 0x0) 08:24:20 executing program 2: 08:24:20 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x4, {0x2, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177863b1f3c453ffc3707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) 08:24:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x0, 0x0, 0x2, 0x46a}) 08:24:20 executing program 3: msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)) 08:24:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) pipe(0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffff68, 0x0, 0x0, 0x4c5) 08:24:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc1105511, &(0x7f0000000300)={0xf5, 0x0, 0x0, 0x0, 0x0}) 08:24:20 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) epoll_wait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0x8) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) prctl$PR_GET_TSC(0x19, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000280)=""/134}, 0x18) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r3, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x0, 0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_DSTLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080), 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) sendto$inet(0xffffffffffffffff, &(0x7f00000005c0), 0x29806c5fa86ed4a, 0x1, 0x0, 0xffffffffffffff82) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000500)={0x0, {{0xa, 0x4e20, 0xfffffffffffffff8, @rand_addr="440e06e3d07da913e0bf83acf2418443", 0x3ff}}}, 0x88) r4 = creat(0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_int(r5, 0x1, 0x5, &(0x7f000059dffc), &(0x7f0000000000)=0x4) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000100), &(0x7f00000005c0)=0x4) write$binfmt_script(r4, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x14) fallocate(r4, 0x10, 0x0, 0x8000) fallocate(r1, 0x11, 0x0, 0x100000001) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000480)) set_thread_area(0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000440)=@hat={'permhat ', 0x0, 0x5e, ['vmnet1]-\x00']}, 0x24) 08:24:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000", 0x18}], 0x0, 0x0) 08:24:20 executing program 3: syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 08:24:20 executing program 1: r0 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8800, &(0x7f0000000000)={0xa, 0x44e23, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x29}}}, 0x1c) r1 = socket$inet_tcp(0x2, 0x3, 0x6) dup2(r1, r0) 08:24:20 executing program 0: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x40, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xa8c6, 0x8, 0x7, 0x81, 0xef, 0x5e}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000455000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:24:20 executing program 2: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/148, 0x94}], 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x20000000000001d2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') socket$netlink(0x10, 0x3, 0x0) preadv(r2, &(0x7f0000000700), 0x31f, 0x10400003) 08:24:20 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x9}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) write(r0, &(0x7f0000000340)="fc00000048000400ab0925ee090007000a060000000000007a01369321000400ff01006c92770411419da79bb94b46fe000000bc", 0x34) 08:24:20 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x10000039a) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7bf070") r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) splice(r0, 0x0, r4, 0x0, 0x80000001, 0x0) 08:24:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b", 0x24}], 0x0, 0x0) 08:24:21 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xa, 0x0, 0x1ff}) 08:24:21 executing program 3: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) 08:24:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x9}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) write(r0, &(0x7f0000000340)="fc00000048000400ab0925ee090007000a060000000000007a01369321000400ff01006c92770411419da79bb94b46fe000000bc", 0x34) 08:24:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b", 0x24}], 0x0, 0x0) 08:24:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b", 0x24}], 0x0, 0x0) 08:24:21 executing program 0: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x40, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xa8c6, 0x8, 0x7, 0x81, 0xef, 0x5e}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000455000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:24:21 executing program 3: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x40, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xa8c6, 0x8, 0x7, 0x81, 0xef, 0x5e}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000455000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:24:21 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x9}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) write(r0, &(0x7f0000000340)="fc00000048000400ab0925ee090007000a060000000000007a01369321000400ff01006c92770411419da79bb94b46fe000000bc", 0x34) 08:24:21 executing program 2: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x40, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xa8c6, 0x8, 0x7, 0x81, 0xef, 0x5e}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000455000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:24:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d8", 0x2a}], 0x0, 0x0) [ 178.109640] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:24:21 executing program 1: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') getdents64(r0, &(0x7f0000000080)=""/83, 0x39f) 08:24:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d8", 0x2a}], 0x0, 0x0) 08:24:22 executing program 0: syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x10000000000010, 0x1) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x40, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xa8c6, 0x8, 0x7, 0x81, 0xef, 0x5e}) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mremap(&(0x7f00004e5000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000455000/0x3000)=nil) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:24:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) [ 178.376840] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:24:22 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94163, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x9}) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) write(r0, &(0x7f0000000340)="fc00000048000400ab0925ee090007000a060000000000007a01369321000400ff01006c92770411419da79bb94b46fe000000bc", 0x34) 08:24:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d8", 0x2a}], 0x0, 0x0) 08:24:22 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x4, {0x2, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177863b1f3c453ffc3707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) 08:24:22 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 08:24:22 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) [ 178.705526] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 08:24:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x20000002000003, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="dc2ac86d4b66732e661f8600080441000500077008f80000d8c32d8cbe59628cf9d9ed7b0cca03d557d84f6c63", 0x2d}], 0x0, 0x0) 08:24:22 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 08:24:22 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xd9f, 0x4, {0x2, @raw_data="7a96b6fbdf62bba845a52d283bb5a8dd7f85e61011ce5e9f9b04ddb9012500247fbf42196476f3d9503327a912bd364605e0446a5559377e7bf92ef30863951aaa53f7270160142e2eeaef347c1e02f86b9b6d4bb3c26f51d9fbf95a71bcd057022d48177863b1f3c453ffc3707cabc8eb6356a35480256ccf100f0699de633c9c7d1e7392d5322ba8cb887f11ce6b63f76445cc8d3cb45ecd3e2bbac22aea5bfc2abd157b05d12e9e772f0adcf0fa4b686c7272b6d4089d037562eeddd4c8d170f697a243b6f096"}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) 08:24:22 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503020006023e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) 08:24:22 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) pipe(0x0) [ 178.985474] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 179.009048] ================================================================== [ 179.016590] BUG: KASAN: use-after-free in v4l2_ctrl_grab+0x159/0x160 [ 179.023081] Read of size 8 at addr ffff8880a87d89a0 by task syz-executor.2/8294 [ 179.030506] [ 179.032124] CPU: 1 PID: 8294 Comm: syz-executor.2 Not tainted 4.19.75 #0 [ 179.032133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.032138] Call Trace: [ 179.032152] dump_stack+0x172/0x1f0 [ 179.032167] ? v4l2_ctrl_grab+0x159/0x160 [ 179.058640] print_address_description.cold+0x7c/0x20d [ 179.063914] ? v4l2_ctrl_grab+0x159/0x160 [ 179.068058] kasan_report.cold+0x8c/0x2ba [ 179.072204] ? vidioc_querycap+0x110/0x110 [ 179.076443] __asan_report_load8_noabort+0x14/0x20 [ 179.081365] v4l2_ctrl_grab+0x159/0x160 [ 179.085331] ? vidioc_querycap+0x110/0x110 [ 179.089561] vicodec_stop_streaming+0x158/0x1a0 [ 179.094223] ? vicodec_return_bufs+0x220/0x220 [ 179.098802] __vb2_queue_cancel+0xb1/0x790 [ 179.103034] ? vidioc_querycap+0x110/0x110 [ 179.107262] ? dev_debug_store+0x110/0x110 [ 179.111498] vb2_core_queue_release+0x28/0x80 [ 179.115989] vb2_queue_release+0x16/0x20 [ 179.117849] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 179.120044] v4l2_m2m_ctx_release+0x2d/0x40 [ 179.120056] vicodec_release+0xc0/0x120 [ 179.120071] v4l2_release+0xf9/0x1a0 [ 179.120090] __fput+0x2dd/0x8b0 [ 179.132170] ____fput+0x16/0x20 [ 179.132183] task_work_run+0x145/0x1c0 [ 179.132200] exit_to_usermode_loop+0x273/0x2c0 [ 179.139834] do_syscall_64+0x53d/0x620 [ 179.149650] FAT-fs (loop5): Filesystem has been set read-only [ 179.150206] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.169743] RIP: 0033:0x4136f1 [ 179.172929] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 179.191940] RSP: 002b:00007fffd159f810 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 179.199646] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004136f1 [ 179.206909] RDX: 0000001b2c520000 RSI: 0000000000000000 RDI: 0000000000000003 [ 179.214171] RBP: 0000000000000001 R08: 00000000dec7843d R09: 00000000dec78441 [ 179.221432] R10: 00007fffd159f8f0 R11: 0000000000000293 R12: 000000000075bf20 [ 179.228695] R13: 000000000002bb01 R14: 0000000000760490 R15: 000000000075bf2c [ 179.235974] [ 179.237589] Allocated by task 8295: [ 179.241205] save_stack+0x45/0xd0 [ 179.244651] kasan_kmalloc+0xce/0xf0 [ 179.248352] __kmalloc_node+0x51/0x80 [ 179.252142] kvmalloc_node+0x68/0x100 [ 179.255933] v4l2_ctrl_new.part.0+0x214/0x1450 [ 179.260512] v4l2_ctrl_new_std+0x22d/0x360 [ 179.264739] vicodec_open+0x1a8/0xb30 [ 179.268529] v4l2_open+0x1b2/0x360 [ 179.272056] chrdev_open+0x245/0x6b0 [ 179.275760] do_dentry_open+0x4c3/0x1210 [ 179.279809] vfs_open+0xa0/0xd0 [ 179.283075] path_openat+0x10d7/0x45e0 [ 179.287038] do_filp_open+0x1a1/0x280 [ 179.290833] do_sys_open+0x3fe/0x550 [ 179.294544] __x64_sys_openat+0x9d/0x100 [ 179.298594] do_syscall_64+0xfd/0x620 [ 179.302385] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.307558] [ 179.309171] Freed by task 8294: [ 179.312437] save_stack+0x45/0xd0 [ 179.315882] __kasan_slab_free+0x102/0x150 [ 179.320108] kasan_slab_free+0xe/0x10 [ 179.323898] kfree+0xcf/0x220 [ 179.326998] kvfree+0x61/0x70 [ 179.330091] v4l2_ctrl_handler_free+0x4a8/0x7e0 [ 179.334748] vicodec_release+0x6b/0x120 [ 179.338710] v4l2_release+0xf9/0x1a0 [ 179.342411] __fput+0x2dd/0x8b0 [ 179.345675] ____fput+0x16/0x20 [ 179.348943] task_work_run+0x145/0x1c0 [ 179.352821] exit_to_usermode_loop+0x273/0x2c0 [ 179.357394] do_syscall_64+0x53d/0x620 [ 179.361269] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.366450] [ 179.368060] The buggy address belongs to the object at ffff8880a87d8980 [ 179.368060] which belongs to the cache kmalloc-256 of size 256 [ 179.380699] The buggy address is located 32 bytes inside of [ 179.380699] 256-byte region [ffff8880a87d8980, ffff8880a87d8a80) [ 179.392480] The buggy address belongs to the page: [ 179.397394] page:ffffea0002a1f600 count:1 mapcount:0 mapping:ffff88812c3f07c0 index:0x0 [ 179.405519] flags: 0x1fffc0000000100(slab) [ 179.409741] raw: 01fffc0000000100 ffffea00026d6d08 ffffea00029a3848 ffff88812c3f07c0 [ 179.417613] raw: 0000000000000000 ffff8880a87d80c0 000000010000000c 0000000000000000 [ 179.425487] page dumped because: kasan: bad access detected [ 179.431173] [ 179.432811] Memory state around the buggy address: [ 179.437727] ffff8880a87d8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.445072] ffff8880a87d8900: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 179.452417] >ffff8880a87d8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.459758] ^ [ 179.464157] ffff8880a87d8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 179.471507] ffff8880a87d8a80: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 179.478849] ================================================================== [ 179.486190] Disabling lock debugging due to kernel taint [ 179.523826] protocol 88fb is buggy, dev hsr_slave_0 [ 179.529796] protocol 88fb is buggy, dev hsr_slave_1 [ 179.588686] Kernel panic - not syncing: panic_on_warn set ... [ 179.588686] [ 179.596064] CPU: 1 PID: 8294 Comm: syz-executor.2 Tainted: G B 4.19.75 #0 [ 179.604285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 179.613625] Call Trace: [ 179.616199] dump_stack+0x172/0x1f0 [ 179.619816] ? v4l2_ctrl_grab+0x159/0x160 [ 179.623958] panic+0x263/0x507 [ 179.627136] ? __warn_printk+0xf3/0xf3 [ 179.631019] ? v4l2_ctrl_grab+0x159/0x160 [ 179.635148] ? preempt_schedule+0x4b/0x60 [ 179.639282] ? ___preempt_schedule+0x16/0x18 [ 179.643678] ? trace_hardirqs_on+0x5e/0x220 [ 179.647985] ? v4l2_ctrl_grab+0x159/0x160 [ 179.652126] kasan_end_report+0x47/0x4f [ 179.656082] kasan_report.cold+0xa9/0x2ba [ 179.660210] ? vidioc_querycap+0x110/0x110 [ 179.664432] __asan_report_load8_noabort+0x14/0x20 [ 179.669344] v4l2_ctrl_grab+0x159/0x160 [ 179.673299] ? vidioc_querycap+0x110/0x110 [ 179.677516] vicodec_stop_streaming+0x158/0x1a0 [ 179.682161] ? vicodec_return_bufs+0x220/0x220 [ 179.686726] __vb2_queue_cancel+0xb1/0x790 [ 179.690947] ? vidioc_querycap+0x110/0x110 [ 179.695169] ? dev_debug_store+0x110/0x110 [ 179.699388] vb2_core_queue_release+0x28/0x80 [ 179.703868] vb2_queue_release+0x16/0x20 [ 179.707914] v4l2_m2m_ctx_release+0x2d/0x40 [ 179.712228] vicodec_release+0xc0/0x120 [ 179.716280] v4l2_release+0xf9/0x1a0 [ 179.719980] __fput+0x2dd/0x8b0 [ 179.723244] ____fput+0x16/0x20 [ 179.726510] task_work_run+0x145/0x1c0 [ 179.730409] exit_to_usermode_loop+0x273/0x2c0 [ 179.735067] do_syscall_64+0x53d/0x620 [ 179.738939] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 179.744110] RIP: 0033:0x4136f1 [ 179.747289] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 179.766189] RSP: 002b:00007fffd159f810 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 179.773880] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004136f1 [ 179.781130] RDX: 0000001b2c520000 RSI: 0000000000000000 RDI: 0000000000000003 [ 179.788381] RBP: 0000000000000001 R08: 00000000dec7843d R09: 00000000dec78441 [ 179.795630] R10: 00007fffd159f8f0 R11: 0000000000000293 R12: 000000000075bf20 [ 179.802880] R13: 000000000002bb01 R14: 0000000000760490 R15: 000000000075bf2c [ 179.811263] Kernel Offset: disabled [ 179.814886] Rebooting in 86400 seconds..