Starting mcstransd: [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 33.435777] kauditd_printk_skb: 9 callbacks suppressed [ 33.435790] audit: type=1800 audit(1544404266.527:33): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 33.464639] audit: type=1800 audit(1544404266.537:34): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 36.281751] audit: type=1400 audit(1544404269.377:35): avc: denied { map } for pid=6193 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. 2018/12/10 01:11:16 fuzzer started [ 42.933611] audit: type=1400 audit(1544404276.027:36): avc: denied { map } for pid=6204 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2018/12/10 01:11:18 dialing manager at 10.128.0.26:36343 2018/12/10 01:11:18 syscalls: 1 2018/12/10 01:11:18 code coverage: enabled 2018/12/10 01:11:18 comparison tracing: enabled 2018/12/10 01:11:18 setuid sandbox: enabled 2018/12/10 01:11:18 namespace sandbox: enabled 2018/12/10 01:11:18 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/10 01:11:18 fault injection: enabled 2018/12/10 01:11:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/10 01:11:18 net packet injection: enabled 2018/12/10 01:11:18 net device setup: enabled 01:14:12 executing program 0: [ 219.359239] audit: type=1400 audit(1544404452.457:37): avc: denied { map } for pid=6218 comm="syz-executor0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=2108 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 219.444634] IPVS: ftp: loaded support on port[0] = 21 01:14:12 executing program 1: [ 219.730748] IPVS: ftp: loaded support on port[0] = 21 01:14:12 executing program 2: [ 220.005373] IPVS: ftp: loaded support on port[0] = 21 01:14:13 executing program 3: [ 220.506457] IPVS: ftp: loaded support on port[0] = 21 01:14:13 executing program 4: [ 220.990654] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.006159] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.022605] device bridge_slave_0 entered promiscuous mode [ 221.121135] IPVS: ftp: loaded support on port[0] = 21 [ 221.191505] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.207443] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.226526] device bridge_slave_1 entered promiscuous mode [ 221.351851] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 01:14:14 executing program 5: [ 221.498364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 221.773083] IPVS: ftp: loaded support on port[0] = 21 [ 221.879088] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 221.895534] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.903376] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.912527] device bridge_slave_0 entered promiscuous mode [ 222.047938] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 222.111721] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.137364] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.151452] device bridge_slave_1 entered promiscuous mode [ 222.330748] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.446980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 222.479757] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.504434] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.514114] device bridge_slave_0 entered promiscuous mode [ 222.652565] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.659302] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.666840] device bridge_slave_1 entered promiscuous mode [ 222.680434] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 222.694603] team0: Port device team_slave_0 added [ 222.785094] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 222.824912] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.835338] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.867242] device bridge_slave_0 entered promiscuous mode [ 222.876025] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 222.889907] team0: Port device team_slave_1 added [ 222.900379] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 222.947505] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.956593] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.977708] device bridge_slave_1 entered promiscuous mode [ 222.988669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.035075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 223.051493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.065172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.077995] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.143266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 223.185621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.248306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 223.255536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.286630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.347396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 223.367335] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 223.386792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.394841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.421046] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.513549] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 223.693468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 223.722462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.805207] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 223.814675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 223.828952] team0: Port device team_slave_0 added [ 223.837641] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 223.875246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.897246] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.903738] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.927197] device bridge_slave_0 entered promiscuous mode [ 223.940310] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 223.956797] team0: Port device team_slave_1 added [ 223.966082] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 224.054200] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.076145] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.083631] device bridge_slave_1 entered promiscuous mode [ 224.112837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.139405] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.152625] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.163782] device bridge_slave_0 entered promiscuous mode [ 224.189080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.207194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.217838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.249798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.301275] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.310422] team0: Port device team_slave_0 added [ 224.340367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.349838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.360112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.371668] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.379588] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.387523] device bridge_slave_1 entered promiscuous mode [ 224.399793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.413017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 224.433592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.458984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.490249] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.502284] team0: Port device team_slave_1 added [ 224.524523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 224.626255] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 224.633195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.647169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.657231] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 224.703190] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 224.728464] team0: Port device team_slave_0 added [ 224.807268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 224.814197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.824718] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.871129] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 224.879742] team0: Port device team_slave_1 added [ 224.894577] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 224.928425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 224.937881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.946688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.041898] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 225.056500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.064575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.089002] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.110982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.127798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.137848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.150580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 225.219925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.288837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 225.315776] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.322370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.329555] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.335971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.358541] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.371161] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 225.401399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.414510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.526448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.564463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 225.578310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 225.585298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.595520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.626871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.845766] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 225.862619] team0: Port device team_slave_0 added [ 225.900709] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.907158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.913831] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.920294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.931839] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 225.976377] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.013859] team0: Port device team_slave_1 added [ 226.024483] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 226.047289] team0: Port device team_slave_0 added [ 226.141769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.161949] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 226.169965] team0: Port device team_slave_1 added [ 226.264297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.294956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.382675] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.451815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.476793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.484834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.528922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 226.546360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.562786] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.587003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.609844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.638182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.647007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.663426] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.669871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.676616] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.682992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.698498] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 226.707189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 226.716653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.731713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 227.102410] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.108866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.115546] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.121983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.145411] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.636222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 227.647453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.062620] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.069084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.075756] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.082205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.120559] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.192404] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.199005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.205711] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.212383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.248590] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 228.667594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.674891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 231.059445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.457349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.602439] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 231.967377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.994216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.110927] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.119844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.146616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.414574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.469088] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 232.569296] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.575653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.591476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.622933] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.939439] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 232.963348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 232.997100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.012887] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.074948] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.213369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.396874] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.464722] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.487170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.494735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.522460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.670085] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.929758] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.036964] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 234.065614] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.096299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.106346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.568474] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 234.579028] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.585826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.595161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.013034] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.428390] audit: type=1400 audit(1544404468.527:38): avc: denied { associate } for pid=6219 comm="syz-executor0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 01:14:28 executing program 0: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x84, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000040)='erspan0\x00'}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x200, 0x400000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), 0x0}, 0x20) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {r5, 0x3c, 0x0, @ib={0x1b, 0x1, 0x4, {"ce22c2b9fb2e47794ab6cf10fdef1f00"}, 0x10001, 0x2, 0xfff}}}, 0x90) syz_open_procfs(0x0, &(0x7f00000002c0)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e0becef7aa49681c8c7f3b2940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824df000000002ea1c9a31ce9f13627248946b0000000004e67ac2a538411a8cb3f1d6da7e395ce85fb7cd2daf3d9c82692b446865a75ebde61e4e4c640383f8132ef43dd6d96b35465e5880237ae007f5528dc400008de83d7b33564ab78ed2b0a96c126c9bcc05f211a6865203691af2fa9b887acbcf1842d2587a05279b9") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x17, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0x0, @local}, r6}}, 0x2) [ 235.777519] hrtimer: interrupt took 34533 ns [ 235.822828] audit: type=1400 audit(1544404468.907:39): avc: denied { map_create } for pid=7651 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 235.916626] audit: type=1400 audit(1544404468.947:40): avc: denied { map_read map_write } for pid=7651 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:14:29 executing program 0: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x84, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000040)='erspan0\x00'}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x200, 0x400000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), 0x0}, 0x20) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {r5, 0x3c, 0x0, @ib={0x1b, 0x1, 0x4, {"ce22c2b9fb2e47794ab6cf10fdef1f00"}, 0x10001, 0x2, 0xfff}}}, 0x90) syz_open_procfs(0x0, &(0x7f00000002c0)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e0becef7aa49681c8c7f3b2940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824df000000002ea1c9a31ce9f13627248946b0000000004e67ac2a538411a8cb3f1d6da7e395ce85fb7cd2daf3d9c82692b446865a75ebde61e4e4c640383f8132ef43dd6d96b35465e5880237ae007f5528dc400008de83d7b33564ab78ed2b0a96c126c9bcc05f211a6865203691af2fa9b887acbcf1842d2587a05279b9") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x17, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0x0, @local}, r6}}, 0x2) 01:14:29 executing program 1: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x84, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000040)='erspan0\x00'}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x200, 0x400000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), 0x0}, 0x20) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {r5, 0x3c, 0x0, @ib={0x1b, 0x1, 0x4, {"ce22c2b9fb2e47794ab6cf10fdef1f00"}, 0x10001, 0x2, 0xfff}}}, 0x90) syz_open_procfs(0x0, &(0x7f00000002c0)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e0becef7aa49681c8c7f3b2940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824df000000002ea1c9a31ce9f13627248946b0000000004e67ac2a538411a8cb3f1d6da7e395ce85fb7cd2daf3d9c82692b446865a75ebde61e4e4c640383f8132ef43dd6d96b35465e5880237ae007f5528dc400008de83d7b33564ab78ed2b0a96c126c9bcc05f211a6865203691af2fa9b887acbcf1842d2587a05279b9") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x17, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0x0, @local}, r6}}, 0x2) 01:14:29 executing program 0: ustat(0x5, &(0x7f0000000000)) 01:14:29 executing program 1: ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x84, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000040)='erspan0\x00'}) socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x200, 0x400000) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x8000000012, 0x3, 0x4, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r4, &(0x7f0000000000), 0x0}, 0x20) openat$cgroup_type(r1, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f0000000000), 0x0}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000800)={0x14, 0x88, 0xfa00, {r5, 0x3c, 0x0, @ib={0x1b, 0x1, 0x4, {"ce22c2b9fb2e47794ab6cf10fdef1f00"}, 0x10001, 0x2, 0xfff}}}, 0x90) syz_open_procfs(0x0, &(0x7f00000002c0)="6377642f2e000000d873115ab98f27504ff88b5a598657b4334b8816acebdff1900645e0becef7aa49681c8c7f3b2940054107cb228974d54c2982dd2a3802b0449d6f051ac1220500477c834d8e3cb8ed3b46af12e4524b8747daf1dff5196a137e398b46090c30d052ea98b80824df000000002ea1c9a31ce9f13627248946b0000000004e67ac2a538411a8cb3f1d6da7e395ce85fb7cd2daf3d9c82692b446865a75ebde61e4e4c640383f8132ef43dd6d96b35465e5880237ae007f5528dc400008de83d7b33564ab78ed2b0a96c126c9bcc05f211a6865203691af2fa9b887acbcf1842d2587a05279b9") write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x143) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x17, 0xfa00, {{0x2, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}}, {0x2, 0x0, 0x0, @local}, r6}}, 0x2) 01:14:29 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:29 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r0, r1, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{}]}) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000040)={0x4, 0x1, @raw_data=[0x9, 0x8, 0x6, 0x7, 0x7fffffff, 0x100, 0xc3a0, 0x0, 0x86, 0x7, 0x8000, 0x3, 0x2, 0x1, 0x7, 0x935]}) 01:14:29 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x220200, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f00000000c0), &(0x7f00000002c0)=0xfffffffffffffeb0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x400401}, 0xfffffffffffffffc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x0, r0}) fallocate(r1, 0x20000000000001, 0x6, 0xfffffffffffffc00) r4 = socket$inet6(0xa, 0x3, 0x7) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x10000001) r5 = syz_open_dev$dmmidi(&(0x7f0000000340)='/dev/dmmidi#\x00', 0x1, 0x40) connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000200)={@remote={0xfe, 0x80, [0x5702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x8, r6}) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c) 01:14:29 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:30 executing program 3: sched_setaffinity(0x0, 0x375, &(0x7f0000000140)=0x5) r0 = socket$inet(0xa, 0x801, 0x84) dup2(r0, r0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0xd) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000001c0)=0x818e, 0x4) listen(r0, 0xfc0004) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x3, 0x7}, 0x0, 0xca, 0x3, {}, 0x292}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='ip6tnl0\x00', 0x10) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0x0, &(0x7f0000004480)={0x0, r2+30000000}) [ 236.892475] audit: type=1400 audit(1544404469.977:41): avc: denied { create } for pid=7763 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:14:30 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x218001, 0x2) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000040)={0x16, 0xe7, &(0x7f0000000200)="b18285757ddf0616a2793aea1d288e52862cdc04e30de33d203e027462f45e221c7364e6f816b22eeae3ddedd1b33452dc71070681a1bfc595511ef02f9ba8d261f4491ee6ba81c6739a8bba9a1852de9ad2a3405d31ddff36102e9b9d447a3cb95a1eb844c0b4eb7531a9574327a5a3ca6a4eee80c9c27ca4cb9ecfae06d0205aa11f0eb3a5ce0179a40530e69bce421cbc923c21ca1f35890e89d4e53b2dcad62a83f54984c559fd686bf90ebce09bb1e70d0d76206211fac8e1ef9f9692def5afe7da1ec6b8674c16f9781be80884f34469ef13293acc129bce3cba241b2736af5ee9ed4713"}) sendmsg$nl_route(r0, &(0x7f0000029000)={0x0, 0xffffffffffffff77, &(0x7f000000b000)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000001900000128bd7000fbdbdf250ab41481ff03fd00002200000000150004000000a797431749fe2c5db227bc1446486e5e8f6b263c2d61f6f4310f209bf3efc2ba469154e28107dacac5523e542712851d6d7442ddb18f5727300b1891a62bfce7c3d55a65a7d3400f607c05f9d29a4bf3b6aa5523fc2a5417e0dcdd1c2ce71fe2f94c2260e1898649321d8ad239102e419faa972a791b558831e5f81ff5c10e13917d3532eb3755a4606ec1a29c5e6526fdcf3890aa5773e1bf06e8ca25df1388d640907bb765"], 0x24}}, 0x0) r2 = getpid() sched_getscheduler(r2) prlimit64(r2, 0xe, &(0x7f0000000080)={0x9, 0x8}, &(0x7f00000000c0)) [ 237.446837] audit: type=1400 audit(1544404470.537:42): avc: denied { getrlimit } for pid=7820 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 01:14:30 executing program 5: sched_setaffinity(0x0, 0xfffffffffffffefb, &(0x7f00000004c0)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000580)=[@in={0x2, 0x0, @remote}], 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0x3) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x0, 0x0) r3 = gettid() mount$9p_xen(&(0x7f0000000140)='nv\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x200000, &(0x7f00000005c0)={'trans=xen,', {[{@noextend='noextend'}], [{@smackfsroot={'smackfsroot', 0x3d, 'vmnet1em1'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/audio\x00'}}, {@smackfstransmute={'smackfstransmute'}}, {@subj_user={'subj_user', 0x3d, ']'}}, {@subj_role={'subj_role', 0x3d, '/dev/audio\x00'}}]}}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r2, 0x81, 0x0, r2}) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000340)=""/243, &(0x7f00000001c0)=0xf3) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r3, 0x401104000000016) 01:14:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) 01:14:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = syz_open_dev$amidi(&(0x7f00000006c0)='/dev/amidi#\x00', 0x2, 0x258901) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f0000000700)) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x8080aea1, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000600)=0xe8) r6 = getegid() write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000640)={0x78, 0xffffffffffffffda, 0x4, {0x80, 0x3, 0x0, {0x4, 0xbfaa, 0x2, 0x5, 0x2, 0x6, 0x401, 0x10001, 0x8, 0x800, 0x7fff, r5, r6, 0x0, 0x9}}}, 0x78) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000200)={"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"}) dup2(r2, r3) 01:14:30 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = timerfd_create(0x7, 0x800800) timerfd_settime(r1, 0x3, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000080)) timerfd_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) 01:14:30 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:30 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10000, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000040)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r4, 0x2, 0x6}, 0x10) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000140)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000180)="6263736630000000000000001100") 01:14:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8, 0x0) write$FUSE_OPEN(r3, &(0x7f0000000240)={0x20, 0xfffffffffffffffe, 0x2, {0x0, 0x1}}, 0x20) r4 = socket(0x9, 0x3, 0x3) close(r4) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x7a, &(0x7f00000000c0)={r2}, &(0x7f00000001c0)=0x10) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="3000000000000000840000000199da949b5d5eb0e795c9b47b0eae00000000ce7f48b4ffdfff3bb317a702508ca9f39bff0000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f00000003c0)={[], 0x7, 0x7fff, 0x9, 0x0, 0x1, 0x10000, 0x4002, [], 0x7fff}) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x1, 0x0, 0x6e3612ce5c7f3e5, 0x3, 0x2, 0x2, 0x4ad, 0x6, 0x5, 0xc2bf, 0x0, 0x6c1, 0x5c, 0x0, 0x2, 0x4}}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000680)={0x3, 0xe, 0x4, 0x400, {r6, r7/1000+30000}, {0x0, 0x0, 0x81, 0x2, 0x1f, 0x7, "3b0c3ffa"}, 0x3, 0x4, @planes=&(0x7f0000000640)={0x5873, 0xf5, @mem_offset=0x7, 0x10000}, 0x4}) utime(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x5}) [ 237.614739] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 01:14:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) 01:14:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) 01:14:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000000c0)=""/28) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bond0\x00', 0x0}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000056c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x90b, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x17}}]}, 0x2c}}, 0x0) 01:14:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x20) r1 = socket$packet(0x11, 0x800000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x6b3, &(0x7f0000001200), 0x2d4}, 0x8000) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000031c0)="05b1acc02ea6e84ea212aba07ef78303b968bf600c7c1741898f9eafd916ed510760d49617e214f68d7389bd2cd3d198e1bc6bcbf63e37af4c7dce16513786f40b8f4e59f774013de350cc7cad5228970096db7c59932f22e236429719e32fcb47a8f73e038aaa16bf776369bdb37a73eafe1192f512699fafa1da7421a7d6e3e031e6b0e3cb4036c71db6ba869ccb6ecd04adfeddf2b741629b18602fbacc038149ea5d22398a90409423220ac50170e7569c6aad8b1419a3f307141599797d68c8bec3804c2323bb36faf69669f70a71ec15290cec6648d926976e9c899787dbb080906501df50d559a523b47f353f392c809dfc335817d4558618898cb0bdb4f5a12e6934ae4a192fa029cf392b622813a483427a4e84fabca4fdb89483d430551b10400e1f4a8774349c55b6e364cee26c92b424c3edf62e32629da7df1e0b8753d0f45189b08c872891ce99e4a2b123d600b7bf4f96ed68e7106c7947dc786b86d63f04e544874002525925497faad435b74dc535993d0b2020d35e39ca64b7453be67e8f4c3cb83b6a7ff2fe18b5ebdfe81f422442afd71be6b70742eebb8e52e8b575733c4e97e33ba7e53e37f9f6d3f971e873f4dda6190797cea5c9581053806243dc3bb9c8c9a8191a2e2fce803c2263a555d004906f13842063aee0ae0251bdeccf07980904ec7f0377af3cd1a32504cb16f441a14e7aced69da9a72a26fb57116c8f1f91b1f5cd9e66bd9fdbde8bbc11a0ea766b22c089c5cc4217d4026d3e4716fdcf8aebd4e1240e37444c8b96855940c7240d7f810787b5eb81527ff97b89800f54891566bcece0ffeee0d265153aa1bb9fc8d83234dcbeea545de405a69f0ef2a998096607f07d014438cb935357466fd426f0db69477751e07f6a4d9a62bcc20cc6c84df4a5f61a87d0823b791d2ddbc90acd8da205e609a80344d65c217f07927b54c838df9f4285960bab7ce4985573902efd1ed6b086e0f134d6841bfe336b4010d7bb11418fc769a24992cbe38cdd933ceb50effd0e60b5311feda4dc1cedbb4af5af508e31b38eacdf43742d32a3b06a33a74b07f8f8272ec65f8f5b578964c4593fd04784004494d3866b2b108327a6c68e471ccf865e9f5fd7dfe9f1498d0a523f54d03e2f2dfd0e5aa48ff02366f9885e78abeae8c4dcf09765a91620ca3134003dc6ef1801ef7b2dd4a05465daa19ef36da994f48f0f3c99c385bbea3ff2a86b5f3fe7fdf9e1277ff42408af4d96c1fb8bc5ad5760480ca172a1cde308c246914dab46334d121f725d50b3f13e2966f5d3c302a2dba1778c03ceba63f29c9b2787a8982d7e03fc97acb86d707a8cc14280bc18ae0b6d4ab061281f9675e2882368555b5a15a9829cb9b43c3e8c61e335f4dca6470ca488c721181f4519febcdd4e07b2f93f9d506212e78cf408a102fdf13e49bf05766155b7b17cc986eb1119e58201efcc20a0aed28339fda26b5b28e59a9f9454c4f71763a7e4d84dcfbfe0bd76eb4fc28002042db039ec9083e7d98e2fb0ec317ebbfb29ac27fa2753788bd527e8bb8ce9e1bbad59eab86f45000b9de76e193efd468d9a64c0e516d06f3d592a4870d31bcb4d3aaefb260d007b6d38a156bbff661f6e95f1f3929b2277e609c309f9e2f6ce65e23ac6db638acacd47382c98b3468da8f26da43d07a5e652d5d3b2e37541b6b12ebe6d833b24d078e571fdf51184a99ca39e610579e193b2bf820150799ec0a2f6d0fc4586514ccf9ab936dbc56343e5597cc10307da56882c0f6377c9481ea5f5fce12a12a7a0c2c458b0b53e15f972e2197a0749d1dae29d34c3e0cbb1f346ed0c240cf8840ae8c96b63f324a2a5bcad05ef790e7a266d6a746209379e56c2faef857815381faedecbd6a081e16ea7e14a9df43786333767bfe23f9910c230295b4fd7645bfac493ce200fea5248701704e34f7dc985d05222e7b2ae1283b2b8aae7e78bdd5eb65a29b0a70f32f3ab8295cf6b89c62afb3d76d084b90ec0c4fe85145a8b2380ef91f3abced6d38e330ff95b910c988a089436502e872f74624947d27fdea69853fc6ac741f3b1da7a36e9a945e0e48f2fb7cd6ff6d738039ec0ab4daf9b3bdd1e776dd9629985403344c4b40508cce3997ae1ed83ede4d5a0350c6eff2c6ecf2a4c2fb23f1941d52274b060d3c7aece276a5c852eb9", 0x612}], 0x1}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 01:14:30 executing program 5: mkdir(&(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c32593c2d45961ef66f7765726469723d2e2f65312c776f726b646972000000"]) r0 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) fcntl$notify(r0, 0x402, 0x10) getxattr(&(0x7f0000000040)='./file1/file0\x00', &(0x7f0000000100)=@known='com.apple.system.Security\x00', &(0x7f0000000240), 0x0) open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) 01:14:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:31 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 238.005267] overlayfs: unrecognized mount option "l2Y<-E–öowerdir=./e1" or missing value 01:14:31 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="23335114af01800040002da9b8491fce795e6e00ffcb9bc000000000400000"], 0xffffffffffffff7b) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="e8bc81b5231ca2a649a929ce066416ad4c26245683605191c4680e55229507527c41bf0bf5f939eb5c5853d7f714fbecb37ab828306da3d701ea7bd268ef5cebae1bc6ae069f351860ef6249819bd9e04f5ddd013f116f62419167c55eb798aab24bdd92eb6167dd29a0a45673967250c298107761fb997e8bd92c722d2d349d062dccf357480c923f91ba788af1b776d60ce62355542745746e17c52ef239efdb48ad162d97f081d7cb89cc0fe2e5f9e39b24dbd70f281624bcf107f17f578caf5504b660f45e4e092ad604b6e6571bc40232951f2750b1229d7379553e7956aafee512eeed8606e9e6d3b21bbb3d09d580c1a42b2e", 0xf6, 0x5f, 0x0, 0x2, r2}]) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) fanotify_mark(r2, 0x80, 0x8000000, r2, &(0x7f0000000340)='./file0\x00') r6 = getgid() fchownat(r2, &(0x7f0000000080)='./file0\x00', r5, r6, 0x1000) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r7, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000140)=0x36a, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000540)=""/57, &(0x7f0000000580)=0x39) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'vcan0\x00', 0x100000001}) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 01:14:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e24, 0xffffffffffffffff, @local}, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0x1f}, 0x100000001}, 0x1a4e, [0x0, 0x4cf91602, 0x9, 0xfffffffffffffff7, 0x7fff, 0x0, 0x1]}, 0x5c) sync() r4 = shmget(0x2, 0x2000, 0x1881, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r4, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x2) mknod(0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000980)) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x9) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x0) fcntl$getownex(r5, 0x10, &(0x7f0000001200)) getpgid(0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) lstat(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f00000002c0)) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000001280)={0x0, {0x7, 0x7ff}}) [ 238.082004] audit: type=1400 audit(1544404471.177:43): avc: denied { map } for pid=7878 comm="syz-executor4" path="/dev/swradio8" dev="devtmpfs" ino=16423 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 01:14:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom$packet(r1, &(0x7f0000000200)=""/250, 0xfa, 0x20, &(0x7f0000000400)={0x11, 0x1, 0x0, 0x1, 0xfffffffffffffff8, 0x6, @dev={[], 0xf}}, 0x14) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000300)=""/216) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 01:14:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:31 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) [ 238.460740] QAT: Invalid ioctl [ 238.533696] QAT: Invalid ioctl 01:14:31 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom$packet(r1, &(0x7f0000000200)=""/250, 0xfa, 0x20, &(0x7f0000000400)={0x11, 0x1, 0x0, 0x1, 0xfffffffffffffff8, 0x6, @dev={[], 0xf}}, 0x14) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000300)=""/216) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 01:14:31 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 238.707035] QAT: Invalid ioctl 01:14:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000bc000)=@abs, 0x6e) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001280)=0x800, 0x20) r1 = socket$packet(0x11, 0x800000000000002, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x800}]}, 0x10) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000140)=@in6={0xa, 0x4e21}, 0x6b3, &(0x7f0000001200), 0x2d4}, 0x8000) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000031c0)="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", 0x612}], 0x1}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 01:14:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:32 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(cfb(twofish),rmd128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000200), 0x7b, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="23335114af01800040002da9b8491fce795e6e00ffcb9bc000000000400000"], 0xffffffffffffff7b) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(0xffffffffffffffff, 0xc0385720, &(0x7f00000000c0)={0x0, {0x0, 0x989680}}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0xa00) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000380)=0x0) io_submit(r4, 0x1, &(0x7f0000000500)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x5, 0xffffffffffffffff, &(0x7f00000003c0)="e8bc81b5231ca2a649a929ce066416ad4c26245683605191c4680e55229507527c41bf0bf5f939eb5c5853d7f714fbecb37ab828306da3d701ea7bd268ef5cebae1bc6ae069f351860ef6249819bd9e04f5ddd013f116f62419167c55eb798aab24bdd92eb6167dd29a0a45673967250c298107761fb997e8bd92c722d2d349d062dccf357480c923f91ba788af1b776d60ce62355542745746e17c52ef239efdb48ad162d97f081d7cb89cc0fe2e5f9e39b24dbd70f281624bcf107f17f578caf5504b660f45e4e092ad604b6e6571bc40232951f2750b1229d7379553e7956aafee512eeed8606e9e6d3b21bbb3d09d580c1a42b2e", 0xf6, 0x5f, 0x0, 0x2, r2}]) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) fanotify_mark(r2, 0x80, 0x8000000, r2, &(0x7f0000000340)='./file0\x00') r6 = getgid() fchownat(r2, &(0x7f0000000080)='./file0\x00', r5, r6, 0x1000) r7 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x0) dup3(r3, r7, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000140)=0x36a, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000540)=""/57, &(0x7f0000000580)=0x39) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000100)}}, 0x18) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000005c0)={'vcan0\x00', 0x100000001}) recvmmsg(r1, &(0x7f0000008e80)=[{{&(0x7f0000000140)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0x536}], 0x1, &(0x7f0000001680)=""/72, 0x48}}], 0x1, 0x0, &(0x7f0000002240)) 01:14:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom$packet(r1, &(0x7f0000000200)=""/250, 0xfa, 0x20, &(0x7f0000000400)={0x11, 0x1, 0x0, 0x1, 0xfffffffffffffff8, 0x6, @dev={[], 0xf}}, 0x14) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000300)=""/216) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 01:14:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom$packet(r1, &(0x7f0000000200)=""/250, 0xfa, 0x20, &(0x7f0000000400)={0x11, 0x1, 0x0, 0x1, 0xfffffffffffffff8, 0x6, @dev={[], 0xf}}, 0x14) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, &(0x7f0000000300)=""/216) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 01:14:32 executing program 4: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 01:14:32 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001940)='/dev/hwrng\x00', 0x100, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000001980)={0x81, 0x0, [0x6, 0x3ff, 0xff, 0x1]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001880)={0x0}, &(0x7f00000018c0)=0xc) r4 = syz_open_procfs(r3, &(0x7f0000001840)="5683624b00000000") fstat(r1, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001440)={0x0, @in6={{0xa, 0x4e23, 0x80000001, @local}}, 0x9, 0x7, 0xffffffff, 0x4, 0x3}, &(0x7f0000000180)=0x98) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000017c0)=0x0) perf_event_open(&(0x7f0000001740)={0x3, 0x70, 0x4, 0x0, 0x8, 0x1338fc9b, 0x0, 0x7, 0x10, 0x3, 0x1f, 0x5, 0x2, 0xffffffffffffffff, 0x66, 0xf06, 0x10001, 0x10000, 0x8, 0x9, 0x5, 0x8, 0x50d8, 0x4, 0x8000, 0x401, 0xfe10, 0x3, 0x1, 0x1, 0x8000, 0x2, 0x1, 0xf8, 0x7, 0x100000001, 0x8, 0xe0, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000001700)}, 0x4000, 0x800, 0x1, 0xf, 0x8001, 0x7, 0x69}, r7, 0x7, r1, 0x3) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001500)={r6, 0x80000001}, &(0x7f00000015c0)=0x8) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x3, &(0x7f00000012c0)=[{&(0x7f0000000200)="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", 0x1000, 0x6}, {&(0x7f0000000080)="c7ae5cb5418fd3a275c57143d2735175c8ec66f1770ba116a4ce78023bdfc810b3dc0e32a2230b462fd05b44428f402b705b8d4fb48a1f908204416d88ddc6ded9912aaec4e1c8fde337818877b6351f5a8a72d6bfbc4d0e27add0074777fffb7b8aa0676867608204f4e4be70cd0ffbdb8eb49dbdb315d54bb1d3aede9145e49b00a96a407a2738766b6cc0123adb992311123bc358f0abaeefe8dfc77694c7942a5dc047d254a29419b58f20f86c28adeb1259938a0e57d44cfe3200d84b0cadc2f6631e4e9fa0d7a687ea758f9fe3d442b732c4a26a5c62", 0xd9, 0x40}, {&(0x7f0000001200)="9cfaec75129f8a0aa2786186a38dc0d0c499d679f95c225a095207d5e516683cc4e6a2721acae0cdd551f014a73ed872fd8e5bcac37c8bac2363824988b42d5a18b7b08a6f7610973d05dd862af3751806792f287019c3cec5b8ba73bcaaf02b2f7e33b815ed17773202ea23f92532f554d5f115c6f0242e3bb9ff515ab3b7aded69138ec4f1db7a2ec6b6f00b7c066aaac0919fb8e684bbf6a0c190065c01", 0x9f, 0x8}], 0x80, &(0x7f00000013c0)={[{@nonumtail='nnonumtail=1'}, {@utf8no='utf8=0'}, {@numtail='nonumtail=0'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_win95='shortname=win95'}, {@uni_xlateno='uni_xlate=0'}, {@nonumtail='nnonumtail=1'}], [{@fowner_eq={'fowner', 0x3d, r5}}, {@dont_appraise='dont_appraise'}]}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0xffffffff00000001, 0x6}, 0x8) ioctl$TIOCGSID(r4, 0x5429, &(0x7f00000016c0)=0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000001800)={r8, 0x400}, 0x8) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000001900)={0x6, 0x2}) perf_event_open(&(0x7f0000001640)={0x4, 0x70, 0x0, 0x5, 0x5, 0x2, 0x0, 0x9, 0x10, 0x8, 0x5, 0x9, 0xffff, 0xe3f, 0x49, 0x2, 0x6, 0x0, 0x3ff, 0x401, 0x5, 0x9f, 0x2, 0x1, 0x4, 0x1, 0x3ff, 0x0, 0x867, 0xda, 0x5, 0x1, 0x2, 0x6, 0x1, 0x1, 0x8000, 0xecef, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000001600), 0x2}, 0x2000, 0x7, 0x0, 0x7, 0x7, 0x8, 0x9}, r9, 0x8, r1, 0x1) 01:14:32 executing program 4: r0 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:32 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) rt_sigaction(0x3a, 0x0, &(0x7f00000003c0)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000400)) 01:14:32 executing program 1: syz_mount_image$xfs(&(0x7f0000000240)='xfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="73c46e69743d3078303030303d30303030d068e70e3030322400"]) 01:14:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:32 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) prctl$PR_SET_TSC(0x1a, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) [ 239.384335] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 01:14:32 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x400) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1b, 0x40000) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0xff) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000180)={0xa, 0x3, 0x20, 0x52cee268}, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x1}, r3}, 0x14) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) fallocate(r4, 0x0, 0x0, 0xcd54) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 239.457735] XFS (loop1): unknown mount option [sÄnit=0x0000=0000Đhç002$]. 01:14:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:32 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:32 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x103802) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000548000)=0x4001, 0x4) unshare(0x8000400) sendto$inet6(r2, &(0x7f0000000140), 0xfffffc58, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @dev}, 0x1c) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe8, r3, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x20}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1e}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe020}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff7}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'lc\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x20004055) recvmsg(r2, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) write$cgroup_type(r1, &(0x7f00000000c0)="74687265616465641e", 0xff4c) [ 239.598952] XFS (loop1): unknown mount option [sÄnit=0x0000=0000Đhç002$]. 01:14:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:32 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) dup2(r1, r2) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x2, 0x1c4) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000500)={0x596c, 0x9, 0xc, 0x0, 0x0, 0x9, 0x3, 0x6, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)=ANY=[@ANYBLOB="f20000008996fad53206ba9a1db0716e62a9b315250065e6425f788711d1b067a0e16be23354e3e4e80cb88242811a1b1ef38d696a547cce1deeac5635bbbdce9412bba94be3bec996eda749ac2d6029a178f76d11bded4734ae34498311bfbb386424f97fdbe3e1db49e286e51a8276ac3c27e05848cd3d026d2fa83b0d5884912b4781934ed800bf1e42ea4f679a83b3b6b57aa22cc43226dd1fadb0f86d2e78689def9515d4d48a0172a4ef5616355fac500848859ce506f4b02a32859e0bf9be4ea3e98433648503000000b67690da48307e85c596e8ca80181f873ad8bd5e6a87520b25b9adb275ea0ace8a25e2f2d93c21688d6f73"], 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x80, 0x5) write$UHID_INPUT(r5, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0xfffffffffffffd14}, 0x10a9) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') truncate(&(0x7f0000000280)='./bus\x00', 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000680)=0x7) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x1ad, 0x0, 0x0, 0x1a2, 0xffffffffffffff3d}) sendfile(r5, r5, &(0x7f00000000c0), 0x8080fffffffe) bind$vsock_stream(r3, 0x0, 0x452) r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, 0x0, r8) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000340)={0x3, [0x4b9b, 0x8, 0x3, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x40, 0x8, 0x3, 0x7, 0x9, 0x7fffffff, 0x2, 0x0, 0x4, 0x0, 0x5, 0x6, 0x800, 0x0, 0x3, 0x27f, 0x6, 0x4, 0x6, 0x2, 0x1000, 0x5638d315, 0xfff, 0x33c3cd3e, 0x101, 0x7, 0x0, 0x1e9, 0x20, 0x3f, 0x5, 0xf6, 0x10000, 0x8000000000, 0x40, 0x8, 0x9, 0xe7d, 0x653, 0xd01], 0x6}) connect$l2tp(r7, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x2, 0x3, 0x4, {0xa, 0x4e20, 0x1ff, @empty, 0x7}}}, 0x3a) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000006c0)=r6, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000440)=0x1d, 0x4) 01:14:32 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:32 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 239.722976] audit: type=1400 audit(1544404472.817:44): avc: denied { write } for pid=8038 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:14:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:32 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x0, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 239.823600] audit: type=1400 audit(1544404472.817:45): avc: denied { read } for pid=8038 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 01:14:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000080)={0x1ff, 0x6, 0x4, 0xf23540a46d5cc0fd, {}, {0x5, 0x1, 0x7, 0x100000000, 0x9, 0xfbc, "cbd5f767"}, 0x1, 0x0, @offset=0x7, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000001a562100f2ffffffffffffff70c236e8b03cf2aece3797f4bf14ce20", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x8000) [ 239.930269] audit: type=1804 audit(1544404473.007:46): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir026986041/syzkaller.45sXh4/10/file0/bus" dev="sda1" ino=16569 res=1 01:14:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x0, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:33 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 240.063501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22042 sclass=netlink_route_socket pig=8077 comm=syz-executor2 01:14:33 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) [ 240.613202] audit: type=1804 audit(1544404473.707:47): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor1" name="/root/syzkaller-testdir026986041/syzkaller.45sXh4/10/file0/bus" dev="sda1" ino=16569 res=1 [ 240.640951] audit: type=1804 audit(1544404473.707:48): pid=8112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir026986041/syzkaller.45sXh4/10/file0/bus" dev="sda1" ino=16569 res=1 01:14:33 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) dup2(r1, r2) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x2, 0x1c4) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000500)={0x596c, 0x9, 0xc, 0x0, 0x0, 0x9, 0x3, 0x6, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)=ANY=[@ANYBLOB="f20000008996fad53206ba9a1db0716e62a9b315250065e6425f788711d1b067a0e16be23354e3e4e80cb88242811a1b1ef38d696a547cce1deeac5635bbbdce9412bba94be3bec996eda749ac2d6029a178f76d11bded4734ae34498311bfbb386424f97fdbe3e1db49e286e51a8276ac3c27e05848cd3d026d2fa83b0d5884912b4781934ed800bf1e42ea4f679a83b3b6b57aa22cc43226dd1fadb0f86d2e78689def9515d4d48a0172a4ef5616355fac500848859ce506f4b02a32859e0bf9be4ea3e98433648503000000b67690da48307e85c596e8ca80181f873ad8bd5e6a87520b25b9adb275ea0ace8a25e2f2d93c21688d6f73"], 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x80, 0x5) write$UHID_INPUT(r5, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') truncate(&(0x7f0000000280)='./bus\x00', 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000680)=0x7) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x1ad, 0x0, 0x0, 0x1a2, 0xffffffffffffff3d}) sendfile(r5, r5, &(0x7f00000000c0), 0x8080fffffffe) bind$vsock_stream(r3, 0x0, 0x452) r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, 0x0, r8) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000340)={0x3, [0x4b9b, 0x8, 0x3, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x40, 0x8, 0x3, 0x7, 0x9, 0x7fffffff, 0x2, 0x0, 0x4, 0x0, 0x5, 0x6, 0x800, 0x0, 0x3, 0x27f, 0x6, 0x4, 0x6, 0x2, 0x1000, 0x5638d315, 0xfff, 0x33c3cd3e, 0x101, 0x7, 0x0, 0x1e9, 0x20, 0x3f, 0x5, 0xf6, 0x10000, 0x8000000000, 0x40, 0x8, 0x9, 0xe7d, 0x653, 0xd01], 0x6}) connect$l2tp(r7, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x2, 0x3, 0x4, {0xa, 0x4e20, 0x1ff, @empty, 0x7}}}, 0x3a) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000006c0)=r6, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000440)=0x1d, 0x4) 01:14:33 executing program 3: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 01:14:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0x0, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:33 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:33 executing program 2: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0xffffffffffffffff, 0x2) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x62b, 0x37}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 01:14:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:33 executing program 3: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @dev}, @icmp=@parameter_prob={0x5, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @dev}}}}}}, &(0x7f0000000000)) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:33 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:33 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0) dup2(r1, r2) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x2, 0x1c4) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000500)={0x596c, 0x9, 0xc, 0x0, 0x0, 0x9, 0x3, 0x6, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000540)=ANY=[@ANYBLOB="f20000008996fad53206ba9a1db0716e62a9b315250065e6425f788711d1b067a0e16be23354e3e4e80cb88242811a1b1ef38d696a547cce1deeac5635bbbdce9412bba94be3bec996eda749ac2d6029a178f76d11bded4734ae34498311bfbb386424f97fdbe3e1db49e286e51a8276ac3c27e05848cd3d026d2fa83b0d5884912b4781934ed800bf1e42ea4f679a83b3b6b57aa22cc43226dd1fadb0f86d2e78689def9515d4d48a0172a4ef5616355fac500848859ce506f4b02a32859e0bf9be4ea3e98433648503000000b67690da48307e85c596e8ca80181f873ad8bd5e6a87520b25b9adb275ea0ace8a25e2f2d93c21688d6f73"], 0x0) r7 = open(&(0x7f0000000200)='./bus\x00', 0x80, 0x5) write$UHID_INPUT(r5, &(0x7f0000000980)={0x8, "7c70ee3800d5ab5f2036f872e0ac57cbd592bca0d671633f50a3102066d6e765f5a64731e3fb8d90d250eda2cc33b60a7ff98074cdc3f1dd1a2df26a381d95974e0925d521c6b48c3dee0d430d398884316091aff6adb6153dc3c92549957d3488efc02d6f6fb172524b095c30c1bd35aae04236bdd42694d613eb54c0b65a338c48dc4c8bad70754fc81d9928e4a1b81f9c77075258a0805b4494867247966b24a023311fd91ef3754b98d3acde6f2ef0617f123c22fccb81c11389fdfa2e21c2365aabfc8916e02151d8643ae21cab7fcbec6142186d3bb57546c106484bc4c28a48da2b75dd82aabe99464558e60cd101f6b65856fabee614d271741a68dd550c8772f06a93cf8e5c0de549c3b75a72f8a590bd50b2af5f64009c969ed7596f0192b0f98b1afac0e8c5f4c653f611b4a71776400a9ae3f18e75f856788c97195749042510735880b9bb0ccb23210832a4f1c6f134d68f8e299837c426e0c9a45d5d2c959446cc363f370c67cd01a063c91254d692fe35abee92fabda4f66d93228c979ebe036c5c2e0028ec76562d67d0919ca28258fec0ed60603142b5c57c4cfb1ea1e892d0fd2f33970142b179c415d6bea344fbcc82d133052e848a885160737c69eb02ca9f544831c8e3ffcf40cb7b415d24795fc8aaeb8e76bec262aea5e28fe5d6495c4b5895a612b1cc2122286add66356f3ecd309f970634f1b09da1507964d35575167317f13c7fd9f11af27ceea86e9a5b3494a27ba98ba38dd1fb72ef2c6163664fd8f7c946935cd4833121f505ff277c03d959d9a12f3389e9eb6701a8b29f72c20c6abb7bd8349dd2e120bdd59dca9f1a2a877f1677b59d7920ddf29b9d94f7c6879b78e31cf1b65b60fe349ef9d4976f46609ee34e33f647aafbf64f6323d18598905f2e73af75661397595b8f9c1e9a4e993946820da5378ca5b363560e95edce316e99bac6e6250efcf1cb58fdcf94c7557c2d7f763a688543462d54b64e178c2e64c6ebba356894973051907fd8de8ba908e822168b171c1707efcd9ac827e64313721876e2ff26ac34e88557a4a0dfde08eda81cf0c1465a89b68429e48966044c767563e1121db48c9b619fd7362afd15ec6aa19b28759d7977be4fbcad0cf8dd5dc5362259bd5cb5089a9d18db969afe1192571f5fcc0c4d6be281d23b9c1f9f32873c058adfa1bf57a3718686957edfd6e4b58aa959541127696d59fb2810d042ced227961eb19a424e4cf45bc6243217bb7561b7ee11f8c0b8f39480343a26f2da5fe79d5e213c01ea47155ffa91e7d7ba0bc8ccb018bd69cfe71dd8565a645d678b404a295397e83ae69dbf8505f6947a836b44823a92861124330fccd4bc4a2e20d9047bd919d82c89623caa87eb09bd584d58f42b35ef55fddc06dfb3957f3f507e5ca9b8b98947cc5bb68846755527ddf32ffa444e1c7a5654d4d377e04a9f22e1069804fdcdb251acb6bd6b32d100feb44286991d779d2b3e2b7f5cc5f8eb3ae166a3b6fb9df11e1867989a6f9b2028e4c73b4d418b51f6e870713cadafddb47a48c9a97283da214f02db3326d42438d9a7db580693ad1887f99d86bb5fafd6d07c2647fc80c2c5a1ed9ea3b95be65ca422080ddefca5b49ccd538f6bc67390f892d9e416f7e835f76dd90edc56256348d20560caeea05c0922cab60dbf0b57ddaaed6ded5a336e01485fd571dc12050461271cee347c31ac245bfee9128630dfcc43b6d88b5ba9937a6f6ab70b7d256784ff72297cfcfd0ffacd09b55fb832bf60f04d87c48c74972b9f18fa178ce4880b025d1c1097ddb929e8f7e02f1c0e03012bec0fa61a49eb1c2a50a45fc0d98b6649de325184006938e421321e8b366649d9b6ebadf77509c9d48844e80f7752fd7daaa5c938b946feaaac0d871203270a747035c7e2f697c84e792a55cbce76c0a25360f7acbeaab60627aa9c37064af75b67f46732844eb2f6b37226004afe451a9fbfbbcf7e72ade67b017e9209b5627fbe16789abd90326751a1fd1d93efc59f2650f979ba71938d784064922bee2874c4b76d5f26e39ea0a98cf175950137feff9456c88c6a295830183fae3a9c2312c25f3d81708d73488d15a587e7e7cdde3b77917eef29c8b5965c916a65c3c5a53b7313c3115d0a8bb4e16f6b80ff6f78adb756aba94ced86047562a2cd2fb25e9a4656f6359c3f2fde8b5ab38852853cbd7221cb4d59b7f0e79bd37f9ade073f62b75edbe63c13c0d02bf076d88f5b750ea640aad47ce97d6a0783398dd3fbb63734ed969470cf45200235650532224fc28caf1e36ca6b402ec4c978add40fc59f2113485875682139f8aa9aeb48d09178de919370b0cd0ebcab5e60e1b0a2fc153db0dae8e50b48561622a677d0f1afc149676f832e016e14007fb298dcb96f11a92a1ac8bd4cc7b34d659d6cd2c9817b586585e72080255b083bc84512277ffb7f561c6a7a08cd128bfe9b525da531f0bf04f11d3de102b3538835807ac0b2f4325fc6765d02d692ec82f5b338c8257029136fcd3427c09874ecc7492becdd6608eac4adf1abc3f7e08868a72e57ce4dcfc288a25af73d19f1118a9254963c1548cdca5fc7c921a7f218f8e71edd7969dfb35beae1091d7530e32236397fa9fcd232b441ff1b0177829468c198d659d247ccca4fbd58c625501e4368075d0e5e69a6f90952f5bbe48e85a303131dedf7f1a513b291598a545784e1013521877c25d6069d3a855652a4bad5b2df2e4da2de756a20e790b756dd2925ce824561e5892b5e064c7c7b996acc4e29597e0cd00956e9c57ec374714f846be7632d3075e38bead499163498810886c78a2cc73fb64fd48e186083ce911e0751b4dc63476859c2824fa532a4b1711c244619e702eeab19380aeb7b17f67fade3dcad8ddddd893a526cd5d04d8ae982c88029ec71bdd0772fd74adbdb378fc204ca411a2d8a50331516a28552be78f9725f32d1b3a6c7bdf3277c5f7e385c7ebbacc419ec7ca3c5b8f46dbefee59b6422a6b22d60527edc012f852077d925619874f7709f283e01678fed36528003a696ee431a817f34f453c143dc56b70e1f810a5380a555cc8c4fc6522ab544ce5d715caa302ebdd0aa8286b7ef5dd6dd48a8ad9566818f7509daf02db0b98b432f57f1d107ee95a86228728cab4062e27922381e1e2ee351af5e2ea0fd6d1cea70b3b8f4a50f0776fc9aa2a7d2dff6e1ea3769864104f09137b99960b69af13895d842649eacaed8ddf183beba3323640af8deb52b902c0974d685d19fc87c93eb80ad5d28e54363705ad39231d989522e94f000256bc8d93af138a45d67dad3e21fa9fb31d9327c6e71f61956d9daf4f97333112704136d3d1bf6fe0e4c002e10b684d2344300ec70fae0b50532ebace58f0e8318354a172cceacf27d01ff41cc8fef42443f62b0e15b5fcc0728630b96fb2c2b59634f4993bb1ce2eace6fb0f53e5f84bc5f58b1b66d59e3c75a98670496f105a703607211aa9e882e72f13e9fe07f0767ad4e5ac5c732b65301d8ceab36b5ff2f71958fb1b51d2e703ac506e68d4026160fd3f60440b8b8f554f1feeba5d53f71cbe60d143620f8fa779acb94c965b729207a5ab11f4a51b694c31606171da44a28d80cde296dff5724ff718d6377eb8534e616cff39af943ee4ce87b4fadded30c702d370a71072ab3e20f19b8c1b73fdbbb9c675352bb73ee85e22597fc0c439a33f5febe1629bd084af7193f8d1a1415b02ca54706711505cbae11ec6411b012cc3a3eddcfb002901b6e7565b9fbf4d605c147031888ceb590c14697d00970ce9095c6f7fee41ec6a15d7ef52dfedfff2a0d3dbb387b61232aee6ca202787038021e6aabda18e2adf6fd89aa491e65f9813d73412fbfff089752d713d7efa690ec4fc254b56908d3057f65997acf81aea589e272f8fa852849e488f1e0c0cb6cdb5f46ca92e36d39224e704850056d2e9b91909aed0f55d054e274415ecc39b8958335a14cfb0a42d7f26ef8e82592dfd03b3550b5193fba077994c682951968869574fd94976760d9bd9b334353eeda836cc8dab244e72095cc46833f02bb2f6df35601b3085664261abb67fc9ab9f27210e6827cd15ce16c55f0f7f5b8ab401f24032b19a53a9299b62ebf4a8cf7f4753d95126f008a8ce349036666de66bcaf40b27fa875efa98873e1ef9302e2a24bfe07bd1054bdf9ba9ad1b1075402f26d682833b947c762513ba5f07537bb712473184a60e04ace5adb8d982d6153b011ae0b2034adc0ff4a64e2c6561c2e0840cdab2120bc916cde9b7a92c4d332d0f83945fe55e3c8f4d93f22e7759c20241d92cca0ae5a3d06a127e5614df708cea1ad3b2f231c81460ff4c3f349c67a87135a4b67589ffce311832923f71796276e81f0537e265404c0ee06d5ed98a5ec5f8ad62db589eb585fc4627173b51fd4e897a3e8d2acbb82ec2996ac3a6823368a1e12a0536a9d1a7b2d31d80c46c292ff51395481d4f65c53fab867e27bec9156ee189d245d94877a1405dc9e1e996822ad47071a9ab36c9bfd02c41ea5ba21591793053b1b64758bae0addfcd69d169849bc1ee6ce5c08f0d3da5ecc1b6ab31e13af2fa5ce4d921163270901264a88ac6350e8fb6371663dd04146932238597258b123a8036250c190fbb3cfc6ebbf9e06c4a9053e8332c95c91a890a3d35ddd35f47e7ab606f3e345e12560e6d52243883da7b8910834042ad12e7fb3f08a0b14ef6aee22251999e6079be2ef5666d7d5ae00d161720262761da3f378c63cb151f4e94d034e9de949dfe796b905804ca555691023c30ea7cf0cb276e1e3ba65793291f8287d1064606bf5787421b9b9bfc05e9c5eac750de92519fe9e2592cd34a2ef6ec18efed5e7c13bfcfce47327cbecac358bbe6d44164849308cf91cd5ea87fa4b02ba4939e28141c7dad42714b019470d91808a8f46150677b6c90f267ecb39ef42afc95de0cbd016775c89d8213ec9d4e061e6493f237296f91abfc64176c0e885ef54af4136a724fadfe89a25d7599998acebc4a27f8fb5b26936bda5c3d5fec3373dcd9a0e99fc939641c50669adc54119582e8835575d1c57fa955cd29d870360620f91c3ff90d264013816352317ae226f7d7bad5db711f8973382f6cebd63cd519ddd08e1772649be75f64f4acc15f828dc0b305584b6dd2213194603c44e2964358d305aa97fb08568a0a955ad7a6f8d042754b4bbf2fb3414052719fd9841bef8360d1d3195c69414be882115c2c64fecdcbdaed3a2e943fdfef9a13520e41d32a787bcfe4f61e2b378d35aa70784a772cf8ebcaaeb105e4627516db2ababfcb8c11f224c3a48c86160d34d0ee59f02c31648ae4b0309b378f0bf63266967dcfb4f1cc1902f613c6d0d48915a9cf28a52b106544cde1b38ff2e2a1275fd0d3899ce7f7c6653c9017f7ac4aaa35bcb2811a8f9dbb56746b45475350e7c13d42abb5692377da7a4045ee644ce00f8699e3251d75621c82cd659ea3add277affe3ff792f7d24a3d0979ef82cfc0d409697ae2e8598854a8327f46974c901d309dc6dbe31913c59d821aa50c0fe95cc822e8f07bbb00e9a09bc9a570b9778d29308740bc336a41258d209c206f87a709aa43415da0096f7d177e509a7d625645fb098ccc45367d82235e952670ac5f82f8ced3f59fd9ee20ac75be609cc832417e807ddc40630cba4c91e0785edcb5f20b9e6dedb1ec172cd16fc034f410e9ce375ea855144aa3076317f649cf4efe4d7abf244984c4e", 0xfffffffffffffd14}, 0x10a9) syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') truncate(&(0x7f0000000280)='./bus\x00', 0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r5, 0x40044591, &(0x7f0000000680)=0x7) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000140)={0x7, 0x1ad, 0x0, 0x0, 0x1a2, 0xffffffffffffff3d}) sendfile(r5, r5, &(0x7f00000000c0), 0x8080fffffffe) bind$vsock_stream(r3, 0x0, 0x452) r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_persistent(0x16, 0x0, r8) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000340)={0x3, [0x4b9b, 0x8, 0x3, 0x0, 0x10000, 0x7, 0x0, 0x0, 0x40, 0x8, 0x3, 0x7, 0x9, 0x7fffffff, 0x2, 0x0, 0x4, 0x0, 0x5, 0x6, 0x800, 0x0, 0x3, 0x27f, 0x6, 0x4, 0x6, 0x2, 0x1000, 0x5638d315, 0xfff, 0x33c3cd3e, 0x101, 0x7, 0x0, 0x1e9, 0x20, 0x3f, 0x5, 0xf6, 0x10000, 0x8000000000, 0x40, 0x8, 0x9, 0xe7d, 0x653, 0xd01], 0x6}) connect$l2tp(r7, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x2, 0x3, 0x4, {0xa, 0x4e20, 0x1ff, @empty, 0x7}}}, 0x3a) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000006c0)=r6, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000440)=0x1d, 0x4) 01:14:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:34 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 241.012891] audit: type=1804 audit(1544404474.107:49): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir026986041/syzkaller.45sXh4/11/file0/bus" dev="loop1" ino=3 res=1 [ 241.161612] audit: type=1804 audit(1544404474.167:50): pid=8151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir500071446/syzkaller.MP9r4m/10/bus" dev="sda1" ino=16536 res=1 [ 241.164105] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000900) [ 241.201474] FAT-fs (loop1): Filesystem has been set read-only [ 241.214132] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 01:14:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10, r0, 0x0) 01:14:34 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x985, 0x12000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:34 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 01:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:34 executing program 2 (fault-call:2 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r1) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:34 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:34 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10, r0, 0x0) 01:14:34 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 241.913702] FAULT_INJECTION: forcing a failure. [ 241.913702] name failslab, interval 1, probability 0, space 0, times 1 [ 241.978904] CPU: 0 PID: 8223 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #149 [ 241.986244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.995609] Call Trace: [ 241.998339] dump_stack+0x244/0x39d [ 242.001994] ? dump_stack_print_info.cold.1+0x20/0x20 [ 242.007252] should_fail.cold.4+0xa/0x17 [ 242.011343] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.016556] ? __lock_acquire+0x62f/0x4c20 [ 242.020878] ? kasan_check_read+0x11/0x20 [ 242.025044] ? graph_lock+0x9c/0x270 01:14:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:35 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000580)=@assoc_value={r1, 0x47908351}, &(0x7f00000005c0)=0x8) r2 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e27, 0x0, @loopback, 0xec8e}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000)=0x3ff, 0x4) listen(r2, 0x2) ioctl$LOOP_CLR_FD(r0, 0x4c01) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$netlink(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f00000001c0), 0x0, &(0x7f0000000200), 0x0, 0x4890}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x2a4}, [0xf401000000000000, 0x300000003000000, 0xffffffff00000000, 0x300000000000000, 0x4000000]}}, 0x0, 0x1f, 0x0, 0x0, 0xd}, 0x98) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) write$FUSE_ENTRY(r5, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x3, 0x2, 0x0, 0x2, 0x18c, 0x401, {0x1, 0x20, 0x5, 0xffff, 0x0, 0x100000001, 0x0, 0x0, 0x2470, 0x5, 0x0, 0x0, 0x0, 0x3, 0x400}}}, 0x90) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000700)) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x7}, &(0x7f0000000680)=0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) [ 242.028785] ? zap_class+0x640/0x640 [ 242.032515] ? print_usage_bug+0xc0/0xc0 [ 242.036593] ? find_held_lock+0x36/0x1c0 [ 242.040673] ? __lock_is_held+0xb5/0x140 [ 242.044794] ? perf_trace_sched_process_exec+0x860/0x860 [ 242.050261] __should_failslab+0x124/0x180 [ 242.054543] should_failslab+0x9/0x14 [ 242.058356] kmem_cache_alloc+0x2be/0x730 [ 242.062500] ? __lock_acquire+0x62f/0x4c20 [ 242.066750] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.072300] ? may_expand_vm+0x1e3/0x810 [ 242.076406] vm_area_dup+0x7a/0x230 [ 242.080036] ? vm_area_alloc+0x1d0/0x1d0 [ 242.084098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.089628] __split_vma+0xae/0x570 [ 242.093253] ? find_vma+0x34/0x190 [ 242.096799] __do_munmap+0x314/0xf80 [ 242.100550] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 242.105826] mmap_region+0x6a7/0x1cd0 [ 242.109631] ? __x64_sys_brk+0x8b0/0x8b0 [ 242.113721] ? selinux_task_getsecid+0x1f9/0x3a0 [ 242.118475] ? lock_downgrade+0x900/0x900 [ 242.122677] ? check_preemption_disabled+0x48/0x280 [ 242.127716] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 242.132646] ? kasan_check_read+0x11/0x20 [ 242.136846] ? mpx_unmapped_area_check+0xd8/0x108 [ 242.141722] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 242.147186] ? arch_get_unmapped_area+0x750/0x750 [ 242.152056] ? lock_acquire+0x1ed/0x520 [ 242.156030] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.161559] ? selinux_mmap_addr+0x2d/0x110 [ 242.165879] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.171467] ? security_mmap_addr+0x80/0xa0 [ 242.175803] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.181341] ? get_unmapped_area+0x292/0x3b0 [ 242.185758] do_mmap+0xa22/0x1230 [ 242.189202] ? mmap_region+0x1cd0/0x1cd0 [ 242.193284] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 242.197375] ? down_read_killable+0x150/0x150 [ 242.201883] ? security_mmap_file+0x174/0x1b0 [ 242.206371] vm_mmap_pgoff+0x213/0x2c0 [ 242.210255] ? vma_is_stack_for_current+0xd0/0xd0 [ 242.215096] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.220802] ? check_preemption_disabled+0x48/0x280 [ 242.225849] ksys_mmap_pgoff+0x4da/0x660 [ 242.229976] ? do_syscall_64+0x9a/0x820 [ 242.233947] ? find_mergeable_anon_vma+0xd0/0xd0 [ 242.238725] ? trace_hardirqs_on+0xbd/0x310 [ 242.243084] ? __ia32_sys_read+0xb0/0xb0 [ 242.247140] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.252502] ? trace_hardirqs_off_caller+0x310/0x310 [ 242.257613] __x64_sys_mmap+0xe9/0x1b0 [ 242.261494] do_syscall_64+0x1b9/0x820 [ 242.265371] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 242.270733] ? syscall_return_slowpath+0x5e0/0x5e0 [ 242.275652] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.280485] ? trace_hardirqs_on_caller+0x310/0x310 [ 242.285492] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 242.290494] ? prepare_exit_to_usermode+0x291/0x3b0 [ 242.295518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.300361] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.305543] RIP: 0033:0x457659 [ 242.308737] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:14:35 executing program 1: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 01:14:35 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) [ 242.327631] RSP: 002b:00007ff66f2bbc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 242.335335] RAX: ffffffffffffffda RBX: 00007ff66f2bbc90 RCX: 0000000000457659 [ 242.342591] RDX: fffffffffffffffd RSI: 0000000000002000 RDI: 0000000020ffe000 [ 242.349849] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 242.357105] R10: 0000000000000011 R11: 0000000000000246 R12: 00007ff66f2bc6d4 [ 242.364362] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 01:14:35 executing program 2 (fault-call:2 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:35 executing program 1: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 01:14:35 executing program 3 (fault-call:2 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 242.519772] FAULT_INJECTION: forcing a failure. [ 242.519772] name failslab, interval 1, probability 0, space 0, times 0 [ 242.595287] CPU: 1 PID: 8246 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #149 [ 242.602631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.611992] Call Trace: [ 242.614600] dump_stack+0x244/0x39d [ 242.618254] ? dump_stack_print_info.cold.1+0x20/0x20 [ 242.623481] should_fail.cold.4+0xa/0x17 [ 242.627558] ? ima_get_action+0x7e/0xa0 [ 242.627749] audit: type=1400 audit(1544404475.687:51): avc: denied { create } for pid=8255 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 242.631544] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.631615] ? __lock_acquire+0x62f/0x4c20 [ 242.657057] FAULT_INJECTION: forcing a failure. [ 242.657057] name failslab, interval 1, probability 0, space 0, times 0 [ 242.660692] ? zap_class+0x640/0x640 [ 242.660713] ? zap_class+0x640/0x640 [ 242.660733] ? print_usage_bug+0xc0/0xc0 [ 242.687628] ? find_held_lock+0x36/0x1c0 [ 242.691710] ? __lock_is_held+0xb5/0x140 [ 242.691743] ? perf_trace_sched_process_exec+0x860/0x860 [ 242.691762] ? print_usage_bug+0xc0/0xc0 [ 242.691784] __should_failslab+0x124/0x180 [ 242.691803] should_failslab+0x9/0x14 [ 242.691817] kmem_cache_alloc+0x2be/0x730 [ 242.691836] ? __lock_acquire+0x62f/0x4c20 [ 242.691851] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.691862] ? may_expand_vm+0x1e3/0x810 [ 242.691879] vm_area_dup+0x7a/0x230 [ 242.691891] ? vm_area_alloc+0x1d0/0x1d0 [ 242.709872] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.709898] __split_vma+0xae/0x570 [ 242.709917] ? find_vma+0x34/0x190 [ 242.752045] __do_munmap+0x314/0xf80 [ 242.755789] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 242.757288] audit: type=1400 audit(1544404475.687:52): avc: denied { bind } for pid=8255 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 242.761090] mmap_region+0x6a7/0x1cd0 [ 242.761118] ? __x64_sys_brk+0x8b0/0x8b0 [ 242.761141] ? selinux_task_getsecid+0x1f9/0x3a0 [ 242.797610] ? lock_downgrade+0x900/0x900 [ 242.801782] ? check_preemption_disabled+0x48/0x280 [ 242.806812] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 242.811765] ? kasan_check_read+0x11/0x20 [ 242.815930] ? mpx_unmapped_area_check+0xd8/0x108 [ 242.820791] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 242.826285] ? arch_get_unmapped_area+0x750/0x750 [ 242.831138] ? lock_acquire+0x1ed/0x520 [ 242.835127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.840682] ? selinux_mmap_addr+0x2d/0x110 [ 242.845025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.850577] ? security_mmap_addr+0x80/0xa0 [ 242.854919] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.860476] ? get_unmapped_area+0x292/0x3b0 [ 242.864907] do_mmap+0xa22/0x1230 [ 242.868377] ? mmap_region+0x1cd0/0x1cd0 [ 242.872448] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 242.876531] ? down_read_killable+0x150/0x150 [ 242.881752] ? security_mmap_file+0x174/0x1b0 [ 242.886266] vm_mmap_pgoff+0x213/0x2c0 [ 242.890183] ? vma_is_stack_for_current+0xd0/0xd0 [ 242.895038] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.900599] ? check_preemption_disabled+0x48/0x280 [ 242.905649] ksys_mmap_pgoff+0x4da/0x660 [ 242.905674] ? do_syscall_64+0x9a/0x820 [ 242.905694] ? find_mergeable_anon_vma+0xd0/0xd0 [ 242.918575] ? trace_hardirqs_on+0xbd/0x310 [ 242.918592] ? __ia32_sys_read+0xb0/0xb0 [ 242.918610] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.918627] ? trace_hardirqs_off_caller+0x310/0x310 [ 242.918649] __x64_sys_mmap+0xe9/0x1b0 [ 242.941350] do_syscall_64+0x1b9/0x820 [ 242.945257] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 242.950651] ? syscall_return_slowpath+0x5e0/0x5e0 [ 242.955631] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.960501] ? trace_hardirqs_on_caller+0x310/0x310 [ 242.965534] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 242.970560] ? prepare_exit_to_usermode+0x291/0x3b0 [ 242.975594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.980454] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.985649] RIP: 0033:0x457659 [ 242.988869] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.007788] RSP: 002b:00007f1df235dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 243.015508] RAX: ffffffffffffffda RBX: 00007f1df235dc90 RCX: 0000000000457659 [ 243.022793] RDX: fffffffffffffffd RSI: 0000000000002000 RDI: 0000000020ffe000 [ 243.030080] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 243.037353] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f1df235e6d4 01:14:35 executing program 1: mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 243.044639] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 [ 243.051937] CPU: 0 PID: 8258 Comm: syz-executor2 Not tainted 4.20.0-rc5+ #149 [ 243.059231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.068588] Call Trace: [ 243.071194] dump_stack+0x244/0x39d [ 243.074846] ? dump_stack_print_info.cold.1+0x20/0x20 [ 243.080167] ? is_bpf_text_address+0xd3/0x170 [ 243.084692] should_fail.cold.4+0xa/0x17 [ 243.088773] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.093905] ? save_stack+0xa9/0xd0 01:14:36 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:36 executing program 1: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:36 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x0, @remote}}) sendfile(r1, r0, &(0x7f0000000480), 0x2000005) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) getpgid(0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000180)) flock(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000440)=""/42, 0x2a}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000580)=""/11, 0xb}], 0x2}, 0xffffffffffffffc0}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/226, 0xe2}, {&(0x7f0000001a40)=""/84, 0x54}, {0x0}, {0x0}, {&(0x7f0000002c80)=""/63, 0x3f}, {0x0}], 0x7}, 0x7f}, {{0x0, 0x0, &(0x7f0000004280)=[{0x0}, {&(0x7f0000002f80)=""/74, 0x4a}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000004300)=""/177, 0xb1}, 0xff}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000043c0)=""/248, 0xf8}, {&(0x7f00000044c0)=""/52, 0x34}, {&(0x7f0000004500)=""/158, 0x9e}], 0x3, &(0x7f0000004600)=""/230, 0xe6}, 0x200}, {{&(0x7f0000004700)=@sco, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004780)=""/225, 0xe1}, {&(0x7f0000004880)=""/119, 0x77}, {&(0x7f0000004900)=""/192, 0xc0}, {&(0x7f00000049c0)=""/164, 0xa4}], 0x4}, 0x400}, {{&(0x7f0000004e40)=@hci, 0x80, &(0x7f0000004fc0)=[{0x0}], 0x1, &(0x7f0000005000)=""/139, 0x8b}, 0xc3}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000005140)=""/78, 0x4e}, {0x0}, {&(0x7f0000005300)=""/159, 0x9f}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/234, 0xea}, {0x0}, {&(0x7f0000006500)=""/246, 0xf6}], 0x7}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007780)=""/207, 0xcf}, 0xc3}], 0x9, 0x40000000, 0x0) [ 243.097545] ? save_stack+0x43/0xd0 [ 243.101181] ? kasan_kmalloc+0xc7/0xe0 [ 243.105086] ? kasan_slab_alloc+0x12/0x20 [ 243.109246] ? kmem_cache_alloc+0x12e/0x730 [ 243.113578] ? vm_area_dup+0x7a/0x230 [ 243.117393] ? __split_vma+0xae/0x570 [ 243.121206] ? __do_munmap+0x314/0xf80 [ 243.125116] ? mmap_region+0x6a7/0x1cd0 [ 243.129107] ? do_mmap+0xa22/0x1230 [ 243.132747] ? vm_mmap_pgoff+0x213/0x2c0 [ 243.136822] ? ksys_mmap_pgoff+0x4da/0x660 [ 243.141078] ? __x64_sys_mmap+0xe9/0x1b0 01:14:36 executing program 1: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 243.145149] ? do_syscall_64+0x1b9/0x820 [ 243.149219] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.154701] ? percpu_ref_put_many+0x11c/0x260 [ 243.159304] ? lock_downgrade+0x900/0x900 [ 243.163477] ? check_preemption_disabled+0x48/0x280 [ 243.168520] ? kasan_check_read+0x11/0x20 [ 243.172684] ? zap_class+0x640/0x640 [ 243.176412] ? rcu_softirq_qs+0x20/0x20 [ 243.180402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.185957] ? check_preemption_disabled+0x48/0x280 [ 243.190996] __should_failslab+0x124/0x180 [ 243.195245] should_failslab+0x9/0x14 [ 243.199063] kmem_cache_alloc+0x47/0x730 [ 243.203225] ? rcu_read_lock_sched_held+0x14f/0x180 [ 243.208265] anon_vma_clone+0x140/0x710 [ 243.212446] ? unlink_anon_vmas+0xa60/0xa60 [ 243.216785] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.222350] __split_vma+0x183/0x570 [ 243.226092] ? find_vma+0x34/0x190 [ 243.229655] __do_munmap+0x314/0xf80 [ 243.233383] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 243.238687] mmap_region+0x6a7/0x1cd0 [ 243.242511] ? __x64_sys_brk+0x8b0/0x8b0 [ 243.246609] ? selinux_task_getsecid+0x1f9/0x3a0 [ 243.251381] ? lock_downgrade+0x900/0x900 [ 243.255538] ? check_preemption_disabled+0x48/0x280 [ 243.260578] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 243.265531] ? kasan_check_read+0x11/0x20 [ 243.269693] ? mpx_unmapped_area_check+0xd8/0x108 [ 243.274555] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 243.280027] ? arch_get_unmapped_area+0x750/0x750 [ 243.284885] ? lock_acquire+0x1ed/0x520 [ 243.288882] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.294436] ? selinux_mmap_addr+0x2d/0x110 [ 243.298776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.304326] ? security_mmap_addr+0x80/0xa0 [ 243.308671] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.314221] ? get_unmapped_area+0x292/0x3b0 [ 243.318648] do_mmap+0xa22/0x1230 [ 243.322124] ? mmap_region+0x1cd0/0x1cd0 [ 243.326198] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 243.330272] ? down_read_killable+0x150/0x150 [ 243.334791] ? security_mmap_file+0x174/0x1b0 [ 243.339304] vm_mmap_pgoff+0x213/0x2c0 [ 243.343326] ? vma_is_stack_for_current+0xd0/0xd0 [ 243.348191] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.353743] ? check_preemption_disabled+0x48/0x280 [ 243.358790] ksys_mmap_pgoff+0x4da/0x660 [ 243.362867] ? do_syscall_64+0x9a/0x820 [ 243.366858] ? find_mergeable_anon_vma+0xd0/0xd0 [ 243.371629] ? trace_hardirqs_on+0xbd/0x310 [ 243.375959] ? __ia32_sys_read+0xb0/0xb0 [ 243.380035] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.385425] ? trace_hardirqs_off_caller+0x310/0x310 [ 243.390552] __x64_sys_mmap+0xe9/0x1b0 [ 243.394460] do_syscall_64+0x1b9/0x820 [ 243.398366] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 243.403743] ? syscall_return_slowpath+0x5e0/0x5e0 [ 243.408690] ? trace_hardirqs_on_caller+0x310/0x310 [ 243.413726] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 243.418818] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 243.425503] ? __switch_to_asm+0x40/0x70 [ 243.429576] ? __switch_to_asm+0x34/0x70 [ 243.433659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.438525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.443719] RIP: 0033:0x457659 [ 243.446923] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.465832] RSP: 002b:00007ff66f29ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 243.473555] RAX: ffffffffffffffda RBX: 00007ff66f29ac90 RCX: 0000000000457659 [ 243.480828] RDX: fffffffffffffffd RSI: 0000000000002000 RDI: 0000000020ffe000 [ 243.488104] RBP: 000000000072bfa0 R08: 0000000000000003 R09: 0000000000000000 01:14:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:36 executing program 1: r0 = syz_open_dev$swradio(0x0, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:36 executing program 3 (fault-call:2 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:36 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 243.495379] R10: 0000000000000011 R11: 0000000000000246 R12: 00007ff66f29b6d4 [ 243.502661] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 01:14:36 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 243.623471] FAULT_INJECTION: forcing a failure. [ 243.623471] name failslab, interval 1, probability 0, space 0, times 0 [ 243.721460] CPU: 0 PID: 8289 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #149 [ 243.728797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.738161] Call Trace: [ 243.740777] dump_stack+0x244/0x39d [ 243.744433] ? dump_stack_print_info.cold.1+0x20/0x20 [ 243.749646] ? is_bpf_text_address+0xd3/0x170 [ 243.754173] should_fail.cold.4+0xa/0x17 [ 243.758258] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.763389] ? save_stack+0xa9/0xd0 [ 243.767035] ? save_stack+0x43/0xd0 [ 243.770687] ? kasan_kmalloc+0xc7/0xe0 [ 243.774588] ? kasan_slab_alloc+0x12/0x20 [ 243.778748] ? kmem_cache_alloc+0x12e/0x730 [ 243.783093] ? vm_area_dup+0x7a/0x230 [ 243.786910] ? __split_vma+0xae/0x570 [ 243.790724] ? __do_munmap+0x314/0xf80 [ 243.794623] ? mmap_region+0x6a7/0x1cd0 [ 243.798608] ? do_mmap+0xa22/0x1230 [ 243.802255] ? vm_mmap_pgoff+0x213/0x2c0 [ 243.806343] ? ksys_mmap_pgoff+0x4da/0x660 [ 243.810592] ? __x64_sys_mmap+0xe9/0x1b0 [ 243.814666] ? do_syscall_64+0x1b9/0x820 01:14:36 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 243.818741] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.824121] ? percpu_ref_put_many+0x11c/0x260 [ 243.828723] ? lock_downgrade+0x900/0x900 [ 243.832885] ? check_preemption_disabled+0x48/0x280 [ 243.837928] ? kasan_check_read+0x11/0x20 [ 243.842099] ? zap_class+0x640/0x640 [ 243.845832] ? rcu_softirq_qs+0x20/0x20 [ 243.849828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.855379] ? check_preemption_disabled+0x48/0x280 [ 243.860419] __should_failslab+0x124/0x180 [ 243.864677] should_failslab+0x9/0x14 [ 243.868492] kmem_cache_alloc+0x47/0x730 [ 243.872567] ? rcu_read_lock_sched_held+0x14f/0x180 [ 243.877606] anon_vma_clone+0x140/0x710 [ 243.881605] ? unlink_anon_vmas+0xa60/0xa60 [ 243.885941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.891501] __split_vma+0x183/0x570 [ 243.895229] ? find_vma+0x34/0x190 [ 243.898788] __do_munmap+0x314/0xf80 [ 243.902515] ? ima_add_template_entry.cold.4+0x3c/0x3c [ 243.907813] mmap_region+0x6a7/0x1cd0 [ 243.911642] ? __x64_sys_brk+0x8b0/0x8b0 [ 243.915722] ? selinux_task_getsecid+0x1f9/0x3a0 01:14:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x201e, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 243.920495] ? lock_downgrade+0x900/0x900 [ 243.924656] ? check_preemption_disabled+0x48/0x280 [ 243.929693] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 243.934648] ? kasan_check_read+0x11/0x20 [ 243.938820] ? mpx_unmapped_area_check+0xd8/0x108 [ 243.943681] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 243.949157] ? arch_get_unmapped_area+0x750/0x750 [ 243.954018] ? lock_acquire+0x1ed/0x520 [ 243.958011] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.963564] ? selinux_mmap_addr+0x2d/0x110 [ 243.967901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.973450] ? security_mmap_addr+0x80/0xa0 [ 243.977780] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.977800] ? get_unmapped_area+0x292/0x3b0 [ 243.977819] do_mmap+0xa22/0x1230 [ 243.977841] ? mmap_region+0x1cd0/0x1cd0 [ 243.977862] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 243.999364] ? down_read_killable+0x150/0x150 [ 244.003884] ? security_mmap_file+0x174/0x1b0 [ 244.008400] vm_mmap_pgoff+0x213/0x2c0 [ 244.012317] ? vma_is_stack_for_current+0xd0/0xd0 [ 244.017183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.022736] ? check_preemption_disabled+0x48/0x280 [ 244.027786] ksys_mmap_pgoff+0x4da/0x660 [ 244.031862] ? do_syscall_64+0x9a/0x820 [ 244.035860] ? find_mergeable_anon_vma+0xd0/0xd0 [ 244.040638] ? trace_hardirqs_on+0xbd/0x310 [ 244.044975] ? __ia32_sys_read+0xb0/0xb0 [ 244.049052] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.054440] ? trace_hardirqs_off_caller+0x310/0x310 [ 244.059567] __x64_sys_mmap+0xe9/0x1b0 [ 244.063475] do_syscall_64+0x1b9/0x820 [ 244.067374] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 01:14:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 244.072746] ? syscall_return_slowpath+0x5e0/0x5e0 [ 244.077684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.082542] ? trace_hardirqs_on_caller+0x310/0x310 [ 244.087570] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 244.092601] ? prepare_exit_to_usermode+0x291/0x3b0 [ 244.097636] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.102508] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.107709] RIP: 0033:0x457659 [ 244.110916] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.129827] RSP: 002b:00007f1df235dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 244.137545] RAX: ffffffffffffffda RBX: 00007f1df235dc90 RCX: 0000000000457659 [ 244.144819] RDX: fffffffffffffffd RSI: 0000000000002000 RDI: 0000000020ffe000 [ 244.152105] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 244.159382] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f1df235e6d4 01:14:37 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x0, @remote}}) sendfile(r1, r0, &(0x7f0000000480), 0x2000005) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) getpgid(0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000180)) flock(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000440)=""/42, 0x2a}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000580)=""/11, 0xb}], 0x2}, 0xffffffffffffffc0}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/226, 0xe2}, {&(0x7f0000001a40)=""/84, 0x54}, {0x0}, {0x0}, {&(0x7f0000002c80)=""/63, 0x3f}, {0x0}], 0x7}, 0x7f}, {{0x0, 0x0, &(0x7f0000004280)=[{0x0}, {&(0x7f0000002f80)=""/74, 0x4a}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000004300)=""/177, 0xb1}, 0xff}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000043c0)=""/248, 0xf8}, {&(0x7f00000044c0)=""/52, 0x34}, {&(0x7f0000004500)=""/158, 0x9e}], 0x3, &(0x7f0000004600)=""/230, 0xe6}, 0x200}, {{&(0x7f0000004700)=@sco, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004780)=""/225, 0xe1}, {&(0x7f0000004880)=""/119, 0x77}, {&(0x7f0000004900)=""/192, 0xc0}, {&(0x7f00000049c0)=""/164, 0xa4}], 0x4}, 0x400}, {{&(0x7f0000004e40)=@hci, 0x80, &(0x7f0000004fc0)=[{0x0}], 0x1, &(0x7f0000005000)=""/139, 0x8b}, 0xc3}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000005140)=""/78, 0x4e}, {0x0}, {&(0x7f0000005300)=""/159, 0x9f}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/234, 0xea}, {0x0}, {&(0x7f0000006500)=""/246, 0xf6}], 0x7}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007780)=""/207, 0xcf}, 0xc3}], 0x9, 0x40000000, 0x0) 01:14:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 244.166662] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 01:14:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:37 executing program 3 (fault-call:2 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 01:14:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 244.369212] FAULT_INJECTION: forcing a failure. [ 244.369212] name failslab, interval 1, probability 0, space 0, times 0 [ 244.452000] CPU: 0 PID: 8334 Comm: syz-executor3 Not tainted 4.20.0-rc5+ #149 [ 244.459373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.468736] Call Trace: [ 244.471357] dump_stack+0x244/0x39d [ 244.475015] ? dump_stack_print_info.cold.1+0x20/0x20 [ 244.480334] ? kernel_text_address+0x79/0xf0 [ 244.484777] should_fail.cold.4+0xa/0x17 [ 244.488864] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.494005] ? save_stack+0xa9/0xd0 [ 244.497649] ? zap_class+0x640/0x640 [ 244.501378] ? zap_class+0x640/0x640 [ 244.505112] ? find_held_lock+0x36/0x1c0 [ 244.509197] ? find_held_lock+0x36/0x1c0 [ 244.513276] ? __lock_is_held+0xb5/0x140 [ 244.517371] ? perf_trace_sched_process_exec+0x860/0x860 [ 244.522838] ? kasan_check_read+0x11/0x20 [ 244.527009] __should_failslab+0x124/0x180 [ 244.531261] should_failslab+0x9/0x14 [ 244.535084] kmem_cache_alloc+0x2be/0x730 [ 244.539263] ? __vma_adjust+0x1810/0x1810 [ 244.543429] vm_area_alloc+0x7a/0x1d0 [ 244.547247] ? arch_release_thread_stack+0x10/0x10 [ 244.552200] mmap_region+0x9d7/0x1cd0 [ 244.556021] ? __x64_sys_brk+0x8b0/0x8b0 [ 244.560107] ? selinux_task_getsecid+0x1f9/0x3a0 [ 244.564876] ? lock_downgrade+0x900/0x900 [ 244.569040] ? check_preemption_disabled+0x48/0x280 [ 244.574112] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 244.579059] ? kasan_check_read+0x11/0x20 [ 244.583231] ? mpx_unmapped_area_check+0xd8/0x108 [ 244.588107] ? arch_get_unmapped_area+0x750/0x750 [ 244.592967] ? lock_acquire+0x1ed/0x520 [ 244.596955] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.602508] ? selinux_mmap_addr+0x2d/0x110 [ 244.606840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.612390] ? security_mmap_addr+0x80/0xa0 [ 244.616725] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.622273] ? get_unmapped_area+0x292/0x3b0 [ 244.626700] do_mmap+0xa22/0x1230 [ 244.630171] ? mmap_region+0x1cd0/0x1cd0 [ 244.634246] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 244.638320] ? down_read_killable+0x150/0x150 [ 244.642838] ? security_mmap_file+0x174/0x1b0 [ 244.647357] vm_mmap_pgoff+0x213/0x2c0 [ 244.651270] ? vma_is_stack_for_current+0xd0/0xd0 [ 244.656128] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.661682] ? check_preemption_disabled+0x48/0x280 [ 244.666745] ksys_mmap_pgoff+0x4da/0x660 [ 244.670821] ? do_syscall_64+0x9a/0x820 [ 244.674811] ? find_mergeable_anon_vma+0xd0/0xd0 [ 244.679583] ? trace_hardirqs_on+0xbd/0x310 [ 244.683918] ? __ia32_sys_read+0xb0/0xb0 [ 244.687993] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.693374] ? trace_hardirqs_off_caller+0x310/0x310 [ 244.698494] __x64_sys_mmap+0xe9/0x1b0 [ 244.702400] do_syscall_64+0x1b9/0x820 [ 244.706298] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 244.711682] ? syscall_return_slowpath+0x5e0/0x5e0 [ 244.716620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.721474] ? trace_hardirqs_on_caller+0x310/0x310 [ 244.726507] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 244.731535] ? prepare_exit_to_usermode+0x291/0x3b0 [ 244.736570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.741431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.746630] RIP: 0033:0x457659 [ 244.749832] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.768742] RSP: 002b:00007f1df235dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 244.776459] RAX: ffffffffffffffda RBX: 00007f1df235dc90 RCX: 0000000000457659 [ 244.783734] RDX: fffffffffffffffd RSI: 0000000000002000 RDI: 0000000020ffe000 [ 244.791014] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 01:14:37 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0xffff8000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:37 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) [ 244.798292] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f1df235e6d4 [ 244.805576] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 01:14:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:38 executing program 1: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 01:14:38 executing program 3 (fault-call:2 fault-nth:3): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) getdents(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:38 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x0, @remote}}) sendfile(r1, r0, &(0x7f0000000480), 0x2000005) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, 0x0) getpgid(0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000180)) flock(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000440)=""/42, 0x2a}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000580)=""/11, 0xb}], 0x2}, 0xffffffffffffffc0}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/226, 0xe2}, {&(0x7f0000001a40)=""/84, 0x54}, {0x0}, {0x0}, {&(0x7f0000002c80)=""/63, 0x3f}, {0x0}], 0x7}, 0x7f}, {{0x0, 0x0, &(0x7f0000004280)=[{0x0}, {&(0x7f0000002f80)=""/74, 0x4a}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000004300)=""/177, 0xb1}, 0xff}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000043c0)=""/248, 0xf8}, {&(0x7f00000044c0)=""/52, 0x34}, {&(0x7f0000004500)=""/158, 0x9e}], 0x3, &(0x7f0000004600)=""/230, 0xe6}, 0x200}, {{&(0x7f0000004700)=@sco, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004780)=""/225, 0xe1}, {&(0x7f0000004880)=""/119, 0x77}, {&(0x7f0000004900)=""/192, 0xc0}, {&(0x7f00000049c0)=""/164, 0xa4}], 0x4}, 0x400}, {{&(0x7f0000004e40)=@hci, 0x80, &(0x7f0000004fc0)=[{0x0}], 0x1, &(0x7f0000005000)=""/139, 0x8b}, 0xc3}, {{0x0, 0x0, &(0x7f0000006600)=[{&(0x7f0000005140)=""/78, 0x4e}, {0x0}, {&(0x7f0000005300)=""/159, 0x9f}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/234, 0xea}, {0x0}, {&(0x7f0000006500)=""/246, 0xf6}], 0x7}, 0x1}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000007780)=""/207, 0xcf}, 0xc3}], 0x9, 0x40000000, 0x0) 01:14:38 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) 01:14:38 executing program 1: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 01:14:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) getdents(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:38 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffff00000004, 0x11, r0, 0x0) 01:14:38 executing program 1: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 01:14:38 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) getdents(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:38 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffff0004, 0x11, r0, 0x0) 01:14:38 executing program 1: 01:14:38 executing program 4: seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x800000006, 0x0, 0x0, 0xfffffffffffffffe}]}) timer_settime(0x0, 0x0, 0x0, 0x0) 01:14:38 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:38 executing program 1: 01:14:38 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffff04, 0x11, r0, 0x0) 01:14:38 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:38 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:38 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:38 executing program 1: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) 01:14:38 executing program 0: mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:39 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x2) 01:14:39 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0xffff8000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 245.868395] audit: type=1326 audit(1544404478.967:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8424 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ba code=0xffff0000 01:14:39 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) 01:14:39 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:39 executing program 0: mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e00000000000000) 01:14:39 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000000700)=""/4096}, 0x48) [ 246.579917] audit: type=1326 audit(1544404479.677:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=8424 comm="syz-executor4" exe="/root/syz-executor4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ba code=0xffff0000 [ 246.678934] audit: type=1400 audit(1544404479.777:55): avc: denied { prog_load } for pid=8462 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:14:39 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x8000000000000000) 01:14:39 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:39 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r0, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 01:14:39 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x201e, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:39 executing program 0: mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 246.753807] audit: type=1400 audit(1544404479.837:56): avc: denied { prog_run } for pid=8462 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 01:14:40 executing program 1: socketpair$unix(0x1, 0x80003, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x784, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x5}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "03ac435b2d4de7f4"}}, 0x48}}, 0x0) 01:14:40 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:40 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:40 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e00) 01:14:40 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) 01:14:40 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1f000000) 01:14:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40)="2f6465762f6e65742f74756eff", 0x241, 0x0) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x6d000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) socket$kcm(0x10, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 01:14:40 executing program 5: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:40 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffff00000004, 0x11, r0, 0x0) 01:14:40 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xb, r0, 0x2) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0xda4fff08) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0) 01:14:40 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) 01:14:40 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:40 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x2000000) 01:14:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:40 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffff0004, 0x11, r0, 0x0) 01:14:41 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x4000) 01:14:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffff04, 0x11, r0, 0x0) 01:14:41 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:41 executing program 0: clone(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1000000) [ 248.255469] device nr0 entered promiscuous mode 01:14:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = epoll_create1(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") epoll_wait(r1, &(0x7f00000004c0)=[{}], 0x1, 0x204) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x40000000}) close(r1) shutdown(r0, 0x1) shutdown(r0, 0x0) 01:14:41 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e) 01:14:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', 0x0, 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:41 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1f000000) 01:14:41 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x6b6b6b00) 01:14:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0xffffffffffffd) 01:14:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:42 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:42 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x400000000000) 01:14:42 executing program 4: [ 249.122725] FAT-fs (loop5): bogus number of reserved sectors [ 249.146566] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x2) 01:14:42 executing program 4: 01:14:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) [ 249.309069] device nr0 entered promiscuous mode 01:14:42 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:42 executing program 4: 01:14:42 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x80000000000000) 01:14:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x400000000000) [ 249.422706] FAT-fs (loop5): bogus number of reserved sectors [ 249.455887] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) [ 249.624459] FAT-fs (loop5): bogus number of reserved sectors [ 249.644529] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e00000000000000) 01:14:43 executing program 4: 01:14:43 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:43 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1f00000000000000) 01:14:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:43 executing program 4: [ 250.055761] FAT-fs (loop5): bogus number of reserved sectors 01:14:43 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x2000000) 01:14:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x800000) [ 250.116504] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:43 executing program 4: 01:14:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e000000) [ 250.358277] FAT-fs (loop5): bogus number of reserved sectors [ 250.379462] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:44 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1f00) 01:14:44 executing program 4: 01:14:44 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x6b6b6b00) 01:14:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:44 executing program 4: 01:14:44 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0xffffffffffffd) [ 251.028256] FAT-fs (loop5): bogus number of reserved sectors [ 251.065814] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:44 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x400000) 01:14:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:44 executing program 4: [ 251.207797] device nr0 entered promiscuous mode [ 251.319618] FAT-fs (loop5): bogus number of reserved sectors [ 251.337834] FAT-fs (loop5): Can't find a valid FAT filesystem [ 251.348159] cgroup: fork rejected by pids controller in /syz0 01:14:45 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) 01:14:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0xfdffffffffff0f00) 01:14:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x200000000000000) 01:14:45 executing program 4: 01:14:45 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:45 executing program 4: 01:14:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x6b6b6b) 01:14:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x200000000000000) [ 251.953826] FAT-fs (loop5): bogus number of reserved sectors [ 251.988039] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:45 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:45 executing program 4: 01:14:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x4000) [ 252.209424] device nr0 entered promiscuous mode 01:14:45 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:45 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0xffffffff00000000) 01:14:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:45 executing program 4: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x8001004000000016) syz_genetlink_get_family_id$team(0x0) accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000440)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) 01:14:45 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x6b6b6b00000000) 01:14:45 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:46 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0xfdffffffffff0f00) [ 252.890419] FAT-fs (loop5): bogus number of reserved sectors 01:14:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x400000) [ 252.931167] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:46 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:46 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x8000000000000000) 01:14:46 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000340)='/dev/urandom\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'bond_slave_1\x00', {0x2, 0x0, @remote}}) sendfile(r1, r0, &(0x7f0000000480), 0x2000005) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000180)) flock(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/35, 0x23}, {&(0x7f0000000680)=""/174, 0xae}, {&(0x7f0000000440)=""/42, 0x2a}], 0x3}, 0x7fff}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f0000000580)=""/11, 0xb}], 0x2}, 0xffffffffffffffc0}, {{&(0x7f00000008c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002e00)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/226, 0xe2}, {&(0x7f0000001a40)=""/84, 0x54}, {&(0x7f0000001ac0)=""/158, 0x9e}, {&(0x7f0000001b80)=""/204, 0xcc}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/63, 0x3f}, {&(0x7f0000002cc0)=""/249, 0xf9}, {&(0x7f0000002dc0)=""/17, 0x11}], 0x9}, 0x7f}, {{&(0x7f0000002ec0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000004280)=[{&(0x7f0000002f40)=""/64, 0x40}, {&(0x7f0000002f80)=""/74, 0x4a}, {0x0}, {&(0x7f0000004140)=""/201, 0xc9}, {0x0}], 0x5, &(0x7f0000004300)=""/177, 0xb1}, 0xff}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f00000043c0)=""/248, 0xf8}, {&(0x7f00000044c0)=""/52, 0x34}, {&(0x7f0000004500)=""/158, 0x9e}], 0x3}, 0x200}, {{&(0x7f0000004700)=@sco, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004780)=""/225, 0xe1}, {&(0x7f0000004880)=""/119, 0x77}, {&(0x7f0000004900)=""/192, 0xc0}, {&(0x7f00000049c0)=""/164, 0xa4}], 0x4}, 0x400}, {{&(0x7f0000004b00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004b80)=""/139, 0x8b}, {&(0x7f0000004c40)=""/162, 0xa2}, {&(0x7f0000004d00)=""/48, 0x30}, {&(0x7f0000004d40)=""/123, 0x7b}], 0x4, &(0x7f0000004e00)=""/46, 0x2e}, 0x4}, {{&(0x7f0000004e40)=@hci, 0x80, &(0x7f0000004fc0)=[{&(0x7f0000004ec0)=""/20, 0x14}, {&(0x7f0000004f00)=""/161, 0xa1}], 0x2}, 0xc3}, {{&(0x7f00000050c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000006600)=[{&(0x7f0000005140)=""/78, 0x4e}, {&(0x7f00000051c0)=""/91, 0x5b}, {&(0x7f0000005240)=""/173, 0xad}, {&(0x7f0000005300)=""/159, 0x9f}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f00000063c0)=""/234, 0xea}, {&(0x7f00000064c0)=""/44, 0x2c}, {0x0}], 0x8}, 0x1}, {{0x0, 0x0, &(0x7f0000007740)=[{&(0x7f00000066c0)=""/106, 0x6a}, {&(0x7f0000006740)=""/4096, 0x1000}], 0x2}, 0xc3}], 0xa, 0x40000000, &(0x7f0000007b00)={0x77359400}) [ 253.137126] device nr0 entered promiscuous mode [ 253.173928] FAT-fs (loop5): bogus number of reserved sectors [ 253.197896] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:46 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e) 01:14:46 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x6b6b6b00000000) 01:14:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:46 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:46 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r1, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000), 0xe) [ 253.847487] FAT-fs (loop5): bogus number of reserved sectors [ 253.866020] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:47 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1f00000000000000) 01:14:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x47) 01:14:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e000000) 01:14:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:47 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:47 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) [ 254.064209] FAT-fs (loop5): bogus number of reserved sectors 01:14:47 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x100000000000000) [ 254.105461] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:47 executing program 4: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffe000/0x1000)=nil) 01:14:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x6b6b6b) 01:14:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:47 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e00) 01:14:47 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getdents(r0, &(0x7f0000000140)=""/209, 0xd1) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000000)) 01:14:47 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1f00) [ 254.334589] FAT-fs (loop5): bogus number of reserved sectors [ 254.360166] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:47 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x1e00000000000000) 01:14:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:47 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, &(0x7f0000002000), 0x46d) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'btrfs.', 'fd'}, &(0x7f0000000280)=""/75, 0x4b) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="10000000000400000400000000000000"], 0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x10010, r0, 0xfffffffffffffffd) [ 254.555509] FAT-fs (loop5): bogus number of reserved sectors [ 254.570409] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:48 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:48 executing program 3: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0xc) 01:14:48 executing program 4: mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:48 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x7}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x6d2, 0x2, 0x1}, 0x2c5, 0x1f, 0x6}) [ 254.995137] FAT-fs (loop5): bogus number of reserved sectors [ 255.023255] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:48 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:48 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) socketpair(0x0, 0x1, 0x9, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 255.203103] FAT-fs (loop4): bogus number of reserved sectors [ 255.226505] FAT-fs (loop4): Can't find a valid FAT filesystem [ 255.282016] FAT-fs (loop5): bogus number of reserved sectors [ 255.323296] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x7}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x6d2, 0x2, 0x1}, 0x2c5, 0x1f, 0x6}) 01:14:48 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/user\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000080)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) fstat(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getgroups(0x3, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) r7 = getegid() fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="02efffff00001600000000000200ad00", @ANYRES32=r2, @ANYBLOB="21000400", @ANYRES32=r3, @ANYBLOB="02000200", @ANYRES32=r4, @ANYBLOB="040007000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="10000200000000002000040000000000"], 0x54, 0x1) 01:14:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x1f, 0xbc, 0x90d10fb13ee45ae3, {0xf, @sdr={0x47314356, 0x649}}}) [ 255.547385] device bridge_slave_1 left promiscuous mode [ 255.580753] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.627941] IPVS: ftp: loaded support on port[0] = 21 [ 255.668824] device bridge_slave_0 left promiscuous mode [ 255.674442] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.753566] team0 (unregistering): Port device team_slave_1 removed [ 255.764150] team0 (unregistering): Port device team_slave_0 removed [ 255.776689] bond0 (unregistering): Releasing backup interface bond_slave_1 01:14:48 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:48 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x7}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x6d2, 0x2, 0x1}, 0x2c5, 0x1f, 0x6}) 01:14:48 executing program 3: openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x24000, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:48 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0xd, 0x1, {0xd, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0xe72) [ 255.830764] bond0 (unregistering): Releasing backup interface bond_slave_0 01:14:49 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000080)={0x7}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x6d2, 0x2, 0x1}, 0x2c5, 0x1f, 0x6}) [ 255.914934] FAT-fs (loop5): bogus number of reserved sectors [ 255.963630] FAT-fs (loop5): Can't find a valid FAT filesystem [ 256.031372] bond0 (unregistering): Released all slaves [ 256.851352] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.862007] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.869761] device bridge_slave_0 entered promiscuous mode [ 256.918462] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.924943] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.932752] device bridge_slave_1 entered promiscuous mode [ 256.979185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 257.024248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 257.158568] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 257.208518] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 257.254536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 257.262142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 257.308589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 257.315455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 257.441713] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 257.448996] team0: Port device team_slave_0 added [ 257.480141] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 257.487599] team0: Port device team_slave_1 added [ 257.514152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 257.559511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 257.607224] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 257.614390] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.623109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.647103] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 257.654113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.662390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.967962] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.974348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.981034] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.987431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.994690] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 258.156054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.961816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.054617] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 259.145640] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 259.152038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.159405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.251035] 8021q: adding VLAN 0 to HW filter on device team0 01:14:53 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x8040010, r0, 0x21) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)) 01:14:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000000)={0x40000004}) 01:14:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:53 executing program 4: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:53 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r1, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) [ 259.978697] FAT-fs (loop5): bogus number of reserved sectors 01:14:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0xffffffff, 0x2}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 260.026420] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:53 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x10) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x1011, r0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000080)=0x7) 01:14:53 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video36\x00', 0x2, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:53 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:53 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r0 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:53 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0xce, "7b99d5cb3cc0a809b05822afc915f39f4d0914c6d8618553e6d60434c70bb25697bc87de329899c8cdea76e6bc396497881c6861b9e28548a44fbe54cf12f8c222f8ffd41bb571f25213f7dee7cb33c1c8d4e45050028825a0156966cdd5b56d1623e841f090afabebd89d86e4ace6cb11d344aa822c8e64bbd2e6f0faf7b06d2175220edbae4b28174d8bbd1b17169942b3fed42bea313d10b52ba2cdf7589147c2d877aeae3b3d8d89c76466d41e1719f85e1a93ae33453f37594decece90f00bd537d079318214d74960678ed"}, &(0x7f0000000000)=0xd6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r1, 0xc9e0}, &(0x7f0000000080)=0x8) 01:14:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) fcntl$getown(r0, 0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000000080)=0xd752, 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) write(r0, &(0x7f00000000c0)="88a3f600b675ff9cda2ae85edd7392a7b771a334d0ac53fd66e530b2ce7bd0f6bb376059fcbe08ab719821e36dfd12e37902ec78b5e1bb9fd2356676986dafb844a46c810232dad67936a5ccdd41df2dec91ed2ae91c75fd9a43a3d54cea7f4a2cc6df9a375f693fc8ccb22c98dfc255cae3cd90f7814a1d20cacd24ddac6e65ead0fca266e248ff9f35dcc3578fffdb6cf174a374fbaeec26a29c7848dc410d519ae3180961d6fec3969699915d0b78fae8041f198e1866d87b7edc958ef8bab5cf96", 0xc3) [ 260.331394] FAULT_INJECTION: forcing a failure. [ 260.331394] name failslab, interval 1, probability 0, space 0, times 0 [ 260.348545] FAT-fs (loop5): invalid media value (0x00) [ 260.382109] FAT-fs (loop5): Can't find a valid FAT filesystem [ 260.396046] CPU: 0 PID: 9411 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #149 [ 260.403380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.412742] Call Trace: [ 260.415359] dump_stack+0x244/0x39d [ 260.419009] ? dump_stack_print_info.cold.1+0x20/0x20 [ 260.424235] should_fail.cold.4+0xa/0x17 [ 260.428297] ? ima_get_action+0x7e/0xa0 [ 260.432264] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.437382] ? __lock_acquire+0x62f/0x4c20 [ 260.441634] ? zap_class+0x640/0x640 [ 260.445356] ? zap_class+0x640/0x640 [ 260.449097] ? find_held_lock+0x36/0x1c0 [ 260.453166] ? __lock_is_held+0xb5/0x140 [ 260.457253] ? perf_trace_sched_process_exec+0x860/0x860 [ 260.462752] ? print_usage_bug+0xc0/0xc0 [ 260.466842] __should_failslab+0x124/0x180 [ 260.471109] should_failslab+0x9/0x14 [ 260.474929] kmem_cache_alloc+0x2be/0x730 01:14:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) r1 = getpgrp(0x0) mq_notify(r0, &(0x7f0000000000)={0x0, 0x27, 0x1, @tid=r1}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x13, 0x1a, 0x4, "0ec99976413589e8109863aa1dd640a6fc95d08dd68910e2cc729623cef73bc3ac41eef1e2abbe09fef2a542fd6ee08e5fa7ea5674cb30e002f686c51ee47b1c", "749da3d1a6e342fd934fcfaaedd6a3cbe7094dfa5d867e57e9dadaa7f0cd332b71805c7070ab0bca38be1c59ce1c6c534343a31ff6b78b6f8c200def03e33676", "924119f72c5798eeb9874fba96bde689d1443d8c5b0b872a9609c3ea47e7906e", [0x5, 0x2]}) bind$alg(r0, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) [ 260.479098] ? __lock_acquire+0x62f/0x4c20 [ 260.483354] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.488921] ? may_expand_vm+0x1e3/0x810 [ 260.493002] vm_area_dup+0x7a/0x230 [ 260.496636] ? vm_area_alloc+0x1d0/0x1d0 [ 260.496658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.496681] __split_vma+0xae/0x570 [ 260.496697] ? find_vma+0x34/0x190 [ 260.496724] __do_munmap+0x314/0xf80 [ 260.506355] ? avc_has_perm_noaudit+0x630/0x630 [ 260.506384] mmap_region+0x6a7/0x1cd0 [ 260.506410] ? __x64_sys_brk+0x8b0/0x8b0 01:14:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000000402, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) write$binfmt_script(r2, &(0x7f0000000740)=ANY=[@ANYRES64], 0x8) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5412, &(0x7f0000000040)={0x7f}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000040)=0x4) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000240)=0x7) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x6}, &(0x7f0000000100)=0x8) open_by_handle_at(r1, &(0x7f0000000280)={0x49, 0x1, "b60270ba78e74201c88fd6189deccc17f54a85bd63ad5acbc990018560629b2868ff31ce7985f4a49f93a4078e1c347beef8fe6962e4f0335ff6aa52f35b01bb4d"}, 0x40) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000140)={r4, 0xfffffffffffffe00, 0x3f, 0x8001, 0x40, 0x0, 0x7, 0x0, {r5, @in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x100, 0x5, 0x6, 0x1}}, &(0x7f0000000200)=0xb0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x14, r0, 0x0) [ 260.506428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.506451] ? inode_has_perm.isra.59+0x17a/0x210 [ 260.506473] ? mpx_unmapped_area_check+0xd8/0x108 [ 260.545071] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 260.550557] ? selinux_file_open+0x5c0/0x5c0 [ 260.554990] ? arch_get_unmapped_area+0x750/0x750 [ 260.559858] ? lock_acquire+0x1ed/0x520 [ 260.563848] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.569398] ? selinux_mmap_addr+0x2d/0x110 [ 260.573732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.579287] ? security_mmap_addr+0x80/0xa0 [ 260.583630] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.589187] ? get_unmapped_area+0x292/0x3b0 [ 260.593615] do_mmap+0xa22/0x1230 [ 260.597101] ? mmap_region+0x1cd0/0x1cd0 [ 260.601179] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 260.605261] ? down_read_killable+0x150/0x150 [ 260.609776] ? security_mmap_file+0x174/0x1b0 [ 260.614297] vm_mmap_pgoff+0x213/0x2c0 [ 260.618219] ? vma_is_stack_for_current+0xd0/0xd0 [ 260.623103] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 01:14:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x10, r0, 0xffffffffffffffff) [ 260.628670] ? check_preemption_disabled+0x48/0x280 [ 260.633717] ksys_mmap_pgoff+0x4da/0x660 [ 260.637794] ? do_syscall_64+0x9a/0x820 [ 260.641781] ? find_mergeable_anon_vma+0xd0/0xd0 [ 260.646550] ? trace_hardirqs_on+0xbd/0x310 [ 260.650886] ? __ia32_sys_read+0xb0/0xb0 [ 260.650906] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.650923] ? trace_hardirqs_off_caller+0x310/0x310 [ 260.650950] __x64_sys_mmap+0xe9/0x1b0 [ 260.660405] do_syscall_64+0x1b9/0x820 [ 260.660422] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 260.660440] ? syscall_return_slowpath+0x5e0/0x5e0 01:14:53 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000000)={0x0, @reserved}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x2181d, r0, 0x0) fsetxattr(r0, &(0x7f0000000100)=@random={'security.', '})#\x00'}, &(0x7f0000000140)='/dev/swradio#\x00', 0xe, 0x3) [ 260.660454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.660472] ? trace_hardirqs_on_caller+0x310/0x310 [ 260.660489] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 260.660509] ? prepare_exit_to_usermode+0x291/0x3b0 [ 260.703540] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.708403] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.713599] RIP: 0033:0x457659 01:14:53 executing program 3: getgid() r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 01:14:53 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) io_setup(0x80000001, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000000040)="1227274a0262ce3b298a22e23cb94ecc533d9815531065c970f1a5c6299f4f8c8fdd6d05e28e5dbc076505949318ecfbb05333fa0508ed3f31b038fe2c62fb98fcf9c91805c13334dad1b89a2fbc77a3", 0x50, 0x2, 0x0, 0x2, r0}]) [ 260.716824] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.735757] RSP: 002b:00007feea3f6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 260.743499] RAX: ffffffffffffffda RBX: 00007feea3f6ac90 RCX: 0000000000457659 [ 260.750806] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 260.758100] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 260.765376] R10: 0000000000000011 R11: 0000000000000246 R12: 00007feea3f6b6d4 [ 260.772659] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 01:14:54 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r1, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:54 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:54 executing program 4 (fault-call:1 fault-nth:1): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:54 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) connect(r0, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x2, @broadcast}}, 0x80) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCCBRK(r1, 0x5428) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) 01:14:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 261.173945] FAULT_INJECTION: forcing a failure. [ 261.173945] name failslab, interval 1, probability 0, space 0, times 0 [ 261.198563] FAT-fs (loop5): invalid media value (0x00) [ 261.199346] CPU: 1 PID: 9462 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #149 [ 261.211176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.220533] Call Trace: [ 261.223142] dump_stack+0x244/0x39d [ 261.226788] ? dump_stack_print_info.cold.1+0x20/0x20 [ 261.228873] FAT-fs (loop5): Can't find a valid FAT filesystem [ 261.231992] ? is_bpf_text_address+0xd3/0x170 [ 261.232020] should_fail.cold.4+0xa/0x17 [ 261.232045] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 261.242436] ? save_stack+0xa9/0xd0 [ 261.251573] ? save_stack+0x43/0xd0 [ 261.251589] ? kasan_kmalloc+0xc7/0xe0 [ 261.251605] ? kasan_slab_alloc+0x12/0x20 [ 261.251620] ? kmem_cache_alloc+0x12e/0x730 [ 261.251640] ? vm_area_dup+0x7a/0x230 [ 261.275033] ? __split_vma+0xae/0x570 [ 261.278858] ? __do_munmap+0x314/0xf80 [ 261.282798] ? mmap_region+0x6a7/0x1cd0 [ 261.286787] ? do_mmap+0xa22/0x1230 [ 261.290428] ? vm_mmap_pgoff+0x213/0x2c0 [ 261.294512] ? ksys_mmap_pgoff+0x4da/0x660 [ 261.298756] ? __x64_sys_mmap+0xe9/0x1b0 [ 261.302831] ? do_syscall_64+0x1b9/0x820 [ 261.306913] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.312296] ? percpu_ref_put_many+0x11c/0x260 [ 261.316900] ? lock_downgrade+0x900/0x900 [ 261.321065] ? check_preemption_disabled+0x48/0x280 [ 261.321097] ? kasan_check_read+0x11/0x20 [ 261.330263] ? zap_class+0x640/0x640 [ 261.333985] ? rcu_softirq_qs+0x20/0x20 [ 261.334008] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.334026] ? check_preemption_disabled+0x48/0x280 [ 261.334052] __should_failslab+0x124/0x180 [ 261.353293] should_failslab+0x9/0x14 [ 261.357121] kmem_cache_alloc+0x47/0x730 [ 261.361211] ? rcu_read_lock_sched_held+0x14f/0x180 [ 261.366250] anon_vma_clone+0x140/0x710 [ 261.370250] ? unlink_anon_vmas+0xa60/0xa60 [ 261.374591] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.380177] __split_vma+0x183/0x570 [ 261.383906] ? find_vma+0x34/0x190 [ 261.387465] __do_munmap+0x314/0xf80 [ 261.391196] ? avc_has_perm_noaudit+0x630/0x630 [ 261.395896] mmap_region+0x6a7/0x1cd0 [ 261.399718] ? __x64_sys_brk+0x8b0/0x8b0 [ 261.403807] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.409368] ? inode_has_perm.isra.59+0x17a/0x210 [ 261.414228] ? mpx_unmapped_area_check+0xd8/0x108 [ 261.419103] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 261.424571] ? selinux_file_open+0x5c0/0x5c0 [ 261.428994] ? arch_get_unmapped_area+0x750/0x750 [ 261.433854] ? lock_acquire+0x1ed/0x520 [ 261.437849] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 261.437868] ? selinux_mmap_addr+0x2d/0x110 [ 261.437888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.453274] ? security_mmap_addr+0x80/0xa0 [ 261.453296] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 261.453315] ? get_unmapped_area+0x292/0x3b0 [ 261.453334] do_mmap+0xa22/0x1230 [ 261.471044] ? mmap_region+0x1cd0/0x1cd0 [ 261.475126] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 261.479208] ? down_read_killable+0x150/0x150 [ 261.483722] ? security_mmap_file+0x174/0x1b0 [ 261.488242] vm_mmap_pgoff+0x213/0x2c0 [ 261.492159] ? vma_is_stack_for_current+0xd0/0xd0 [ 261.497024] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.502585] ? check_preemption_disabled+0x48/0x280 [ 261.507633] ksys_mmap_pgoff+0x4da/0x660 [ 261.511709] ? do_syscall_64+0x9a/0x820 [ 261.515709] ? find_mergeable_anon_vma+0xd0/0xd0 [ 261.520479] ? trace_hardirqs_on+0xbd/0x310 [ 261.520496] ? __ia32_sys_read+0xb0/0xb0 [ 261.520514] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.520534] ? trace_hardirqs_off_caller+0x310/0x310 [ 261.528920] __x64_sys_mmap+0xe9/0x1b0 [ 261.528943] do_syscall_64+0x1b9/0x820 [ 261.528958] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 261.528976] ? syscall_return_slowpath+0x5e0/0x5e0 [ 261.528996] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.562327] ? trace_hardirqs_on_caller+0x310/0x310 [ 261.567368] ? prepare_exit_to_usermode+0x3b0/0x3b0 01:14:54 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x180, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x7ff, 0x3}, 0xc) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000100)={0xffffffffffffff5d, 0xfffffffffffff001, 0x6, 0x0, 0x0, [], [], [], 0x1ff, 0x7}) fadvise64(r0, 0x0, 0x0, 0x3) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000080)={0x6252cbb7, 0xfffffffffffffffe, 0x5, 0x6, 0x5, 0x100000001}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x7c) 01:14:54 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:54 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000000)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 261.572404] ? prepare_exit_to_usermode+0x291/0x3b0 [ 261.577445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.582314] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.587518] RIP: 0033:0x457659 [ 261.590723] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.609638] RSP: 002b:00007feea3f6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 261.617357] RAX: ffffffffffffffda RBX: 00007feea3f6ac90 RCX: 0000000000457659 01:14:54 executing program 2: openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 261.617367] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 261.617376] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 261.617386] R10: 0000000000000011 R11: 0000000000000246 R12: 00007feea3f6b6d4 [ 261.617396] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 01:14:55 executing program 4 (fault-call:1 fault-nth:2): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002", 0x11}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:55 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:55 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r0}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:55 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:55 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000180)={0xec9, {{0xa, 0x4e20, 0x1, @mcast2}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x7, @mcast1, 0x172}}, {{0xa, 0x4e23, 0x2, @local, 0xa4}}]}, 0x190) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x800}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={r1, 0x6, 0x30, 0x0, 0x3}, &(0x7f0000000140)=0x18) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000000)={0x0, 0xfffffffffffffffa, 0x1, 0x3, {0x0, 0x2, 0x7b1f7c91, 0x1}}) [ 262.497998] FAULT_INJECTION: forcing a failure. [ 262.497998] name failslab, interval 1, probability 0, space 0, times 0 [ 262.526243] CPU: 0 PID: 9512 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #149 [ 262.533578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.542942] Call Trace: [ 262.545555] dump_stack+0x244/0x39d [ 262.549208] ? dump_stack_print_info.cold.1+0x20/0x20 [ 262.554433] ? __switch_to_asm+0x34/0x70 [ 262.558520] should_fail.cold.4+0xa/0x17 [ 262.562612] ? __switch_to_asm+0x34/0x70 [ 262.566690] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 262.571799] ? __switch_to_asm+0x40/0x70 [ 262.575881] ? save_stack+0xa9/0xd0 [ 262.579532] ? zap_class+0x640/0x640 [ 262.583263] ? __sched_text_start+0x8/0x8 [ 262.587428] ? find_held_lock+0x36/0x1c0 [ 262.591497] ? __lock_is_held+0xb5/0x140 [ 262.595585] ? perf_trace_sched_process_exec+0x860/0x860 [ 262.601040] ? preempt_schedule+0x4d/0x60 [ 262.605198] ? preempt_schedule_common+0x1f/0xe0 [ 262.609969] __should_failslab+0x124/0x180 [ 262.614217] should_failslab+0x9/0x14 [ 262.618026] kmem_cache_alloc+0x2be/0x730 [ 262.622183] ? __vma_adjust+0x1810/0x1810 [ 262.626349] vm_area_alloc+0x7a/0x1d0 [ 262.630152] ? arch_release_thread_stack+0x10/0x10 [ 262.635099] mmap_region+0x9d7/0x1cd0 [ 262.638911] ? __x64_sys_brk+0x8b0/0x8b0 [ 262.642979] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.648548] ? inode_has_perm.isra.59+0x17a/0x210 [ 262.653405] ? mpx_unmapped_area_check+0xd8/0x108 [ 262.658256] ? selinux_file_open+0x5c0/0x5c0 [ 262.662674] ? arch_get_unmapped_area+0x750/0x750 [ 262.667531] ? lock_acquire+0x1ed/0x520 [ 262.671513] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.677051] ? selinux_mmap_addr+0x2d/0x110 [ 262.681380] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.686922] ? security_mmap_addr+0x80/0xa0 [ 262.691250] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.696791] ? get_unmapped_area+0x292/0x3b0 [ 262.701214] do_mmap+0xa22/0x1230 [ 262.704679] ? mmap_region+0x1cd0/0x1cd0 [ 262.708743] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 262.712814] ? down_read_killable+0x150/0x150 [ 262.717313] ? security_mmap_file+0x174/0x1b0 [ 262.721824] vm_mmap_pgoff+0x213/0x2c0 [ 262.725727] ? vma_is_stack_for_current+0xd0/0xd0 [ 262.730598] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.736142] ? check_preemption_disabled+0x48/0x280 [ 262.741180] ksys_mmap_pgoff+0x4da/0x660 [ 262.745244] ? do_syscall_64+0x9a/0x820 [ 262.749230] ? find_mergeable_anon_vma+0xd0/0xd0 [ 262.753990] ? trace_hardirqs_on+0xbd/0x310 [ 262.758314] ? __ia32_sys_read+0xb0/0xb0 [ 262.762387] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.767755] ? trace_hardirqs_off_caller+0x310/0x310 [ 262.772871] __x64_sys_mmap+0xe9/0x1b0 [ 262.776769] do_syscall_64+0x1b9/0x820 [ 262.780669] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 262.786054] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.790998] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.795844] ? trace_hardirqs_on_caller+0x310/0x310 [ 262.800863] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 262.805882] ? prepare_exit_to_usermode+0x291/0x3b0 [ 262.810911] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.815763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.820953] RIP: 0033:0x457659 [ 262.824152] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 01:14:56 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 262.843058] RSP: 002b:00007feea3f6ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 262.850781] RAX: ffffffffffffffda RBX: 00007feea3f6ac90 RCX: 0000000000457659 [ 262.858051] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020ffe000 [ 262.865333] RBP: 000000000072bf00 R08: 0000000000000003 R09: 0000000000000000 [ 262.872612] R10: 0000000000000011 R11: 0000000000000246 R12: 00007feea3f6b6d4 [ 262.879883] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 0000000000000004 01:14:56 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mq_notify(r0, &(0x7f0000000040)={0x0, 0x39, 0x4, @thr={&(0x7f0000000440)="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", &(0x7f0000000000)="c0045dbbe53db857bc77d30833edd1616fbae65f378a8235dbb65dc1a9e82c125f563479c7aa"}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000006000000ff000000000000f0ff00000000"], 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000240)={&(0x7f00000000c0)=@pppol2tpv3in6, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/131, 0x83}, 0x0) recvmmsg(r1, &(0x7f0000002940)=[{{&(0x7f0000001580)=@hci, 0x80, &(0x7f00000028c0)}}], 0x1, 0x0, &(0x7f00000029c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x110, r0, 0x0) gettid() [ 262.897689] FAT-fs (loop5): invalid media value (0x00) [ 262.908095] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:56 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x1, [0x401]}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'\x00', {0x2, 0x4e24, @multicast1}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'bridge0\x00', 0x2}, 0x18) 01:14:56 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x0) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 262.968149] audit: type=1400 audit(1544404496.067:57): avc: denied { write } for pid=9534 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 01:14:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:56 executing program 4 (fault-call:1 fault-nth:3): r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 263.074117] audit: type=1400 audit(1544404496.117:58): avc: denied { map } for pid=9534 comm="syz-executor2" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=30932 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 01:14:56 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 263.132660] FAT-fs (loop5): invalid media value (0x00) [ 263.142904] FAT-fs (loop5): Can't find a valid FAT filesystem [ 263.152281] audit: type=1400 audit(1544404496.137:59): avc: denied { read } for pid=9534 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 01:14:56 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:14:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:56 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2002, 0x0, 0x11, r0, 0x0) [ 263.299665] FAT-fs (loop5): invalid media value (0x00) [ 263.311645] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:56 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000000)=0x1, r1, 0x0, 0x0, 0x1}}, 0x20) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x341, 0x2, 0x1, {0x800000000a, @win={{0x0, 0x7, 0x2, 0xffffffff}, 0x3, 0x6000000000000000, &(0x7f0000000080)={{0x80, 0x9d, 0x4, 0x20}, &(0x7f0000000040)={{0x6, 0xfffffffffffffffd, 0x1, 0x9}}}, 0x2, &(0x7f0000000100)="b6a9b16326b33c54416ae1d906c03feb564dd2e43482af9a4bf238c5bac63e2883bade7d684e29d33af1779abd307e9f9e7dcb31a30b720c0baef0174df03eee2c8d5764b376a70fadbfb017046c97619bc5eee5f95303666d176133f440542a002d0c5b058274879ab8e17169d4438e0b7bd4f093cf588e7b5e7f911e5726e41628192f21a909473e4b46019098672568262fc47337b811d165e9a3d87feda9aafc6c3d", 0x1000}}}) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r2, 0x0) 01:14:56 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174001004010002000270", 0x14}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) [ 263.511600] FAT-fs (loop5): invalid media value (0x00) [ 263.534277] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:56 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x2, 0x9) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) accept4(r2, 0x0, &(0x7f0000000340), 0x80800) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x80000001, 0x1, &(0x7f0000000280)='sit0\x00', 0x6, 0x7f}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480c0", 0xef) poll(&(0x7f0000000400)=[{r2}, {r3, 0x2000}, {r2, 0x410}, {r4, 0x1000}], 0x4, 0x6) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000240)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000100)="41eb01d82e593e2c7d8eaf460a7f360ff34dc58dd7bdaa9502475ec4c0352fa89be7904b27a3e28b6568a9c2ea63bf4cf529d204a48c20b8d41eb626a6328ac208a2054814a0d0e6f1daa3d075165eab557ee9b3f03656c0ae8ac5052fe25410b0b003f8a927b6f1c49cd734a187e31a5be5eaffbb5974dba732b54022cb9faf70da3daf473c033f6298495530aba0e9b73220d72bf184a9741c296eca2d1745ce1ff1e7e73ef3e15623f316005efec15a4976f3eddc73ea674a0b8c895b3c57"}, 0x10) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x1ff, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) fcntl$setsig(r0, 0xa, 0x25) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/191) 01:14:56 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:56 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2004, 0x0, 0x11, r0, 0x0) 01:14:56 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) 01:14:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:56 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 263.845426] FAT-fs (loop5): invalid media value (0x00) 01:14:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x201e, 0x0, 0x11, r0, 0x0) 01:14:57 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000004c0)={@dev, 0x0}, &(0x7f0000000500)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000640)={'vlan0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14, 0x80800) recvmsg$kcm(r0, &(0x7f0000001840)={&(0x7f0000000700)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/66, 0x42}], 0x1, &(0x7f0000000840)=""/4096, 0x1000}, 0x40010000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001940)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000001a40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001ac0)={'vcan0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000001b00)={0x11, 0x0, 0x0}, &(0x7f0000001b40)=0x14) getpeername$packet(r0, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002280)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000022c0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000400)={@dev, 0x0}, &(0x7f00000023c0)=0x14) accept(r0, &(0x7f000000a1c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000a240)=0x80) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f000000a280)={@multicast2, @multicast2, 0x0}, &(0x7f000000a2c0)=0xc) accept(r0, &(0x7f000000a300)=@xdp={0x2c, 0x0, 0x0}, &(0x7f000000a380)=0x80) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f000000a3c0)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f000000a4c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a500)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f000000acc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000ac80)={&(0x7f000000a540)={0x710, r1, 0xb00, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1fc, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa9}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r6}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x7ff, 0x6, 0x0, 0x8000}, {0x8001, 0x7, 0x8001, 0x8}, {0x6, 0x401, 0x3ff, 0x3ff}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x9c4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r8}, {0x130, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffd}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x104, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x5, 0x7, 0x400, 0xfffffffffffeffff}, {0x0, 0xb260, 0x20, 0x9}, {0xfffffffffffffffe, 0x401, 0x10000, 0x89ec}]}}}]}}, {{0x8, 0x1, r15}, {0x2ac, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x101, 0x10000, 0x1, 0xae}, {0x1, 0x6, 0x5, 0x1}, {0xffff, 0x8000, 0x401, 0x8}, {0x0, 0x3ff, 0x4, 0x5d}, {0x7, 0xfffffffffffffc01, 0x4, 0x400}, {0x9, 0x400, 0x1f, 0x8}, {0x8, 0x200, 0x0, 0x1}, {0xff, 0x42, 0x1ff, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r19}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x710}, 0x1, 0x0, 0x0, 0x20048014}, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000000)) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x10010, r0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000100)={0x6, 0x0, 0x81, 0x0, 0x12}) [ 263.895096] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:57 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(0x0, 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:14:57 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7fffdf001000, 0x0, 0x11, r0, 0x0) 01:14:57 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000001080)={0xff, 0x8, 0x1e73, [], &(0x7f0000000000)=0x1f}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000010c0)={0x7, 0x7b, 0x2}, 0x7) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 01:14:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) [ 264.192263] FAT-fs (loop5): invalid media value (0x00) [ 264.208482] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x9, 0x1, {0x7, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:58 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) poll(&(0x7f0000000040)=[{r0, 0x80}, {r0}, {r0, 0x280}, {r0, 0x20}, {r0, 0x8480}, {r0, 0x8601}, {r0, 0xb006}, {r0, 0x8}], 0x8, 0x8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x8001003, 0xcb, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) 01:14:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x11, r0, 0x0) 01:14:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000", 0x15}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:58 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x100027e, 0x0) 01:14:58 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) [ 265.071701] FAT-fs (loop5): invalid media value (0x00) 01:14:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) 01:14:58 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) prctl$PR_GET_CHILD_SUBREAPER(0x25) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) flistxattr(r0, &(0x7f0000000000)=""/151, 0x97) 01:14:58 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x10002, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000480)=0xffffffffffffff41) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xb}, r1}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000200)={@ipv4={[], [], @local}, r1}, 0xfffffffffffffd27) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0xb, 0x0, 0x2, 0xb51c}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000240)={r3, 0x2}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r2, 0x0) [ 265.119598] FAT-fs (loop5): Can't find a valid FAT filesystem 01:14:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:58 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x14, r0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1, 0x1}) 01:14:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1e, 0x11, r0, 0x0) 01:14:58 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:58 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xb45, 0x200000) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffffc) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x3, 0x2, 0x3f, 0x8, 'syz0\x00', 0x5}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x2, 0x3000, 0x1000, &(0x7f0000ffb000/0x1000)=nil}) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x1110) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000840)={0x3, 0x7, 0x6, {0xb, @win={{0x2, 0xbfed, 0x3, 0x7}, 0x0, 0x3, &(0x7f00000009c0)={{0x2, 0x379, 0x7fff, 0x9db}, &(0x7f0000000980)={{0xdcfa, 0x7f, 0x400, 0x3ff}, &(0x7f0000000940)={{0x800, 0x8001, 0x4, 0x6}}}}, 0x7fff, &(0x7f0000000a00)="f24a07a3265a6aed086c6bd93f38c09bec2a2f095c6960e6412a770749dca3ab39aa0003258298b611b0eb11ac05d86c5a62a5fa", 0x8}}}) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x200, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x4010, r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000240)=""/177, &(0x7f0000000300)=0xb1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0x8001, 0x6, 0xff, 0xce}, {0xffffffffffff8001, 0x401, 0x6, 0x100000000}, {0x80000000, 0x2, 0xfffffffffffffffd, 0xffffffffffff42a9}, {0x1, 0x3, 0x1, 0x4}, {0x7, 0x3629, 0x2, 0x1}, {0x5, 0x3f, 0x63f33f44}]}, 0x10) 01:14:58 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfdffffffffff0f00, 0x11, r0, 0x0) 01:14:58 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0xa, {0x5b526a6f, 0x8, 0x100000000}, {0x20, 0x400, 0x5, 0x40}, {0x8, 0xe}}) setxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x1181}, 0x28, 0x0) 01:14:58 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 01:14:59 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:59 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x9, 0x4) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000000000000, 0x11, r0, 0x0) 01:14:59 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1e00000000000000, 0x11, r0, 0x0) 01:14:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:59 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000000)={{0x9, 0x4000000}, {0xf00, 0x1}, 0x100000000, 0x5, 0x10001}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:59 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000, 0x11, r0, 0x0) 01:14:59 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$addseals(r2, 0x409, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x1810, r0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x1ff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3, 0x9}, &(0x7f0000000140)=0x8) 01:14:59 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', r1}) lseek(r0, 0x0, 0x3) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:59 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f00000000000000, 0x11, r0, 0x0) 01:14:59 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x9, 0x1, {0xc, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:14:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:14:59 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) poll(&(0x7f0000000040)=[{r0, 0x80}, {r0}, {r0, 0x280}, {r0, 0x20}, {r0, 0x8480}, {r0, 0x8601}, {r0, 0xb006}, {r0, 0x8}], 0x8, 0x8) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000080)={0x8001003, 0xcb, 0x1}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@dev, @in=@loopback}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) 01:14:59 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:14:59 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x2000, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000140)) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffbfffffffffffd, 0x8010, r1, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e23, @local}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x48, {0x2, 0x4e24, @multicast2}, 'ip6tnl0\x00'}) signalfd(r1, &(0x7f0000000040)={0x1}, 0x8) 01:15:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3f00000000000000, 0x11, r0, 0x0) 01:15:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCCONS(r0, 0x541d) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x800) 01:15:00 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000000)={0x8000}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x2, 0x9) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) accept4(r2, 0x0, &(0x7f0000000340), 0x80800) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x80000001, 0x1, &(0x7f0000000280)='sit0\x00', 0x6, 0x7f}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480c0", 0xef) poll(&(0x7f0000000400)=[{r2}, {r3, 0x2000}, {r2, 0x410}, {r4, 0x1000}], 0x4, 0x6) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000240)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000100)="41eb01d82e593e2c7d8eaf460a7f360ff34dc58dd7bdaa9502475ec4c0352fa89be7904b27a3e28b6568a9c2ea63bf4cf529d204a48c20b8d41eb626a6328ac208a2054814a0d0e6f1daa3d075165eab557ee9b3f03656c0ae8ac5052fe25410b0b003f8a927b6f1c49cd734a187e31a5be5eaffbb5974dba732b54022cb9faf70da3daf473c033f6298495530aba0e9b73220d72bf184a9741c296eca2d1745ce1ff1e7e73ef3e15623f316005efec15a4976f3eddc73ea674a0b8c895b3c57"}, 0x10) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x1ff, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) fcntl$setsig(r0, 0xa, 0x25) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/191) 01:15:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:15:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x11, r0, 0x0) 01:15:00 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000040)={0xcd3, 0xc001001f, &(0x7f0000000000), &(0x7f0000000100)="35d3f535e9e6e894c54f8a09af0ae3344821846fa143974e30a3cba62d28136c58982240e31ff6814c54e3e2617f60e118ad4f48e6a505e005d186520fe9ccd5635b26b15688109f92087a6515ad0b3a615dbe7b8db858df4f7fe22f42b28c052f2c896fe94d1a2832b84d438b54b1d7d15a7ab363c5fb946c5d9df31f615dc6dc", 0x0, 0x81}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x0, 0x4, 0x7, {0xb, @pix={0x9, 0x1ff, 0x30385056, 0x5, 0x93, 0x8, 0xb, 0xfffffffffffffff8, 0x1, 0x7, 0x1, 0x7}}}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x0, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000001340)=""/4096, 0xfffffffffffffdbc) 01:15:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x11, r0, 0x0) 01:15:00 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x0, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:00 executing program 3: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x8b43, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_dellink={0x9c, 0x11, 0x300, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x5c080, 0x20000}, [@IFLA_OPERSTATE={0x8, 0x10, 0x3}, @IFLA_LINK={0x8, 0x5, 0x100}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_PHYS_PORT_ID={0x10, 0x22, "d27de3aaec2fb6f1c5f4"}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}, @IFLA_IF_NETNSID={0x8, 0x2e, 0xffffffff}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8050}, 0x40004) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r2, 0x0) 01:15:00 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0xa10000, 0x8a56, 0x6, [], &(0x7f0000000040)={0x9d0b7b, 0x3, [], @string=&(0x7f0000000000)=0x1}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x11, r0, 0x0) accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x80800) 01:15:00 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3f000000, 0x11, r0, 0x0) 01:15:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 01:15:00 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x11, 0x2, 0x9) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x1, 0x88000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) accept4(r2, 0x0, &(0x7f0000000340), 0x80800) mmap(&(0x7f00001d6000/0x3000)=nil, 0x3000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000002c0)={0xffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}, {0x2, 0x4e24, @broadcast}, 0x313, 0xffffffff, 0xfac, 0x80000001, 0x1, &(0x7f0000000280)='sit0\x00', 0x6, 0x7f}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x681f1a99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e73000/0x2000)=nil, 0x2000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00027, 0x0, &(0x7f00000000c0), 0x1, 0x2000000000002) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write(r2, &(0x7f0000000180)="e986b95d68b31e1f4073f3df9bf21c32cb45405e805d04f4673e966d4166191b6d541903f507980dfaa780bb1de90049eed61c75e06cbe934d9761afd40b817b6fbc454ed2e91b62453ddd6eb084e496fdd1a83bdc758dc227451a5d25289026adbeb626322028f8b89ada3d49adc3ba3473c02c66d9de8ae3de47d5035ddcc0a187e694bbfb785d4f788d67e75d2754ee11104c2f7d175714ce3b2e4758446bc4eb3b9e312a207c5219124c9861c95b98e336b06a7171b3eeebcddb979d4a3f66e95c563b64d3d32b1b551e3cf249a66f84192f4acf29511974db8a3ef38fd0402759da73e04dad6a0a583c7480c0", 0xef) poll(&(0x7f0000000400)=[{r2}, {r3, 0x2000}, {r2, 0x410}, {r4, 0x1000}], 0x4, 0x6) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000240)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000100)="41eb01d82e593e2c7d8eaf460a7f360ff34dc58dd7bdaa9502475ec4c0352fa89be7904b27a3e28b6568a9c2ea63bf4cf529d204a48c20b8d41eb626a6328ac208a2054814a0d0e6f1daa3d075165eab557ee9b3f03656c0ae8ac5052fe25410b0b003f8a927b6f1c49cd734a187e31a5be5eaffbb5974dba732b54022cb9faf70da3daf473c033f6298495530aba0e9b73220d72bf184a9741c296eca2d1745ce1ff1e7e73ef3e15623f316005efec15a4976f3eddc73ea674a0b8c895b3c57"}, 0x10) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000200)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x1ff, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) fcntl$setsig(r0, 0xa, 0x25) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000000)=""/191) 01:15:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0xa, &(0x7f0000000100)=[{0x6, 0x133, 0x4ee59817, 0x1000}, {0x10001, 0x4, 0x3ff, 0x9}, {0x3, 0x6, 0x3ff, 0xb7}, {0xb4d6, 0x3d, 0x100, 0x3}, {0x6a9f22b4, 0x6, 0xece, 0x2}, {0x2bb89974, 0xfffffffffffffffc, 0x2, 0x7}, {0x4, 0x1, 0xffffffffffffb3a8, 0x7}, {0x0, 0x1, 0x6, 0x2}, {0x1, 0x6, 0x3f87, 0x4}, {0x5, 0x8, 0x3, 0x4b}]}, 0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x8011, r0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @multicast1}, {0x306, @local}, 0x2, {0x2, 0x4e21, @local}, 'ip6gre0\x00'}) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000080)={0xb, {0x10000, 0x4, 0x9, 0x2}}) recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/195, 0xc3}, {&(0x7f0000000700)=""/19, 0x13}], 0x5, &(0x7f00000007c0)=""/45, 0x2d}, 0x100) syncfs(r0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/user\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 01:15:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) 01:15:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 01:15:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x8bb, 0x4, 0x8, 0x10, r0, 0x7ff}, 0x2c) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffd, 0x11, r0, 0x0) 01:15:01 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x0, 0x0, @ioapic={0x1005, 0x10001, 0x4, 0x2, 0x0, [{0x2, 0x9, 0x3, [], 0x1}, {0x5ff, 0x5, 0x7f5, [], 0x20}, {0x3, 0x4, 0x7, [], 0x9}, {0x7, 0x7fffffff, 0x9, [], 0x2}, {0x9, 0x81, 0x0, [], 0x2}, {0x8, 0x5, 0x6, [], 0x2}, {0x9, 0x100, 0x100, [], 0xf82}, {0x0, 0xf6, 0xed, [], 0xe3}, {0x9, 0x4, 0xfffffffffffffff9, [], 0x5fe7}, {0x6, 0x7ff, 0x2, [], 0x81}, {0x80000000, 0xffffffff80000001, 0x1, [], 0xffffffff}, {0x997, 0x5f65, 0x1, [], 0x81}, {0x100, 0x7, 0x100000000, [], 0x7}, {0x7f, 0x101, 0xce, [], 0x4}, {0x2, 0x4, 0x9, [], 0x8}, {0xb83, 0x2, 0x80}, {0x29e, 0x9, 0x8, [], 0x3f}, {0xfc5e, 0x6, 0x5, [], 0x96}, {0x51688a5a, 0x5, 0xe5, [], 0x20}, {0x5, 0xef3, 0x81, [], 0x3}, {0x40, 0x2, 0x442a, [], 0x4ddb}, {0xfff, 0x401, 0x5, [], 0x980}, {0x1ff, 0xffffffff00000000, 0xfa05, [], 0x6}, {0x5, 0xffffffff, 0x9, [], 0x8000000}]}}) 01:15:01 executing program 5 (fault-call:2 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 01:15:01 executing program 0 (fault-call:5 fault-nth:0): clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:01 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x87, "30d836260a153129cd80a411812b05627eb129dd721bace304fee11ab7f24f3a24d4fc9881e48f8a29c3b265082cc196bbccb5824934df03462912bbe8067993e2508da773732102f16944358d5fdfbe7f9d3615474bc0722a932a73ea2016ec3739f43659da4d93061f8a14d628e9d931914d49b45a5a5892ccfc2822655d23ed97b943ca6b63"}, &(0x7f0000000200)=0x8f) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={r1, 0x3, 0x10001}, &(0x7f0000000280)=0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x3b}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r2, 0x3}, &(0x7f0000000100)=0x8) 01:15:01 executing program 3: set_robust_list(&(0x7f0000000100)={&(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x200000f, 0x12, r0, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) 01:15:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6b6b6b, 0x11, r0, 0x0) 01:15:01 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6b6b6b00, 0x11, r0, 0x0) [ 268.854932] audit: type=1400 audit(1544404501.947:60): avc: denied { map } for pid=9914 comm="syz-executor3" path="/dev/video2" dev="devtmpfs" ino=16039 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:v4l_device_t:s0 tclass=chr_file permissive=1 [ 268.879238] FAULT_INJECTION: forcing a failure. [ 268.879238] name failslab, interval 1, probability 0, space 0, times 0 [ 268.915609] CPU: 0 PID: 9917 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #149 [ 268.922933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.932294] Call Trace: [ 268.934912] dump_stack+0x244/0x39d [ 268.938564] ? dump_stack_print_info.cold.1+0x20/0x20 [ 268.943777] ? mark_held_locks+0x130/0x130 [ 268.948039] should_fail.cold.4+0xa/0x17 [ 268.952131] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.957245] ? print_usage_bug+0xc0/0xc0 [ 268.961320] ? rcu_softirq_qs+0x20/0x20 [ 268.965408] ? dput.part.25+0x241/0x860 [ 268.969408] ? zap_class+0x640/0x640 [ 268.973141] ? mark_held_locks+0x130/0x130 [ 268.977396] ? find_held_lock+0x36/0x1c0 [ 268.981476] ? __lock_is_held+0xb5/0x140 [ 268.985563] ? perf_trace_sched_process_exec+0x860/0x860 [ 268.991039] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 268.996511] __should_failslab+0x124/0x180 [ 269.000760] should_failslab+0x9/0x14 [ 269.004580] kmem_cache_alloc_trace+0x2d7/0x750 [ 269.009266] ? kasan_check_read+0x11/0x20 01:15:02 executing program 3: syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:02 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000000)) 01:15:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1e000000, 0x11, r0, 0x0) 01:15:02 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 269.013425] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 269.018725] alloc_pipe_info+0x164/0x5d0 [ 269.022805] ? pipe_read+0x940/0x940 [ 269.026538] ? perf_trace_sched_process_exec+0x860/0x860 [ 269.031997] ? ksys_dup3+0x680/0x680 [ 269.035808] splice_direct_to_actor+0x786/0x9d0 [ 269.040495] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 269.046071] ? pipe_to_sendpage+0x400/0x400 [ 269.046100] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 269.046119] ? do_splice_to+0x190/0x190 [ 269.046136] ? security_file_permission+0x1c2/0x220 [ 269.046155] ? rw_verify_area+0x118/0x360 [ 269.046174] do_splice_direct+0x2d4/0x420 [ 269.046193] ? splice_direct_to_actor+0x9d0/0x9d0 [ 269.065215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.065235] ? __sb_start_write+0x1b2/0x370 [ 269.065262] do_sendfile+0x62a/0xe20 [ 269.078398] ? do_compat_pwritev64+0x1c0/0x1c0 [ 269.078417] ? __sb_end_write+0xd9/0x110 [ 269.078439] ? fput+0x130/0x1a0 [ 269.078457] ? do_syscall_64+0x9a/0x820 [ 269.078473] ? do_syscall_64+0x9a/0x820 [ 269.078494] __x64_sys_sendfile64+0x1fd/0x250 [ 269.078514] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 269.078540] do_syscall_64+0x1b9/0x820 [ 269.088390] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 269.088410] ? syscall_return_slowpath+0x5e0/0x5e0 [ 269.088433] ? trace_hardirqs_on_caller+0x310/0x310 [ 269.096713] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 269.096734] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 269.096749] ? __switch_to_asm+0x40/0x70 [ 269.096763] ? __switch_to_asm+0x34/0x70 [ 269.096784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.096808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.096820] RIP: 0033:0x457659 [ 269.096836] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.096845] RSP: 002b:00007f77a1753c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 269.096860] RAX: ffffffffffffffda RBX: 00007f77a1753c90 RCX: 0000000000457659 [ 269.096874] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 269.214444] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 269.221715] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f77a17546d4 [ 269.228999] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000005 01:15:02 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f000000, 0x11, r0, 0x0) 01:15:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 01:15:02 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) finit_module(r0, &(0x7f0000000000)='keyring,@\x00', 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:02 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80080) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x1, 0x1, 0xfffffffffffff2ec, 0xb7f, 0x0, 0x9, 0x2208, 0x5, 0x6, 0x7, 0x3, 0xb80a, 0x9, 0x7, 0xbb5, 0x2, 0x4, 0x5, 0x5, 0x40, 0xa33, 0x3afa954d, 0xfffffffffffffffa, 0x2a7, 0x0, 0xfffffffffffffffb, 0x7, 0x0, 0x4, 0x8, 0x1, 0x5, 0x5, 0xe5, 0x6d9, 0x7fff, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x5}, 0x8, 0x4, 0x3, 0x9, 0x1, 0x4, 0x9}, r1, 0x7, r0, 0x8) 01:15:02 executing program 0 (fault-call:5 fault-nth:1): clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000001100)={{0x8}, 'port0\x00', 0x14, 0x140000, 0x3, 0xffffffffffff958f, 0x7, 0x7f, 0x8, 0x0, 0x1, 0x846}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) r2 = semget(0x1, 0x0, 0x642) semctl$GETPID(r2, 0x2, 0xb, &(0x7f0000000100)=""/4096) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000011c0)="06d9086b6940c0897eee71b636a3ab5796abe2b0d58249663b00d99058a09ef730555a4bf59aa77f65742b0749b1e9e545282be185050cb86fbff29813552d00ee4f2341ad84978b6d16eb17bb7d89b4fd58b1cda1405899213a788f84df9e6f21639c67db8789f45d31d4bc5eea1968b900117205c787a340cd03fed141c185851dd4279897878011ca1eab9f9e1d4574ece7a94c969825094f5ad409d010503b7b020a419ab0a55f68039673f97d18868e11532f074bc96ae6cae2c045c83550bcc60312e2600698104bdf0d733ffbbbc09fc5fdb34e913262e067f59d19b47eec02ee") 01:15:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1f00, 0x11, r0, 0x0) 01:15:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0xf0ffffff7f0000) 01:15:02 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0xff, 0x9, 0x1, {0xb, @sliced={0x7ff, [0x8, 0xb2c9, 0x0, 0x7, 0x3f, 0x1, 0x2, 0x4, 0x9, 0x9, 0xef, 0x7, 0x8, 0x228, 0xe4a, 0x40800000000000, 0x4, 0x0, 0x20, 0x100000000, 0xa37e, 0x4, 0x10000, 0xfff, 0x3, 0x5, 0x6, 0x3, 0x4, 0x1, 0x4, 0x10000, 0xffffffffc9f8770c, 0xf4bd, 0x101, 0x1ff, 0x1, 0x9, 0x0, 0x8, 0x3ff, 0x1, 0x1, 0x8, 0x9, 0xffffffffffffff7f, 0x6, 0x100000001], 0x7f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:02 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000140)={0x0, 0xffffffff, 0x3, 0x1, {0x20, 0xffffffffffffffff, 0x40, 0x501b6533}}) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64EXEC\x00', &(0x7f0000000100)='/dev/swradio#\x00', 0xe, 0x1) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x3ff, 0x5}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000180)={0x7, r0, 0x1}) 01:15:02 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6b6b6b00000000, 0x11, r0, 0x0) [ 269.574278] FAULT_INJECTION: forcing a failure. [ 269.574278] name failslab, interval 1, probability 0, space 0, times 0 [ 269.606060] CPU: 0 PID: 9953 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #149 [ 269.613399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 269.622759] Call Trace: [ 269.625383] dump_stack+0x244/0x39d [ 269.629036] ? dump_stack_print_info.cold.1+0x20/0x20 [ 269.634249] ? __kernel_text_address+0xd/0x40 [ 269.638764] should_fail.cold.4+0xa/0x17 [ 269.642837] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 269.647976] ? save_stack+0x43/0xd0 [ 269.651620] ? kasan_kmalloc+0xc7/0xe0 [ 269.655554] ? kmem_cache_alloc_trace+0x152/0x750 [ 269.660406] ? alloc_pipe_info+0x164/0x5d0 [ 269.664666] ? zap_class+0x640/0x640 [ 269.668391] ? __x64_sys_sendfile64+0x1fd/0x250 [ 269.673082] ? do_syscall_64+0x1b9/0x820 [ 269.677169] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.682551] ? find_held_lock+0x36/0x1c0 [ 269.686635] ? __lock_is_held+0xb5/0x140 [ 269.690731] ? perf_trace_sched_process_exec+0x860/0x860 [ 269.696213] __should_failslab+0x124/0x180 [ 269.700463] should_failslab+0x9/0x14 [ 269.704272] __kmalloc+0x2e0/0x760 [ 269.707819] ? kmem_cache_alloc_trace+0x353/0x750 [ 269.712674] ? kasan_check_read+0x11/0x20 [ 269.716853] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 269.722153] ? alloc_pipe_info+0x2ce/0x5d0 [ 269.726449] alloc_pipe_info+0x2ce/0x5d0 [ 269.730500] ? pipe_read+0x940/0x940 [ 269.734207] ? perf_trace_sched_process_exec+0x860/0x860 [ 269.739645] ? ksys_dup3+0x680/0x680 [ 269.743356] splice_direct_to_actor+0x786/0x9d0 [ 269.748033] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 269.753630] ? pipe_to_sendpage+0x400/0x400 [ 269.757949] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 269.762969] ? do_splice_to+0x190/0x190 [ 269.766961] ? security_file_permission+0x1c2/0x220 [ 269.771996] ? rw_verify_area+0x118/0x360 [ 269.776141] do_splice_direct+0x2d4/0x420 [ 269.780304] ? splice_direct_to_actor+0x9d0/0x9d0 [ 269.785152] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 269.790720] ? __sb_start_write+0x1b2/0x370 [ 269.795057] do_sendfile+0x62a/0xe20 [ 269.798764] ? do_compat_pwritev64+0x1c0/0x1c0 [ 269.803334] ? __sb_end_write+0xd9/0x110 [ 269.807390] ? fput+0x130/0x1a0 [ 269.810658] ? do_syscall_64+0x9a/0x820 [ 269.814641] ? do_syscall_64+0x9a/0x820 [ 269.818605] __x64_sys_sendfile64+0x1fd/0x250 [ 269.823098] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 269.827675] do_syscall_64+0x1b9/0x820 [ 269.831550] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 269.836915] ? syscall_return_slowpath+0x5e0/0x5e0 [ 269.841866] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.846718] ? trace_hardirqs_on_caller+0x310/0x310 [ 269.851738] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 269.856748] ? prepare_exit_to_usermode+0x291/0x3b0 [ 269.861767] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 269.866613] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 269.871822] RIP: 0033:0x457659 [ 269.875071] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 269.893999] RSP: 002b:00007f77a1774c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 269.901702] RAX: ffffffffffffffda RBX: 00007f77a1774c90 RCX: 0000000000457659 [ 269.908972] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 269.916226] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 269.923484] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f77a17756d4 [ 269.930741] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000005 01:15:03 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x9, 0x1, {0x1000000040b, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:03 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000000000000, 0x11, r0, 0x0) 01:15:03 executing program 0 (fault-call:5 fault-nth:2): clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x18000000) 01:15:03 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x1, 0x80000000, 0x5, 0x70d5, 0x7, 0x5d6d, 0xf6, 0x586a, 0x20, 0x20}, 0xb) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000000, 0x11, r0, 0x0) 01:15:03 executing program 3: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xd5d8, 0x14000) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x1800) [ 270.437731] FAULT_INJECTION: forcing a failure. [ 270.437731] name failslab, interval 1, probability 0, space 0, times 0 [ 270.502524] CPU: 1 PID: 10014 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #149 [ 270.509948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.519314] Call Trace: [ 270.521924] dump_stack+0x244/0x39d [ 270.525581] ? dump_stack_print_info.cold.1+0x20/0x20 [ 270.530815] should_fail.cold.4+0xa/0x17 [ 270.534902] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 270.540021] ? __lock_acquire+0x62f/0x4c20 [ 270.544283] ? zap_class+0x640/0x640 [ 270.548029] ? find_held_lock+0x36/0x1c0 [ 270.552120] ? __lock_is_held+0xb5/0x140 [ 270.556204] ? __lock_acquire+0x62f/0x4c20 [ 270.560450] ? perf_trace_sched_process_exec+0x860/0x860 [ 270.565912] ? mark_held_locks+0x130/0x130 [ 270.570170] __should_failslab+0x124/0x180 [ 270.574424] should_failslab+0x9/0x14 [ 270.578244] kmem_cache_alloc_node_trace+0x270/0x740 [ 270.583370] __kmalloc_node+0x3c/0x70 [ 270.587196] kvmalloc_node+0x65/0xf0 [ 270.591009] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 270.595954] ? check_preemption_disabled+0x48/0x280 [ 270.600983] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 270.605930] ? copyin+0x100/0x100 [ 270.609390] ? rcu_softirq_qs+0x20/0x20 [ 270.613379] ? unwind_dump+0x190/0x190 [ 270.617293] ? is_bpf_text_address+0xd3/0x170 [ 270.621806] ? kernel_text_address+0x79/0xf0 [ 270.626239] ? __kernel_text_address+0xd/0x40 [ 270.626255] ? unwind_get_return_address+0x61/0xa0 [ 270.626310] ? __save_stack_trace+0x8d/0xf0 [ 270.626351] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 270.640125] ? iov_iter_pipe+0xbb/0x2f0 [ 270.640149] default_file_splice_read+0x1db/0xb20 [ 270.640166] ? __kmalloc+0x15b/0x760 [ 270.640186] ? alloc_pipe_info+0x2ce/0x5d0 [ 270.649188] ? splice_direct_to_actor+0x786/0x9d0 [ 270.649209] ? do_syscall_64+0x1b9/0x820 [ 270.649227] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.649251] ? percpu_ref_put_many+0x11c/0x260 [ 270.649267] ? iter_file_splice_write+0x1050/0x1050 [ 270.649287] ? zap_class+0x640/0x640 [ 270.662054] ? kasan_check_read+0x11/0x20 [ 270.662071] ? zap_class+0x640/0x640 [ 270.662096] ? rcu_softirq_qs+0x20/0x20 01:15:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000, 0x11, r0, 0x0) 01:15:03 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x11, r0, 0x0) [ 270.662132] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.671055] ? fsnotify+0x50e/0xef0 [ 270.671117] ? __init_waitqueue_head+0x9e/0x150 [ 270.715400] ? fsnotify_first_mark+0x350/0x350 [ 270.720002] ? __fsnotify_parent+0xcc/0x430 [ 270.724341] ? __might_sleep+0x95/0x190 [ 270.728326] ? fsnotify+0xef0/0xef0 [ 270.732025] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 270.737063] ? selinux_file_permission+0x90/0x540 [ 270.741953] ? security_file_permission+0x1c2/0x220 [ 270.746987] ? iter_file_splice_write+0x1050/0x1050 [ 270.752016] do_splice_to+0x12e/0x190 [ 270.755809] splice_direct_to_actor+0x31c/0x9d0 [ 270.760486] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 270.766034] ? pipe_to_sendpage+0x400/0x400 [ 270.770379] ? do_splice_to+0x190/0x190 [ 270.774357] ? security_file_permission+0x1c2/0x220 [ 270.779382] ? rw_verify_area+0x118/0x360 [ 270.783538] do_splice_direct+0x2d4/0x420 [ 270.787692] ? splice_direct_to_actor+0x9d0/0x9d0 [ 270.792560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.798108] ? __sb_start_write+0x1b2/0x370 [ 270.802463] do_sendfile+0x62a/0xe20 [ 270.806206] ? do_compat_pwritev64+0x1c0/0x1c0 [ 270.810790] ? __sb_end_write+0xd9/0x110 [ 270.814864] ? fput+0x130/0x1a0 [ 270.818149] ? do_syscall_64+0x9a/0x820 [ 270.822142] ? do_syscall_64+0x9a/0x820 [ 270.826143] __x64_sys_sendfile64+0x1fd/0x250 [ 270.830643] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 270.835237] do_syscall_64+0x1b9/0x820 [ 270.839129] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 270.844499] ? syscall_return_slowpath+0x5e0/0x5e0 [ 270.849438] ? trace_hardirqs_on_caller+0x310/0x310 [ 270.854491] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 270.859516] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 270.866183] ? __switch_to_asm+0x40/0x70 [ 270.870243] ? __switch_to_asm+0x34/0x70 [ 270.874335] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.879204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.884397] RIP: 0033:0x457659 [ 270.887599] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.906501] RSP: 002b:00007f77a1753c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 270.914212] RAX: ffffffffffffffda RBX: 00007f77a1753c90 RCX: 0000000000457659 [ 270.921487] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 270.928755] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 270.936022] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f77a17546d4 [ 270.943289] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000005 01:15:04 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x18, 0x200, 0xfffc000000000000, 0xffffffff, 0x6, @local}, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x2, 0x401, 0xf86}}, 0x28) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8000000000000000, 0x11, r0, 0x0) 01:15:04 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) write$binfmt_elf32(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4603e03f01040000000000000003003f00ff0000009f03000038000000c7030000030000000100200002009cf48fbaffff0000000006000070050000002e0000000101000000000000ffffff7f000000f080000000030000004c0b000008000000050000000500000081000000ff7f000000000080c0e752d21e5c0e7d6ea3f6ab0a1386bf787aba321866560688e843aa3df086725ab7fd02772166c380587cf561a5d6b4e03a67a5e97679ebc92eb2056977955bd0bea6c388945a1da1ddff7dd0a240cf97cbdf8a1652f1d50c346a8edd887a0dd56d7700dd79ee59d1292ba0353f00000000000000000000000000009b5bf0306fc3d5fa7f6dc08a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061af4fce000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x3e6) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5d, 0x200000) r1 = socket$inet6(0xa, 0x1, 0xfff) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) dup(r1) 01:15:04 executing program 0 (fault-call:5 fault-nth:3): clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x18) 01:15:04 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x5000, &(0x7f0000000000), 0x5, r0, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x121000, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000180)={0x2, 0x2}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="99f688ba44b7542e048828212dffddcaf926c3d4b4e607fd2ba78a0c84000013fe6304ca84480d912464c365c3c151753ef21592cd5483c9c206a220e1adc458061f5351a9182ed9af4c0c33cd760000") getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) 01:15:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x400000000000, 0x11, r0, 0x0) 01:15:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x7ffffffff000) [ 271.269522] FAULT_INJECTION: forcing a failure. [ 271.269522] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 271.325996] CPU: 1 PID: 10064 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #149 [ 271.333436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.343278] Call Trace: [ 271.345900] dump_stack+0x244/0x39d [ 271.349556] ? dump_stack_print_info.cold.1+0x20/0x20 [ 271.354781] should_fail.cold.4+0xa/0x17 [ 271.358870] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 271.363995] ? is_bpf_text_address+0xac/0x170 [ 271.368503] ? zap_class+0x640/0x640 [ 271.372215] ? lock_downgrade+0x900/0x900 01:15:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1e00, 0x11, r0, 0x0) [ 271.376363] ? check_preemption_disabled+0x48/0x280 [ 271.381391] ? zap_class+0x640/0x640 [ 271.385124] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 271.390069] ? kasan_check_read+0x11/0x20 [ 271.394241] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 271.399535] ? rcu_softirq_qs+0x20/0x20 [ 271.403536] ? __lock_is_held+0xb5/0x140 [ 271.407687] ? pair_device+0x170/0x1070 [ 271.411694] ? lock_release+0xa00/0xa00 [ 271.415683] ? perf_trace_sched_process_exec+0x860/0x860 [ 271.421160] ? __might_sleep+0x95/0x190 01:15:04 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3f00, 0x11, r0, 0x0) [ 271.425217] __alloc_pages_nodemask+0x366/0xea0 [ 271.429900] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 271.435008] ? default_file_splice_read+0x1db/0xb20 [ 271.440054] ? do_splice_to+0x12e/0x190 [ 271.444053] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 271.449119] ? check_preemption_disabled+0x48/0x280 [ 271.454161] ? __lock_is_held+0xb5/0x140 [ 271.458244] ? __kmalloc_node+0x3c/0x70 [ 271.462233] ? __kmalloc_node+0x3c/0x70 [ 271.466221] ? rcu_read_lock_sched_held+0x14f/0x180 [ 271.471252] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 271.476804] alloc_pages_current+0x173/0x350 [ 271.481231] push_pipe+0x3ff/0x7a0 [ 271.484779] ? __kmalloc_node+0x50/0x70 [ 271.488781] iov_iter_get_pages_alloc+0x938/0x15a0 [ 271.493725] ? check_preemption_disabled+0x48/0x280 [ 271.498759] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 271.503710] ? copyin+0x100/0x100 [ 271.503725] ? rcu_softirq_qs+0x20/0x20 [ 271.503745] ? unwind_dump+0x190/0x190 [ 271.511193] ? is_bpf_text_address+0xd3/0x170 [ 271.511213] ? kernel_text_address+0x79/0xf0 [ 271.511233] ? __kernel_text_address+0xd/0x40 [ 271.519603] ? unwind_get_return_address+0x61/0xa0 [ 271.519624] ? __save_stack_trace+0x8d/0xf0 [ 271.519652] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 271.519670] ? iov_iter_pipe+0xbb/0x2f0 [ 271.519692] default_file_splice_read+0x1db/0xb20 [ 271.519712] ? __kmalloc+0x15b/0x760 [ 271.528602] ? alloc_pipe_info+0x2ce/0x5d0 [ 271.528616] ? splice_direct_to_actor+0x786/0x9d0 [ 271.528637] ? do_syscall_64+0x1b9/0x820 [ 271.528653] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.528678] ? percpu_ref_put_many+0x11c/0x260 [ 271.537911] ? iter_file_splice_write+0x1050/0x1050 [ 271.537929] ? zap_class+0x640/0x640 [ 271.537951] ? kasan_check_read+0x11/0x20 [ 271.537966] ? zap_class+0x640/0x640 [ 271.537985] ? rcu_softirq_qs+0x20/0x20 [ 271.546977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.546992] ? fsnotify+0x50e/0xef0 [ 271.547020] ? __init_waitqueue_head+0x9e/0x150 [ 271.612860] ? fsnotify_first_mark+0x350/0x350 [ 271.617432] ? __fsnotify_parent+0xcc/0x430 [ 271.621741] ? __might_sleep+0x95/0x190 [ 271.625716] ? fsnotify+0xef0/0xef0 [ 271.629338] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 271.634349] ? selinux_file_permission+0x90/0x540 [ 271.639201] ? security_file_permission+0x1c2/0x220 [ 271.644219] ? iter_file_splice_write+0x1050/0x1050 [ 271.649233] do_splice_to+0x12e/0x190 [ 271.653040] splice_direct_to_actor+0x31c/0x9d0 [ 271.657698] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 271.663243] ? pipe_to_sendpage+0x400/0x400 [ 271.667554] ? do_splice_to+0x190/0x190 [ 271.671517] ? security_file_permission+0x1c2/0x220 [ 271.676522] ? rw_verify_area+0x118/0x360 [ 271.680676] do_splice_direct+0x2d4/0x420 [ 271.684818] ? splice_direct_to_actor+0x9d0/0x9d0 [ 271.689655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 271.695181] ? __sb_start_write+0x1b2/0x370 [ 271.699492] do_sendfile+0x62a/0xe20 [ 271.703199] ? do_compat_pwritev64+0x1c0/0x1c0 [ 271.707797] ? __sb_end_write+0xd9/0x110 [ 271.711864] ? fput+0x130/0x1a0 [ 271.715133] ? do_syscall_64+0x9a/0x820 [ 271.719110] ? do_syscall_64+0x9a/0x820 [ 271.723079] __x64_sys_sendfile64+0x1fd/0x250 [ 271.727573] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 271.732149] do_syscall_64+0x1b9/0x820 [ 271.736025] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 271.741397] ? syscall_return_slowpath+0x5e0/0x5e0 [ 271.746337] ? trace_hardirqs_on_caller+0x310/0x310 [ 271.751344] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 271.756356] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 271.763013] ? __switch_to_asm+0x40/0x70 [ 271.767057] ? __switch_to_asm+0x34/0x70 [ 271.771118] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 271.775950] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 271.781125] RIP: 0033:0x457659 [ 271.784316] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.803223] RSP: 002b:00007f77a1753c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 271.810920] RAX: ffffffffffffffda RBX: 00007f77a1753c90 RCX: 0000000000457659 [ 271.818174] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 271.825430] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 271.832710] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f77a17546d4 [ 271.839978] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000005 01:15:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x6b6b6b00000000) 01:15:05 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x15, r0, 0x0) 01:15:05 executing program 2: r0 = msgget(0x0, 0x10) msgsnd(r0, &(0x7f0000000440)={0x2, "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"}, 0x1008, 0x800) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r2 = shmget$private(0x0, 0x2000, 0x54000040, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_LOCK(r2, 0xb) syz_read_part_table(0x3, 0x8, &(0x7f0000002680)=[{&(0x7f0000000100)="cb39a9a49ac1e4c2308c8ff1eb9abe7ea40bd7d2bca0c5902b567904412082b2ecc5506e31de0fb528d5656f21b4035141261129c3592d3416c05e2c16aa0fdc4449f1b520b349ca6176583c2866ee3d287155c7efc701a62908e682891a441c64d5b29ea0c971648d0644dd86a3e49956c22e007e444f4776cf54b760eb1f8e4dc55e2a1676febb28c43856e057219e4489320e2f9471b3be7b33433fb0952661a5bb2575c34f528c4271e74a2ca41ed95c62055e60a37c83b9cce3be25671704151db7ef690de38006dd26c686b714cd85fbaec57ef00cc6e60ffacd9b16a781d5e2e6bf293787e96d480f0498b1f086", 0xf1, 0x2dd}, {&(0x7f0000000200)="68b8aa604f8db848899ca2efb6bd5afd18cf5e728fd7e1d7ce3b6a274495e7c0376af14549f20f81e829bb3c8792997764ad2a17996c158ecb0ad8c290212f08e53d4a8c751a50d1a07d918c22ef47dd27db81f04a58042893247dbdb35f339a2349ebca60d32ef0d7214efece365effd794e1532fc81882f41096b580c82aba95bb64757f7093334aa66da20a6fc61f34b88e5bb4f0552007b922edffea64ffea767e7ec54bae13b6998b733c26ea05f0e8c2b05e04ff9f61446a2d39c8d623316038caf9c6503f9ad99038b4783e256c4c", 0xd2, 0x7f}, {&(0x7f0000000080)="755a1b6b243985ec6ff231aa7a244b235803b8bf8374", 0x16, 0x80000001}, {&(0x7f0000001480)="84541d7ffb99f238fa7864c9aa545f705b030d76ea74eccd330b6722c9eab1154b645fdee42b982a2eed9e90eec117ee89d9036dca8a97e43f7045d924620a27ae491374c15b70bf1e193490e9e3c732e2cd1d470c6be300e4a535e518ae57feeb95b76ac8047ce799", 0x69, 0xfff}, {&(0x7f0000000300)="ee3fee2485bd076a6f6baa01ad78e6df2925b06241f8179340f51886b4d31f4bde552d9adc4abeb6b6a682bcf6a3d4a1b9cbcef335dfc86aa0fde10a40bb02", 0x3f, 0x4}, {&(0x7f0000001500)="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", 0x1000, 0x101}, {&(0x7f0000002500)="bba6b8ae3a4b3cab6ed94d907bc31f994d23b81fb4ebbb6b18a7beb4c6b566b1ad83b27b415237ebeeff435583e1aed34753a1b7b46fa44dc378073e82dfbb090525c046a42a8abd3106ad10636d07187f54e360c957a1153bde495b87a7e37ec3f1eb508b4748844289885174a2ae341df79460610ca1faa8d14918cafe849de823fd737117ac15feb317e4ec4ee87f56b4c388583fe80abd9ec2285cbb6066801b09f221de30fde35ff684417636021c40f403424b18a9d0d7b1f0237021c13a983ea28387f2528499798878442284c6846cd6020371b1583aaa375b990578c36c437ff585f8b5", 0xe8, 0x74}, {&(0x7f0000002600)="2fe514e7869d6e65c1463916ef9780468df80b59fec6df95bbc478dc6b4fd6e2d27e032caaf18b780577bbace883e8148bd17783e404e163579f637a5d4c09f390325644ac0e270ca88f19d77b5fabeb0a15ebd916c85b75f721651772deec9f885c64579d", 0x65, 0xdcdb}]) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') 01:15:05 executing program 0 (fault-call:5 fault-nth:4): clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x1800000000000000) 01:15:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x400000000000000) 01:15:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0xffffffff00000000) 01:15:05 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x7, 0x9, 0x400, 0x6}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$TIOCCONS(r0, 0x541d) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 272.229070] FAULT_INJECTION: forcing a failure. [ 272.229070] name failslab, interval 1, probability 0, space 0, times 0 01:15:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x3f000000) [ 272.275577] CPU: 1 PID: 10116 Comm: syz-executor0 Not tainted 4.20.0-rc5+ #149 [ 272.283008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 272.292374] Call Trace: [ 272.294984] dump_stack+0x244/0x39d [ 272.298632] ? dump_stack_print_info.cold.1+0x20/0x20 [ 272.303862] should_fail.cold.4+0xa/0x17 [ 272.307937] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 272.313028] ? rcu_softirq_qs+0x20/0x20 [ 272.317013] ? mutex_trylock+0x2b0/0x2b0 [ 272.321064] ? zap_class+0x640/0x640 [ 272.324780] ? find_held_lock+0x36/0x1c0 [ 272.328831] ? __lock_is_held+0xb5/0x140 [ 272.332957] ? sta_he_capa_read+0x2728/0x4c80 [ 272.337453] ? perf_trace_sched_process_exec+0x860/0x860 [ 272.342893] ? __lock_is_held+0xb5/0x140 [ 272.346948] __should_failslab+0x124/0x180 [ 272.351193] should_failslab+0x9/0x14 [ 272.354995] kmem_cache_alloc_node_trace+0x270/0x740 [ 272.360113] ? usercopy_warn+0x110/0x110 [ 272.364202] __kmalloc_node+0x3c/0x70 [ 272.367996] kvmalloc_node+0x65/0xf0 [ 272.371700] seq_read+0x99b/0x1150 [ 272.375234] ? rw_verify_area+0x118/0x360 [ 272.379384] do_iter_read+0x4a3/0x650 [ 272.383196] vfs_readv+0x175/0x1c0 [ 272.386724] ? compat_rw_copy_check_uvector+0x440/0x440 [ 272.392073] ? unwind_dump+0x190/0x190 [ 272.395965] ? kernel_text_address+0x79/0xf0 [ 272.400365] ? __kernel_text_address+0xd/0x40 [ 272.404852] ? unwind_get_return_address+0x61/0xa0 [ 272.409771] ? __save_stack_trace+0x8d/0xf0 [ 272.414114] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 272.419124] ? iov_iter_pipe+0xbb/0x2f0 [ 272.423100] default_file_splice_read+0x539/0xb20 [ 272.427949] ? __kmalloc+0x15b/0x760 [ 272.431662] ? alloc_pipe_info+0x2ce/0x5d0 [ 272.435893] ? splice_direct_to_actor+0x786/0x9d0 [ 272.440743] ? iter_file_splice_write+0x1050/0x1050 [ 272.445750] ? kasan_check_read+0x11/0x20 [ 272.449888] ? zap_class+0x640/0x640 [ 272.453588] ? rcu_softirq_qs+0x20/0x20 [ 272.457562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.463099] ? fsnotify+0x50e/0xef0 [ 272.466720] ? __init_waitqueue_head+0x9e/0x150 [ 272.471376] ? fsnotify_first_mark+0x350/0x350 [ 272.475945] ? __fsnotify_parent+0xcc/0x430 [ 272.480252] ? __might_sleep+0x95/0x190 [ 272.484214] ? fsnotify+0xef0/0xef0 [ 272.487861] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 272.492885] ? selinux_file_permission+0x90/0x540 [ 272.497728] ? security_file_permission+0x1c2/0x220 [ 272.502771] ? iter_file_splice_write+0x1050/0x1050 [ 272.507776] do_splice_to+0x12e/0x190 [ 272.511568] splice_direct_to_actor+0x31c/0x9d0 [ 272.516230] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 272.521760] ? pipe_to_sendpage+0x400/0x400 [ 272.526104] ? do_splice_to+0x190/0x190 [ 272.530095] ? security_file_permission+0x1c2/0x220 [ 272.535136] ? rw_verify_area+0x118/0x360 [ 272.539282] do_splice_direct+0x2d4/0x420 [ 272.543421] ? splice_direct_to_actor+0x9d0/0x9d0 [ 272.548259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 272.553783] ? __sb_start_write+0x1b2/0x370 [ 272.558123] do_sendfile+0x62a/0xe20 [ 272.561830] ? do_compat_pwritev64+0x1c0/0x1c0 [ 272.566419] ? __sb_end_write+0xd9/0x110 [ 272.570471] ? fput+0x130/0x1a0 [ 272.573741] ? do_syscall_64+0x9a/0x820 [ 272.577718] ? do_syscall_64+0x9a/0x820 [ 272.581681] __x64_sys_sendfile64+0x1fd/0x250 [ 272.586167] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 272.590746] do_syscall_64+0x1b9/0x820 [ 272.594623] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 272.599973] ? syscall_return_slowpath+0x5e0/0x5e0 [ 272.604912] ? trace_hardirqs_on_caller+0x310/0x310 [ 272.609915] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 272.614925] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 272.621578] ? __switch_to_asm+0x40/0x70 [ 272.625622] ? __switch_to_asm+0x34/0x70 [ 272.629672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 272.634511] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 272.639705] RIP: 0033:0x457659 [ 272.642886] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 272.661780] RSP: 002b:00007f77a1753c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.669485] RAX: ffffffffffffffda RBX: 00007f77a1753c90 RCX: 0000000000457659 [ 272.676743] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 272.684001] RBP: 000000000072bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 272.691274] R10: 0000000000000001 R11: 0000000000000246 R12: 00007f77a17546d4 [ 272.698546] R13: 00000000004c3e0b R14: 00000000004d6c20 R15: 0000000000000005 01:15:05 executing program 0 (fault-call:5 fault-nth:5): clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:05 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x13c, 0x1, {0xd, @vbi={0x3, 0x3, 0x4, 0x31363553, [0x9, 0x9], [0xea1d, 0x7ff], 0x1}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000240)='/dev/swradio#\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=r1, 0x4) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000100)={0x2, 0x1, &(0x7f0000000000)="6bd35360ccae773dc9c4db2b63fea445470e5c9084b38762dec58c56b07494113e30198d9564d2f6447ca56d530a001eef7c97633b97e5c40f7ff2f3b4c4d7b6213b45b81a4b6d5a84f2701df6c9ae1c12a7ddf5e392be567e3f041144b9da3c3bd78ffcdb751de50e199b7b8a45e398f47c4d7836233267394adb175697e57ee5963b35acc781d37948e13de842162f", {0x4, 0x1ff, 0x0, 0x1, 0x1, 0x9, 0xf, 0x2}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 01:15:05 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1000000) 01:15:06 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x9) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 01:15:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x400000) 01:15:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @vbi={0xffff, 0xffffffff7fffffff, 0x5, 0x79576f77, [0x9, 0x3], [0x247d, 0x80000001]}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x200, 0x10000) ioctl$TIOCSBRK(r1, 0x5427) 01:15:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffffffffffd) 01:15:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000100)={0xa, @raw_data="1648a6a5355830775a46063b21b723e83777374228514d0169d022f720934f6756375adf8d9bb452b0fba9d0c0f6d004f2e107bede2d3ac9d5b36bc07888805ec7775c66c8190e669f19f9042e27b474c7f23d0de57cadfd58eb098cf1ca9f0aa2c0eabfdae9c804136040ab4af618acc6f59160b7ea0dedd907a69be4e5a457fde18c23a7482693d12663abf1982500d259f1c3d1a3a46b68add5bf8d93955539c7c7e3019eed29151d347aeaa88d7b640cb76638dd0359bc4d07483b3da652f0975fa87e0c2835"}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:06 executing program 2: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x5c71, 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000080)={0x0, @aes128, 0x0, "8ae8ba0e274e4784"}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) 01:15:06 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:06 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x305000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 01:15:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x2) 01:15:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) r1 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='em1eth0\x00', 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)='!posix_acl_accessmd5sum\\system\\\x00') 01:15:06 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100"}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:06 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x6, {0x6}}, 0x18) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:06 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x100000000000000) 01:15:06 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000000)={0x2, 0x3, 0x5, 0x0, 0x6}) 01:15:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0xfffffffffffffe66) 01:15:06 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0xfffff000) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1e00000000000000) 01:15:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x3, 0x7, 0xfffffffffffffffe, {0xb, @pix={0x0, 0x1f}}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/112, 0x70) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000100)={0x1000, 0x10000}) 01:15:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@remote}}, &(0x7f0000000640)=0xe8) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x3, &(0x7f0000000440)=[{&(0x7f0000000180)="8ea06db6ef255a7340bde0ee8e3779c1d347c001963130310f082f3462eb2b88ea46ec810256b27a4e902d09419c3d5bf0ad796e78e51db93ee6bea044aa8c4a87ee115acb1722055bb697e56e25f54cdd5a479fa603c7c54ec2b7aefc8a3a0eaba98ef3a2ace23d79200a0b48e45169fed9927c2c988ea74cc3d6df4f62a3b3e7c16a0c87bcfc3307917ac73fc1ae8c7bb37671a69f8e2011ed04489cd125e756214429f69b45cf67861e442545cb34c13b3aa312d56ead6c32da5caa6fb52e4cf9c5dd68f0fc40d2752e673784b5ee080e3d6acc215609bf60842c3d675508a230ed0cdb35039e8bc2cf850977", 0xee, 0xfffffffffffffffb}, {&(0x7f0000000280)="b65b3ce1a61cffc4e85542ee439438cc1177d4f11945810664353424be64b932c83ca4f76a327cce441fa1060e084e563e9193ad02edb8bb5c30b469be3ece3aa78c34da9bfa", 0x46, 0x101}, {&(0x7f0000000340)="cd9d27cb9dd6cfb1218ef5231e4a1650a8d7998469a82985a60e513244b7dbafbdf6cb790b6aa1052edeac1db8a91a95c34f3ecb65c97a12e18721c35725dc142244e0682c2eb0d1637b3e320c08123334e66d264bf31b1945fc5d5c0cb8de81095cecf8fb6e60d39c30a94ddf54a638cf6948f11899e145ca2ad1ce01c108da7e746f523b95dda82171e5027f6f49d39307184374fa285510cb4ce27fb62b72dcf585baf8d1af9db80a8da3444cd367040415eda3c51ad6c626a940c30875a800bd97a882db9dbc1a06632bdb5169c66692c73a", 0xd4, 0x1}], 0x100000, &(0x7f0000000680)={[{@discard='discard'}, {@resize_size={'resize', 0x3d, 0x8001}}, {@errors_continue='errors=continue'}, {@discard_size={'discard', 0x3d, 0x100}}, {@grpquota='grpquota'}, {@iocharset={'iocharset', 0x3d, 'cp862'}}], [{@obj_user={'obj_user', 0x3d, 'vfat\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash='hash'}, {@measure='measure'}, {@subj_user={'subj_user', 0x3d, "8d5e2624"}}, {@pcr={'pcr', 0x3d, 0x14}}, {@obj_type={'obj_type', 0x3d, 'self@GPL[cgroup'}}, {@euid_lt={'euid<', r1}}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, r2}}]}) 01:15:07 executing program 3: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x7, 0x4, 0x488, 0x260, 0x0, 0x260, 0x3a0, 0x3a0, 0x3a0, 0x4, &(0x7f0000000000), {[{{@arp={@empty, @local, 0xff0000ff, 0xff0000ff, @mac=@dev={[], 0x1f}, {[0x0, 0xff, 0xff, 0x0, 0xff]}, @mac=@dev={[], 0x15}, {[0x0, 0xff, 0xff]}, 0x10001, 0x4, 0xfffffffffffffffb, 0x6, 0x100000001, 0x2, 'team0\x00', '\x00', {0xff}, {}, 0x0, 0x101}, 0xf0, 0x120}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xd33, 0x0, 0x81, 0x2}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @multicast2, @multicast2, 0xf}}}, {{@arp={@empty, @multicast1, 0xff, 0xffffffff, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x1, 0x4e7, 0x837f, 0x1ff, 0x9, 0xffff, 'syzkaller0\x00', 'dummy0\x00', {}, {}, 0x0, 0x21}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @remote, 0x8, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4d8) 01:15:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x4000000) 01:15:07 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001e00)={0x14, 0x28, 0x829, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000180)={0x100000001, 0x100000001}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000100)=0x8) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@local, 0x6, 0x2, 0x1, 0x4, 0xfffffffffffffffa, 0x9, 0x8}, 0x20) finit_module(r1, &(0x7f0000000000)="2f644b76c88577726164696f2300", 0x1) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x3) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x1) 01:15:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1f000000) 01:15:07 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0xffffff1f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000580)='/dev/radio#\x00', 0x2, 0x2) sendmmsg$unix(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1}, {&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000340)="3f4bd458a66d8bf606cfc60fa9bd3b39e9049d460059f05cca00fd0673be416e81c29f61afe86d426eadd46b9c0ce8ea5fa1fae7e57a671a4a17ad29ca82df860d7148525df1b9b959c3a7643c69444ab97079dd0ae08744ea82224ef626af25e55e0d844ad8b7223fafba09c84539aae46be3ed4e222d3ff68515da86ac66566c4ce284ea721b1fdeed05d881d23f6c8a5bef454055f58d6d04e8c00fc196d404a51e09e8a7fb94a44b7182b3d696f788e8606b33b14807e618d472786af332973fb5c8e279799a6a5e59a6209df77f95e953d021775ab87c00efbeaccce7b6084f5fc41e", 0xe5}, {&(0x7f0000000240)="1cd91348b61951af99cab9c894fcf668baa259d748327636c34db8f780d03d9110e6498fed61d9eb48ba8a0764ae7fbf2bec3dec5b9dd9547fe661f953b937726627ecf502e11f140ab16ced40038fa611d8f5c68435ed2db489", 0x5a}], 0x2, 0x0, 0x0, 0x20000001}], 0x2, 0x4) lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='security.ima\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0412fa44c506000000000000000e603bdbe28670b58d5f0f70a6fc9b8a43f73fa0dae6bf09b42fb1a7b02251e635534278a14c7ceafec86018c184bd12"], 0xa, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 01:15:07 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {0x0}], 0x2}, 0x0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r1, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:07 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x6, 0x7fff, 0x0, 0x1, 0xfffffffffffffff9, 0xe7b, 0x9b9, 0xffffffffffff28ca, 0xff, 0x1, 0x1, 0x6, 0x6, 0x2, 0x1b, 0xc}}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000080)=[{{r1, r2/1000+30000}, 0x5, 0x9, 0x2}], 0x18) getdents(r0, 0x0, 0x0) 01:15:07 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0xfff) 01:15:07 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1e) 01:15:07 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x800, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x20) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 01:15:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1f00000000000000) 01:15:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4000) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x3, r1}) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r2, 0x0) 01:15:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x200000000000000) 01:15:08 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x2) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 275.040029] device nr0 entered promiscuous mode 01:15:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x0) 01:15:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000001640)="eb3c906d6b66332e66617400100401000200027000f8", 0xfffffffffffffde7}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x800, 0x55) syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x7, 0x6, &(0x7f0000001500)=[{&(0x7f0000000340)="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", 0x1000, 0x3f}, {&(0x7f0000000180)="60a39a294660b16f94a9180c861d2b037d57a73eb26b8111972d557c9f933c537f6f7602e78d5128704d2b971fc49edc407db419c562430f69dbf7d2712dcfd6243feedd67292009bd9060ebe07558f5ff6278c87d912bf5290a4945477a0def400c176638d14f5cae30c86a327da2b0f0", 0x71, 0xb2}, {&(0x7f0000000200)="644bc0e7cd78cef5500f7f300839d8bde01359851d6ba1ac7978d7460b12abd2ba7d9ad6edd22aa24cd49f3b7ecbcd6e936df93257b7046edea5e03cb5d18a563fa71bb88041748c518af792bc03f42ca46ae55017fab363b54633d236c6530d5b1a3e9b208c2ac99e5c15d26d0c4a4a22d3eb40a61039a4b34bcb7f9bd0f10badc758337eb444e2fbba2da2724dd10d2e7e6671ed328f6060334906cf125b52be85f729229bbf8d78c571d9e701ef407eca8e8575d6dd77b0fcc1770566964f73ee8a67b76f9c6891817c0e14b9f7a49f11c76f6ef14b6301715e63a366c9882b2d", 0xe2, 0x7}, {&(0x7f0000001340)="f18f6a33645b27d48e87121a64b149742be1b29283b74fd61279b15ad0d69471883dbb03134470004be6e0f75f733921998b8cb6e5c8cc25f1eaf437b5c410826f46f6d7e05bf91f4de21c8f376f04a6a3b3f2f3165a73c5f8f5ff1c8f3feddf20fea8389183fa63cdcece5bf148ee99968af088580bce296d4e0eec474cbbe35933", 0x82, 0x9}, {&(0x7f0000001400)="b6a65855adc4621c3fd34740595d37fccdf6fc3fcfae0825036b6cfed104278d3c7047a8f6befac7d876d0f81dcb007ea12884f8a4adcef812203e5305578cb7d6a0df10d14c6aeb60405bf0c5d95e2cdcd205279566bb57d41d58aa386c4d70d89eac80612038fa00824ee6245229a838", 0x71, 0x9}, {&(0x7f0000001480)="d20fd2380fe295b24a97f4af2ea83c345d117cca91b0a47322c3669ad4284c5cb932da03d0e3e7f5d6178d9b4d8aad36eb81cb6def3c427279b5b71c9e611788c3ab95747628b705", 0x48, 0x7fff}], 0x40000, &(0x7f00000015c0)={[{@nossd='nossd'}, {@degraded='degraded'}, {@clear_cache='clear_cache'}, {@compress_algo={'compress', 0x3d, 'no'}}], [{@pcr={'pcr', 0x3d, 0x1c}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 01:15:08 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, 0x0, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12010, r0, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x2}) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{0x6, 0x10000, 0x1, 0x4, 0x3f}, {0xc000001b, 0x1, 0x4, 0xff, 0x3}, {0x40000001, 0x6, 0x4, 0x7fff, 0x8}]}) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 01:15:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x4) 01:15:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003180)={{{@in6=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4}}, &(0x7f0000000300)=0x7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003140)={0xffffffffffffffff, r0, 0x0, 0xffffffffffffffd2, &(0x7f00000002c0)="73656c6624de00"}, 0x20) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002e40)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000002f40)=0xe8) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000003100)={0x2, 0x4e22, @multicast1}, 0x10) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000030c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0xc9104}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="640400001400000a26bd7000fcdbdf2570033f0008006800", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="a0dc61eb7afba2883e1d66c070d3a1c3e3aeb09f37ca8bcc34486d9ab1fa242c0beb0d9f739c1c953e61c81697e0378d71bc222173563d77e8bd4587a2c183bf3d8d463da07e04e683dbda6ba61df77bde0410f2f9fcb6489471b94f5b31394509df6532015c39044048ee1d05045cc905b16f8b8d1123851b852665b09031436ea0e8e1e865e75d360509ae0c404ccf4026d11e010001008a3b5cc2b9bbcb2538cb3072e52eb471a24d1b02b3982a1ea8727de5f19d948525568e08003900", @ANYRES32=r3, @ANYBLOB="08002b0008000000003f896b9acd8732bf8b77c7a08b920b915d12274f92070d36a59452763349f9b2e7c52118703e72d5e94c9991f9eef2a3f8666dde1820e054b95fb820a6e7272d9f3fc9e7cbaa6259b3aadf33a0a20ba0bc8e596750dd400479ab5a72d626ffea94277b948667f75c698474ac84d4806054340f439eb35aa0ec35cde919967b48ae4c6383219dd51558d321840d01f372fed29cf8d2fe05907f0d562c208c18c2d1efa6fee17172490edd92bf0b4fc82153b031239dfad624b100ea793c40f70dd4dffad67d4c95eb2773ec77b7567ffea1f9d333acc5967a0c008c0008008e0023000000"], 0x464}, {&(0x7f00000008c0)={0xf4, 0x3a, 0x602, 0x70bd26, 0x25dfdbfc, "", [@nested={0xac, 0x19, [@generic="7db7377d29741264885679459e3d5102f0b2e5444dce4d11f481397b85685c960df0524e67f198ae1dba7da367e3b44e98663ad218790deaeff606ad51bf195368b035683011d80e412482e86306bb33166e334b13027fb42abd83b030f2ad064401a26d8fec5e203db51f893e403b98bd53f53ebdba5a5ef65eeb9b4eac6a0a5dc56ed27e322efe5e0b720f94ee9443f14724ee0c291a8a7ff4101a551ee85a07536434818e"]}, @nested={0x38, 0x5c, [@typed={0x8, 0x2e, @ipv4=@rand_addr=0x5}, @generic="5ce0c348a8f19b88dd072cd48fe5c9d6c36b6d71b5da814638bc3e68cb43719f219fb3bdff0c0f4685"]}]}, 0xf4}, {&(0x7f00000009c0)={0x1208, 0x21, 0x722, 0x70bd2c, 0x25dfdbff, "", [@generic="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", @nested={0x4c, 0x1, [@generic="76210a431a16a4b9b2451a892df73e4bb5f03516e2008c4b2e355e5013d02dbf0f8545768d0fc7893d8bc5975e5649f352010f0988ff53cbb0f74f39", @typed={0xc, 0x2a, @u64=0x6}]}, @generic="23cf6e98460e16219f8d77aa1f8426361c0b8b105c493ece689742707242d2d639b99c86e2d2172df324282072a2c1a7764e8a9fe390c2991dda844d1e603cded22cf6ab3d64063b731801647d0e2a1a1b017b6f52cfef383f49ca98d631e3d21bb5d7d839109e5577ebf39699f158445fe67da59c4f4f74589831ff0a454e46410bd089aade175c765502204dabbfa8b5a18178b792945ceeb08b", @generic="2078e6682fa42d0661ec15fa6d825f902abe89592f3f7420de160f1412da1ec32668cfc108607e7c96daf267b34f049184bfadcb91e90122092b4c84c78a4e01a477a2", @typed={0xc, 0x67, @u64=0x6}, @nested={0xc0, 0xefa4, [@generic="f484ea91744a8e483997981a8fe278b9658a34bebd7074cc581984bd05743cd5add33c565d761697c4399ef9ef331c4c2255eee174a0433c04a0d74435cf01548fa49c83de35c550f5652904c95d2176efe59ac8f8ec23eb6bb557605bba64515edc48c158b71b9ff71314ead6380aca23fefc0fbbc086d67545c9452022ac59c778bdcf349f95df11382140514994c8d7706d4c", @generic="b04e76c35dccae86992c47909f343a0bb9e7741491f4f370364794f169ed099ce756c158b52d"]}]}, 0x1208}, {&(0x7f0000001c00)={0x1220, 0x12, 0x8, 0x70bd2d, 0x8, "", [@generic="2c1dac6ced733363b8d8e12153e4a5ad5b6a5317d55df182d08140fc61f89487cccc9f07d18ab96a75326bf00dab95c161b27e8ea85fde504b60aa6ba5b1a3d5eaaff28656cde564b3f363c550a6db934cdba3eca3a78bc3dc85b5ca7ba26b4841e384a9cb3b586c873b84085795f446b2669f80a917317f5f458008bc9abe53320f0702448af82c027fe0e09a6e6a68581ea1f5ea088f56845c190ae104dc9b83f28dd7b4c9996eeab8c2e453cf16035db3c4622ffcebbc6f5fb185739b0467188a24946224677828dadad8a0b42dc3fff2042944f8313fad6825d74251fc6ccaa3fda8f15f41b4ee4e", @generic="31b2106342735fa8cb63029e9b70d35318383ff096efc4f5b303ba723b69906648499163e4b040c8dc24be4eea1b029a3a4dd4518970b403eb575e052f116abbea51c4c741ed7e1ee09ecc4593f59158dd6d9d21df2f14689ac791a050f12f2b537d35beebd2fbb2a351adef02f5083cf2807e2b7e9124", @generic="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", @typed={0x8, 0x8d, @ipv4=@multicast1}, @generic="5f5c48155b91bd1a1498f81155cfd5d5dd98dd4e888c58c15403ca427025130fceb9c6eef03ba0f4069622ca90f479f9bb1f09ac7e478c67c6d49b91655f201ee568db5af8c178609dfb3cc26801380474672b053ff8b0bbb9988cf12d0c4b9f5198e3b642492d4802740dd1a56cb699cbaaeba2e055fd56ce0d464e588528933b90bce544a97167531ec58126d54d8f21f1ab", @typed={0x14, 0x37, @ipv6=@ipv4={[], [], @rand_addr=0x524}}]}, 0x1220}], 0x4, &(0x7f0000003040)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r4, r6, r7}], 0x60}, 0x4000000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:08 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ppoll(&(0x7f0000000140)=[{r0, 0x180}, {r0, 0x2000}, {r0, 0x2400}, {r0}], 0x4, &(0x7f0000000200)={r1, r2+30000000}, &(0x7f0000000240)={0x80000000}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x8008}], 0x2, &(0x7f0000000040), &(0x7f0000000080)={0x8}, 0x8) 01:15:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x6b6b6b00) 01:15:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000280)=0xe8) r4 = getuid() getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000540)=0x0) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000700)=0xe8) r9 = getgid() lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f00000008c0)=0xc) r13 = getgid() fstat(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) lstat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000010007000000000002000000", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="02000500", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000400", @ANYRES32=r6, @ANYBLOB="02000200", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="040004000000000008000200", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="08f80100", @ANYRES32=r11, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="08000400", @ANYRES32=r13, @ANYBLOB="08000600", @ANYRES32=r14, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="10000200000000002000070000000000"], 0xa4, 0x3) 01:15:08 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x400000000000) [ 275.506038] device nr0 entered promiscuous mode 01:15:08 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x3) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:08 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:08 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x315, @dev={0xfe, 0x80, [], 0x1e}, 0x2}}, 0x5980, 0x81}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000140)={r1, 0xd6, "616aa4f2e02a20657aa9a22961280a5b1ef08151e33d40dc0ff0f977316b040cdc06a1a3ac2e6ffe947bcbc3fdd94e0ec6270333f4eac8c50e76161483cb80168a2234400f3656c60006f8577de8ab8db5097c5103f9b94b26ecaca293ae599e9fbf6ea79d024de320871f346f1da610d4e5d79da2eb9f66f42a29953617673c0c514e77344c94504f9c656cf7f1b3a4788b3544197ece756bd5049e4fe7b69c7b0b57f8182854e011d637626f06f9af12e57ea1e6a747fe62c9488f8128b1b58aa614ac4aa003554d3b2220db45adef86cda163c406"}, &(0x7f0000000240)=0xde) [ 275.784223] device nr0 entered promiscuous mode 01:15:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xdb, 0x2) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x2, 0x400, 0xcb, &(0x7f0000000180)="312e24ad01aeae54e962b83cf65511ac4245bdb1bb344748f25a9579c524c135e6cfb923385b59f401ca48e691606172ca52f72c09da6fa87fbecd4ca63ae8ad4a6c82e23ecc49b187d76fed49b6e634a6a45752f1625dda669c72d020f453d0901926cc702ff518d54fa2222e8ace688ddb6d33b33da66eae0e44126b0b0f7a33f9979a441185250dd4bf98715244d1715c8e872a04df0c2944ff3ac2118e4e0ae2e8a6027fa0d375eb66125ffda25624f69919eb349a2e686a34d64728bf32c779e155bd18b8b24b9007"}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 01:15:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000000000000) 01:15:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x1f}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x4}, &(0x7f0000000180)=0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:09 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0xffff8881870f5001) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x2000000) 01:15:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000040)={0x2c, 0x7, r1, 0x39, r0}, 0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:09 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) 01:15:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1f00) 01:15:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={r1, 0x6, 0x6}, 0x8) 01:15:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x3f00) 01:15:09 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) 01:15:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400100401000200027000f8", 0xfffffffffffffd8a}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/123, 0x7b) getdents(r0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) getdents(r0, &(0x7f0000000200)=""/63, 0x3f) accept$unix(r0, 0x0, &(0x7f0000000080)) 01:15:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0xffffffffffffffee, 0x6bc9}, {0x6, 0x7}]}, 0x14, 0x1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x10000000000000, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x1f, r0, 0x11) 01:15:09 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x7ffff000) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1e00) 01:15:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xfdffffffffff0f00) 01:15:09 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) write$P9_RSYMLINK(r0, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x27, 0x2, 0x8}}, 0x14) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x1ff, 0x10000, 0x7, {0x7, @raw_data="afa37f32ce336efb92ce3014f87cfd41e7b04bf6628acdeb257a776b7f107bbd232a0ed1a2e9b1b568161ddc87d2c1b533706a1fe495b341f3f63d094f87c00052d6b3cd971a582e310e879520c24aa77125806fd693e0c07151533337850f9584f961e4649d8a66a63aaa92660e8cdda0bab0514ea2bce8270b0cc300f1ad8116c5e2cbea6679e2ebab47c798610fbd0914ff7bcb5dbac106e478f54e07b03bb6557f14651043cd826c5ad2a9caba0d9c65bc3099b3b6b5dc25a8278005c2ee87c4d18058b0b03e"}}) 01:15:09 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$RTC_WIE_ON(r0, 0x700f) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff0748bedaffff", 0x11, 0x1c3}]) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:09 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x4000) [ 276.863619] device nr0 entered promiscuous mode 01:15:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000240)={0x401, 0x1ff, 0x80000000, [], &(0x7f0000000080)=0xfffffffffffff000}) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000100)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xde, "1cf9f4", "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"}}, 0x110) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000300)=0xd75, 0x4) prctl$PR_MCE_KILL_GET(0x22) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000280)={@rand_addr=0x4, @empty}, 0x8) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="8de36060ced0f0abce90048e8e6651a091ee84f240af1bcb4795adf1fc", 0x1d, 0xfffffffffffffffe) keyctl$describe(0x6, r1, &(0x7f00000004c0)=""/150, 0x96) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="ac141418ac141412010000000a000086d1000008e0000002ac14140dac141414ffffffffe000000100000040e0000001e000000100000000"], 0x38) r2 = syz_open_dev$media(&(0x7f0000000480)='/dev/media#\x00', 0x2, 0xfffffffffffffffe) fsetxattr(r2, &(0x7f0000000400)=@known='trusted.overlay.origin\x00', &(0x7f0000000580)='/dev/swradio#\x00', 0xe, 0x2) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000440)=0x2) [ 276.986814] device bridge_slave_1 left promiscuous mode [ 276.993724] Dev loop3: unable to read RDB block 1 [ 276.999348] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.028271] loop3: unable to read partition table [ 277.045028] loop3: partition table beyond EOD, truncated [ 277.057571] device bridge_slave_0 left promiscuous mode [ 277.063243] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.085291] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 277.107282] IPVS: ftp: loaded support on port[0] = 21 [ 277.238521] team0 (unregistering): Port device team_slave_1 removed [ 277.251397] team0 (unregistering): Port device team_slave_0 removed [ 277.262012] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 277.290426] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 277.374283] bond0 (unregistering): Released all slaves 01:15:10 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:10 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x6b6b6b) 01:15:10 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = getegid() setfsgid(r1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:10 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x0, 0x2) write$cgroup_type(r0, &(0x7f0000000140)='threaded\x00', 0x9) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x8) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000000)=""/189) [ 277.715450] device nr0 entered promiscuous mode [ 278.271077] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.277626] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.285047] device bridge_slave_0 entered promiscuous mode [ 278.331569] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.338558] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.346604] device bridge_slave_1 entered promiscuous mode [ 278.393970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 278.440828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 278.601629] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 278.652784] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 278.855491] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 278.862799] team0: Port device team_slave_0 added [ 278.892727] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 278.900370] team0: Port device team_slave_1 added [ 278.945626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.995001] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.024914] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 279.032497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 279.042659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.077122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 279.084281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 279.101825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 279.372564] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.378961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.385556] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.391960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.399395] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 279.506225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.344254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.437378] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 280.528166] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 280.534312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 280.547220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.631349] 8021q: adding VLAN 0 to HW filter on device team0 01:15:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x3f00000000000000) 01:15:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x8000, 0x50) 01:15:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x1ffffffffffffffe, 0x9, 0x20000000000001, {0x1, @sliced={0xb68e, [0x0, 0x80, 0x1f, 0x7fffffff, 0x27, 0xfffffffffffff44e, 0x4, 0x33e, 0x1, 0x3d9083b, 0x80000001, 0x4, 0x480000, 0x80000000, 0x80000000, 0x7fff, 0x400, 0x1, 0x7, 0x1, 0x5, 0x2, 0xff, 0xff, 0xffffffffffffff70, 0x7fffffff, 0x6, 0xffffffffffffff80, 0x7, 0x0, 0x1, 0x3, 0x9, 0xc80, 0x6, 0x1, 0x0, 0x101, 0x40, 0x9b8, 0xac, 0x26, 0x996, 0x1, 0x8f8, 0x6, 0x6, 0x8], 0x800}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x0, 0x6}, {0xab0000000}]}) r1 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x1010, r0, 0x63) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="046304400300000200000840", @ANYRES64=r1], 0xa6, 0x0, &(0x7f0000000200)="a7018f956e43c3656c6eacc425ded7b91aaea2113cc2166a585b46888031d2efb0a2c26de6085854307ab660239f447e86a7e2ca16583daf7e943d427565ddcd67dedf1e9f8e1d212b7a4d9a0c5a0eb04e4f8f3b06f6b5802eb530497a366dc61625ca5bfd87367d64f41b89fcf7daff7243584d35ab7a7e1eb28c0b516f6e39cd0682c124413e800b216ce6fa7e336146da82fa91219b07c02537940454b6f32f774bb49c4b"}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000340)={0xff, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @loopback}, 0x0, 0x0, 0x6, 0x3, 0x5, &(0x7f0000000300)='team_slave_0\x00', 0x3, 0x8, 0x12000}) fadvise64(r0, 0x0, 0x8, 0x3) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x3, 0x9, 0x10001, [], &(0x7f0000000000)=0x1}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000180)=0x4) 01:15:14 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x8) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:14 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x1e000000) 01:15:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x800000000000, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/217) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'bridge_slave_1\x00', {0x2, 0x4e21, @loopback}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:14 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000100)) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x80014, r1, 0xffffffffffffffff) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000280)) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r2 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) close(r2) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)={0x3, r1}) 01:15:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0xfffffffffffffec9}], 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 01:15:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:14 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x30, 0x4) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) 01:15:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x101010, r0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000080)={0x9}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000140)={{0x3, 0x4, 0x3, 0x4, 0xfffffffffffffffa, 0x9}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x401401}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x130, r1, 0x500, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x13}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe}}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x79}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @broadcast}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x8358}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x2, {0x1, 0x305, 0x54e, 0xfffffffffffffffb, 0x111e, 0x4800000000}}) [ 281.560268] device nr0 entered promiscuous mode 01:15:14 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:14 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="a7059c1c2776be3277b457098a0e6161", 0x10) 01:15:14 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0xfbc) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:14 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000) 01:15:15 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x20, 0x4) 01:15:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000040)={&(0x7f0000000000)=[0xe84, 0xfffffffffffffff7, 0xffffffffffffffff, 0x1], 0x4, 0x5, 0x3, 0x101, 0xfff, 0x80000001, {0x5, 0x1, 0x8000, 0x8b8b, 0x2, 0xb9b, 0x8000, 0x1, 0x800, 0x6, 0x3ff, 0x0, 0x7, 0x6, "1853ce5374d56f43c609092cd219b3deefee524f3e39325550cd539b802717fa"}}) ioctl$NBD_DO_IT(r0, 0xab03) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x2, 0x9, 0x8, 0x2, 0x6, 0x40, 0xfffffffffffffff9}) 01:15:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 01:15:15 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0xf000) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'veth0_to_team\x00', 0x6}) 01:15:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @sdr={0x3a47526d, 0x3}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000040)={0x1722, 0x0, 0x4, 0x2000000, {}, {0x3, 0xb, 0x57, 0x9, 0x0, 0x8, "da2352e0"}, 0x9, 0x4, @planes=&(0x7f0000000000)={0x0, 0x5, @fd=r1, 0x6}, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) 01:15:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000000)={{0x80000000, 0x114}, 'port1\x00', 0x1, 0x141050, 0x80000000, 0x0, 0x55, 0x10000, 0x8, 0x0, 0x3, 0x40}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/142, 0x8e}, {&(0x7f0000000240)=""/228, 0xe4}, {&(0x7f0000000340)=""/254, 0xfe}], 0x3, &(0x7f0000000480)=""/61, 0x3d}, 0x40) connect$packet(r0, &(0x7f0000000500)={0x11, 0x0, r1, 0x1, 0x5}, 0x14) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:15 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000180)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 01:15:15 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x11, r0, 0x0) 01:15:15 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) fcntl$notify(r0, 0x402, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x14, r0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000080)) [ 282.435210] device nr0 entered promiscuous mode 01:15:16 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:16 executing program 2: r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, &(0x7f0000000100)=0x34, 0x800) fcntl$setsig(r0, 0xa, 0x10) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x404102, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x40010, r1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r3, 0xb3, '\x00', "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"}}, 0x110) 01:15:16 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0xfffffffffffff000) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400100) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x3, 0x402) write$binfmt_elf32(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46010000000000000000000000020000000011000000000000380000000000000000000000810020000000000000000000000000000000000079b637d60000000000080000"], 0x48) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/117, 0x75}], 0x1) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 01:15:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000180)={0x4d178e4a}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x0, 0x6, 0x0, 0x7}, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000140)) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 01:15:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x40000, &(0x7f0000000180)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@rq={'rq', 0x3d, 0x3}}], [{@dont_appraise='dont_appraise'}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@dont_appraise='dont_appraise'}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@fsname={'fsname', 0x3d, 'GPLwlan0'}}]}}) 01:15:16 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=r1) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x6, 0x3, 0x9, 0xfffffffffffffffa, 'syz1\x00', 0x1}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x11, r0, 0x0) 01:15:16 executing program 2: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x80, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 01:15:16 executing program 5: r0 = socket$inet6(0xa, 0x806, 0xff) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0xbe5, 0x3, 0x0, 0x8, 0x1, 0x9, 0x4}, &(0x7f0000000240)=0x20) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000180)={{0x1, 0x3, 0x6e4, 0x3, 0x10000}, 0x80000000, 0x4}) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="0600906d6b66732e66617400100401000200027000f8ea49479471cf8b79e6ff68f7cc33548bdf7b29e664156c7e6b0a56ead8120d6f376cb5114fffec1f7b77d8ab43e6ade1bcc89a1b7b", 0x4b}], 0xfffffffffffffffd, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) 01:15:16 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x1f, r0, 0x0) 01:15:16 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7, 0x200000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000080)=0xf000) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x14400) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r2, 0x0) 01:15:16 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) write$selinux_validatetrans(r0, &(0x7f0000000040)={'system_u:object_r:lirc_device_t:s0', 0x20, 'system_u:object_r:systemd_notify_exec_t:s0', 0x20, 0x1, 0x20, '/usr/sbin/ntpd\x00'}, 0x72) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x180) [ 283.532378] device nr0 entered promiscuous mode 01:15:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:17 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x4) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x57d, 0x20002000) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r1, 0x5, 0xffffffffffff8000}, 0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:17 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) getdents(r0, 0x0, 0x0) 01:15:17 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @rand_addr=0x5}, 0x3, 0x2, 0x1, 0x2}}, {&(0x7f0000000000)=""/192, 0xc0}, &(0x7f0000000100), 0x20}, 0xa0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000240)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x3, r1}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000002c0)={0x9, 0x0, 0x7}) r2 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x0, r2}) 01:15:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r0, 0x4) 01:15:17 executing program 3: ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, 0xffffffffffffffff, 0x0) 01:15:17 executing program 2: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) 01:15:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x47c, 0x400800) 01:15:17 executing program 4: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x6, 0x500) perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0xd4, 0x9, 0x5, 0x42, 0x0, 0x80000001, 0x1240, 0x0, 0x8, 0x100000000, 0x97f6, 0xfffffffffffffff8, 0x0, 0x3, 0x4000000000000000, 0x10001, 0x1de00000000000, 0x4, 0xffffffffffffffff, 0x4, 0x6, 0x30, 0x4, 0x8001, 0x300000000, 0x80000001, 0xfffffffffffffffc, 0x1000, 0x1ff, 0xffffffffffffff01, 0x8, 0x26, 0x0, 0x9, 0x1000000000000000, 0x7, 0x0, 0x6, 0x4, @perf_config_ext={0x8, 0xd}, 0x200, 0x401, 0xffffffff, 0x6, 0x6, 0x8001, 0x80000000}, r0, 0x3, r1, 0x1) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfa) [ 284.425946] device nr0 entered promiscuous mode 01:15:17 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/141) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x2) setsockopt$inet_dccp_int(r0, 0x21, 0x10, &(0x7f0000000100)=0x400, 0x4) 01:15:17 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x10) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:17 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfff, 0x7, 0x45dd6d4adca4a506, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000019c0)={{{@in6=@ipv4={[], [], @dev}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f00000002c0)=0xe8) getresuid(&(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001380)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000016c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1141038}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x800}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)="7872ff2dec25248dae0c", 0xa, 0x9}, {&(0x7f0000000180)="bc4a6f9bf76270951d7944eb593e8966f94dc99687be473aeef17d5d479bef92710937e0284e96d3a9e0df6ac3e49ecadec488e82634bfd7233e0d19d549de3853be152dc167fbd465ed32e0102a2b31dc62e13f13112ea0c6318d21dfff713e5142494c10ade86a69a2adc8864e62314ef3cef3a8d4b7e371b4332d7beca3317a90d45f52da59fe2e93506bb8ee2b7baf76305adec251016ecc32", 0x9b, 0x9}, {&(0x7f0000000340)="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", 0x1000, 0x6}], 0x2, &(0x7f0000001500)={[{@file_umask={'file_umask', 0x3d, 0x6}}, {@part={'part', 0x3d, 0x400}}, {@file_umask={'file_umask', 0x3d, 0x5}}, {@part={'part', 0x3d, 0x80000001}}, {@part={'part', 0x3d, 0x6}}, {@part={'part', 0x3d, 0x8}}, {@quiet='quiet'}, {@creator={'creator', 0x3d, "63a5e938"}}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@uid_eq={'uid', 0x3d, r1}}, {@uid_eq={'uid', 0x3d, r2}}]}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000001640)={0x100000001, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e22, @remote}, 0x40, 0x2, 0x1, 0x1, 0x3, 0x0, 0x3, 0xb454, 0xfffffffffffffffb}) getdents(r0, 0x0, 0x1f9) 01:15:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000000)={0x0, 0x6d1, [], @raw_data=[0x1, 0xfffffffffffffe01, 0x8, 0x81, 0x2, 0x9, 0x6, 0x6, 0x3, 0x7ff000000, 0x8, 0x80000000, 0x80f7, 0x3ff, 0xfffffffffffffeff, 0xffffffffffff9ec1, 0x0, 0x80000001, 0x8, 0x3, 0x8, 0x5, 0x80000000, 0x9, 0x3, 0x7, 0xffff, 0xff, 0x6, 0x40, 0x4, 0xa5]}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x40, 0x0, 0x0, 0x9, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r1, 0x7, 0x30, 0x5, 0xffffffff}, &(0x7f00000001c0)=0x18) 01:15:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x88010, r0, 0x0) 01:15:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000000)=""/65) accept$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x3, 0x0, &(0x7f0000000280), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e22, @empty}}, 0x1, 0x8}, &(0x7f00000000c0)=0x90) acct(&(0x7f0000000240)='./file0\x00') setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r2, 0x2, 0x20}, 0xc) 01:15:18 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:18 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x300) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 285.233613] FAT-fs (loop5): bogus number of reserved sectors 01:15:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x8000001, {0x3, @win={{0x7fffffff, 0x4000000000000000, 0x7fff, 0x7fffffff}, 0x4, 0x0, &(0x7f0000000080)={{0x6, 0x2, 0x381, 0x4}, &(0x7f0000000040)={{0x2, 0x2, 0xfffffffffffffff8}, &(0x7f0000000000)={{0x4, 0x5, 0x80, 0x8}}}}, 0x8, &(0x7f0000000100)="ecd38d6a9f62e8a1af50025498c63c71c7ebd803be2730557b084b7aa22fa8ffebf9d4354dc279c16388010b2cac8e6eeb8528801c1de493a8ed67c91528fb4bcf575d7bc0cc80da26f7108328a28ae04c33c1333b53f70fea364937b32a3cdb50c0b102a4b8666927eb9d5a5f49ca4b2a90df19747b77d08d732ddee23bb226a0", 0x2}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x12a00, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@mcast2, @mcast1, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0xe167, 0x3, 0x4, 0x0, 0x2, 0x2000000, r1}) 01:15:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000044}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r1, 0x820, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xf}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) [ 285.278466] FAT-fs (loop5): Can't find a valid FAT filesystem 01:15:18 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x100000000, 0x200) ftruncate(r0, 0x3) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000280)={0x4, 0x3, 0x5, 0x20}) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x40, 0x80) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0xfffffffffffffff8}, &(0x7f0000000100)=0x8) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000640)=""/251) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0xac, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x46b4, @loopback, 0x2}, @in6={0xa, 0x4e20, 0x80000000, @remote, 0x3ff0000}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, [], 0x14}, 0xd78}, @in6={0xa, 0x4e21, 0xfffffffffffffff7, @ipv4={[], [], @remote}, 0x9}, @in6={0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x13}, 0x1}]}, &(0x7f0000000240)=0x10) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000040)) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) [ 285.386475] FAT-fs (loop5): bogus number of reserved sectors [ 285.424484] FAT-fs (loop5): Can't find a valid FAT filesystem 01:15:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000000)={0x1, {0x77359400}, 0x4, 0xff}) 01:15:18 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xde, 0x3}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0xe21a}, 0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000100)=""/221) 01:15:18 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:18 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x10) sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x100027e, 0x0) r2 = semget(0x2, 0x4, 0x8) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000100)=""/96) 01:15:18 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000340)=0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x5, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000180)={0x10007, 0x0, &(0x7f0000ffe000/0x2000)=nil}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000200)={0x28, 0x2, 0x0, {0x2, 0xdd, 0x5}}, 0x28) write$P9_RLINK(r0, &(0x7f00000001c0)={0x7, 0x47, 0x1}, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e22, 0x7, @empty, 0x40}}}, 0x38) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000380)={0x1ffffffffffffe47, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000300)={r1, 0x1}) 01:15:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) mq_timedsend(r0, &(0x7f0000000080)="a2e12c0f6417d3d04731fd8eff0b7c4a6bc955c8379c861d814cca56594086af35ac2ab3f2df76c28bdf97fd4363c929ca151c3331f9cc3c8abee05ec2136c3c31edb39e3e368a83bacaf80d17743718a937307c4596de56666afa559b35b1231c11bd716c5d076b818381d123e088", 0x6f, 0x7, &(0x7f0000000180)) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 01:15:19 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(0xffffffffffffffff, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:19 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r1}}, 0x18) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 01:15:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000)) 01:15:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=r1) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) 01:15:19 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x12, 0x1, 0x9, 0x3, 0x0, 0x70bd27, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x8}]}, 0x18}}, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x2, 0x13, 0x800000000000000, 0x7, 0x41, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x100000000}, @sadb_x_sec_ctx={0x18, 0x18, 0x1, 0x3, 0xb7, "8f5ebf870e928b8c2bc896d90f8606cd8be382dd84cdc6a4b27efb77640a6dd15eaa65cf78aedbcdfb73ff004435f3d2daeeb7160510636b3790d72b58e69c0a745b5e6b699f3117702161a1e246fdf866ffd1b53fc3c69e286ace9f9fc537eca2159451b6045d1cbf4cd00fa7c6161cfce30acde70d1a717f988af47cd944da03f6ca40f6346199dd726f0b300b652dca167aa8488542957b5162025ad074cb0bdf30aafc654506de4d402cc49c6a12abda1275dc1269"}, @sadb_x_sec_ctx={0x18, 0x18, 0x68cc, 0x10001, 0xb5, "2fb29397bd2a95913441070b2383bc20939b76a01e4c5021fe2653f6c34fea254668bf0a7c3e1e19abb141bb238325b821c99102229065a5298f93fe7a3d3b68bfb4bbb2edc30a402318466d367ef4104fa298c88430a36b9efa16418a8cdab2032e316617cdb59f674f5831cc76daea017473bd7b281bbe76f59e8580dda9483240621759dd41d68e64df91f70cd3a44e84ccf375c370c5337733d7bce123ce5a386be6109f09bdac2f397d6fa5b217eab37ec2fe"}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0x9}, @sadb_sa={0x2, 0x1, 0x4d2, 0x930b, 0xfa8c, 0x49, 0x1, 0x40000000}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e21, 0x20, @remote, 0x4}, @in6={0xa, 0x4e21, 0x9, @remote, 0x9}}, @sadb_ident={0x2, 0xb, 0x100000001, 0x0, 0x9}]}, 0x208}}, 0x8000) 01:15:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:19 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000000000000000000000010000000000000000000bc8012800"]) r1 = getpid() r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x4000, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000004c0)={0x0, 0x8}, 0x8) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000540)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x4000000) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000480)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000340)=0x4) ftruncate(r7, 0x2007fff) syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000500)) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000000)=r1) write$P9_RXATTRCREATE(r7, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) write$P9_RSETATTR(r7, &(0x7f0000000040)={0x7}, 0x7) sendfile(r4, r7, 0x0, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) 01:15:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x800000001, {0xdc3ccce7ed49d0ee, @pix={0x0, 0x1f}}}) write$FUSE_NOTIFY_POLL(r0, &(0x7f00000002c0)={0x18, 0x1, 0x0, {0x3f}}, 0x18) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x9b, {0x7fff, 0x100000000, 0x300f, 0x0, 0xf, 0x2, 0x3, 0x2}}) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f00000001c0)=""/154) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x9, &(0x7f0000000100)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000280)={0x0, 0x1, 0x5, 0x10, &(0x7f0000ffd000/0x2000)=nil, 0x3}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000180)={r1, 0x25678ef2490db234}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xfffffffffffffffc, 0x11, r0, 0x0) 01:15:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x1c5) [ 286.381185] device nr0 entered promiscuous mode 01:15:19 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000140)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1000000003d}) 01:15:19 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) write$P9_RRENAME(r0, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) [ 286.514081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.552789] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.731857] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 01:15:20 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, 0x0, 0x0) socketpair(0x19, 0xe, 0x0, 0x0) 01:15:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) getdents(r0, 0x0, 0x0) 01:15:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x7}, 0x1c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:20 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x33) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000100)) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:20 executing program 2: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000015c0)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) syz_mount_image$iso9660(&(0x7f00000001c0)='iso9660\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x3, &(0x7f0000001540)=[{&(0x7f0000000240)="2ecba0390c3082761e79d4ea0c35f2833255432d2af6cf66f0ce0cccae6e6b03e9e9bb3941a1612cd6e37834e9f15d096b9005f426e7483f074597f98411bad49794092ca2b76ee3bb287851646be7af7d905246ecebcca6e4ed8ad1db925a86bd509938372c35513f5862f98efaa59e360c1d52b18cc24413fdf337215fedf3e8136088e874430571ca4a7b5252c6afb3cd8debb43388da13d433aec48ca1a110d6b068fc2096", 0xa7, 0x10000}, {&(0x7f0000000440)="d904d8b9073bbc850cfbd8432ac2b87a8785759327ebe2da3fb8e044746a336e809ba80192781cb1650094a6425e6b9a6ab7a5e1d9281236c16d945b9fa82935e3889bee5c78781697579a51698f1f54b076bd2f0c9961c35cb386f5cec440ae57f40dcbf1736b69259d2b7fbe3cd618a5858b8a906c8ef33f4541c8484ac2564b9e3f911864f44c620b1ffc985c1ad6a8469b92747120eb1ab17c3e630c595dbe95b0ce55dd8415ef0cb833be0c55fcecb69b2bf4459150a93e1eecfa16a2669771de5429720626242a851925850ea73f1c4481fa8e2c30031ab835", 0xdc}, {&(0x7f0000000540)="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", 0x1000}], 0x800, &(0x7f00000016c0)={[{@check_relaxed='check=relaxed'}, {@dmode={'dmode', 0x3d, 0x2}}, {@check_relaxed='check=relaxed'}, {@hide='hide'}, {@norock='norock'}, {@iocharset={'iocharset', 0x3d, 'cp861'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '^*\\vmnet1#!trustedsystem['}}, {@euid_gt={'euid>', r0}}]}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) link(&(0x7f00000017c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x480e0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname'}}], [{@rootcontext={'rootcontext', 0x3d, 'root'}}]}}) 01:15:20 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x80) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @broadcast, @local}, &(0x7f0000000240)=0xc) getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bcsf0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000480)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000000580)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000009c0)={@remote, 0x0}, &(0x7f0000000a00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000c40)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000d40)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000001180)={@dev, @broadcast, 0x0}, &(0x7f00000011c0)=0xc) getpeername$packet(r0, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001300)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001340)={'erspan0\x00', 0x0}) getpeername$packet(r0, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000013c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001400)={'vlan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001680)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in6=@dev}}, &(0x7f0000001780)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000017c0)={{{@in=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000018c0)=0xe8) fgetxattr(r0, &(0x7f0000000280)=@known='com.apple.FinderInfo\x00', &(0x7f00000005c0)=""/232, 0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001e00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80008004}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001900)={0x48c, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xcc, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x483}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0xaef, 0x746, 0xfff, 0x5}, {0xa5c5, 0x9, 0x7, 0x81}, {0xb50, 0x5, 0x0, 0xfffffffffffffff9}, {0x1, 0x10000, 0x6, 0x7}]}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xf0, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x3c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r13}, {0x184, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r17}}, {0x8}}}]}}]}, 0x48c}, 0x1, 0x0, 0x0, 0x80}, 0x48010) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:20 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x4000) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xf) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 01:15:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x6db1, 0x2, {0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}}) 01:15:20 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 01:15:20 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x600000000000000}, 0x1) 01:15:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000040)={0x0, 0x7fffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_setattr(r1, &(0x7f0000000080)={0x30, 0x1, 0x1, 0x400, 0x100000000, 0x10, 0xfff, 0x4}, 0x0) [ 287.319482] device nr0 entered promiscuous mode 01:15:20 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:21 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x0, 0xe, 0x0, 0x0) 01:15:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x80, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$KDDISABIO(r0, 0x4b37) getdents(r0, 0x0, 0x0) 01:15:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x33, @empty, 0x4e23, 0x1, 'lc\x00', 0x12, 0x7, 0x41}, 0x2c) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000040)={0x0, 0x8, {0x54a2, 0xad, 0x9}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:21 executing program 4: inotify_init1(0x80000) r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:21 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x7, {0x5, 0x7fffffff, 0x0, 0xc, 0x0, 0x7, 0x1, 0x7}}) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000180)=0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000340)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) 01:15:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000140)=""/4096, 0x1000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xfff}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, &(0x7f0000000100)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82200, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x2, 0x8, &(0x7f0000000040)=0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xeb, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16, 0x3}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000200)={0x20, 0x0, 0x1, {0x2, 0x4, 0x3b, 0x7}}, 0x20) getdents(r0, 0x0, 0x0) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x10, 0x10001) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) write$FUSE_OPEN(r0, &(0x7f00000001c0)={0x20, 0x0, 0x6, {0x0, 0x7}}, 0x20) 01:15:21 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000000)) 01:15:21 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10, 0x80800) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) [ 288.199590] device nr0 entered promiscuous mode 01:15:21 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x280040) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000780), 0x4) fanotify_init(0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname$llc(r2, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0xfffffd60) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getpriority(0x0, 0x0) syslog(0xa, &(0x7f00000007c0)=""/138, 0x8a) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)}}], 0x1, 0x100, &(0x7f0000001000)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00'}, 0x2c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 288.297320] FAT-fs (loop5): bogus number of reserved sectors [ 288.340387] FAT-fs (loop5): Can't find a valid FAT filesystem [ 288.434080] FAT-fs (loop5): bogus number of reserved sectors [ 288.446276] FAT-fs (loop5): Can't find a valid FAT filesystem [ 288.500552] tls_set_device_offload_rx: netdev lo with no TLS offload 01:15:22 executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x0, 0x0, 0x0, 0x0) 01:15:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0xa20000, 0xa7e, 0x1, [], &(0x7f0000000040)={0x9909d3, 0x401, [], @p_u8=&(0x7f0000000000)=0x4d9}}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x50) getdents(r0, 0x0, 0x0) 01:15:22 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x8000) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000200)="41838b292f52bb070671aba941a09c2a9d149874d5769191884065f679cf3f5e031ab8f619c69a2422293413d5da066f6ecc91572a69e7c2780ffb7618af8af4710f83f8318fbc7240d94d8068c9d2c662026f10a5dd9f318c0df15e815d8a35457a3627877311938ee4c5b2199ec9c835b62bd7bfaa9fca1bdfbb229cde36e1c4da5e9e840a0cff45b350eebdda9acca15a77564593b2691f9f4b0690ff6af01b46129dad652784e0a0de250d700d248e185b0cd12405123551bbc897171fb7abfa684977b663ddb312ec") mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffd, 0x11, r0, 0x8010000) 01:15:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0x800000000000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x9, 0x7}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0x90, "a1fa81a398413e3590863bc30422d52a48fc4169eb2c30e917725cb258851f9e0105ce3903f14d856d40cf091c69079ac2d36a1247f64233e6c15502f963bc37cf4e0b6ae5677da1953201684a96310764afaa0534ab345226065848c449eb72dfdf0a82a49cfbabf8efb38fe3943bf9e746f8bdbd3ba3c3399db30b9427b7095c68e466d1ee67e0187351aa76a08425"}, &(0x7f0000000200)=0x98) 01:15:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe007, 0x1, &(0x7f0000000180)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) getdents(r0, 0x0, 0x0) getpeername(r0, &(0x7f0000000080)=@un=@abs, &(0x7f0000000000)=0x80) 01:15:22 executing program 3: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000100)={{0x3, @addr=0x7}, 0x8, 0x2, 0x7}) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400026100, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) 01:15:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 01:15:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x1d, r0, 0x0) [ 289.171522] device nr0 entered promiscuous mode 01:15:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={r1, 0x10000, 0x40, 0x0, 0x0, 0x9, 0x10001}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) sched_getaffinity(r1, 0x8, &(0x7f0000000000)) getdents(r0, 0x0, 0x0) 01:15:22 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000000)=""/123, &(0x7f0000000080)=0x7b) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x9, 0x7, 0x0, {0xb, @pix={0x5, 0x7fff, 0x7b777f7f, 0x9, 0xc04, 0x7, 0xb, 0x37, 0x1, 0x3, 0x2, 0x7}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x3) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc4010000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r1, 0x102, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24008001}, 0x4000010) memfd_create(&(0x7f0000000380)='/dev/swradio#\x00', 0x4) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) syz_open_dev$video(&(0x7f00000003c0)='/dev/video#\x00', 0x5, 0x18402) 01:15:22 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x50, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14000001}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd8, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2852}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x51}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lo\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x46}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r1, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000001", @ANYRES16=r3, @ANYBLOB="08002bbd7000fcdbdf250f00000024000100080001000a00000008000900650000000800050001000000080004004e230000080004000900000008000400ff0f0000080006007f0000002c00020008000b000200000008000b0002000000080004000300000008000500090000000800030001000000400002001400010000000000000000000000ffff00000000080005007f000000080009000300000008000600ffffffff08000b00020000000800090027b91963"], 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 01:15:22 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 01:15:22 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) prctl$PR_SET_TSC(0x1a, 0x2) ioctl$KDENABIO(r0, 0x4b36) 01:15:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x280040) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000780), 0x4) fanotify_init(0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname$llc(r2, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0xfffffd60) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getpriority(0x0, 0x0) syslog(0xa, &(0x7f00000007c0)=""/138, 0x8a) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)}}], 0x1, 0x100, &(0x7f0000001000)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00'}, 0x2c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000000)={0x6, 0x3f}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1, 0x3f8, 0x35444431, 0x6, 0x5}) r1 = getpgrp(0x0) setpriority(0x2, r1, 0x1) sendto$unix(r0, &(0x7f0000000240)="f8fb99c34850668aa149d43b84b899dd5a592c86826b201a3b78257a564fb226ac9be9aa59dbf4cd2e812397b77a4f09c02961d089fe20a888dc3c10aabae84439d901883747764b073008f8e10ccbb4ac3fc994c88c66cfe52607d56f17ae2437bd9d36148fae94d387434c5d3389c03bf63d54221fd99be3611155be913b5428695380942bfba4c74ab092360d2faec5c4dfaa16fb5831d31ce001d8d08e9a1b2e2d35f20dc9114a2d56d63d5b70823ac2912f3f072ee04b67e5c9282dda73ee317a9dafb29eef9abaa966953b1983a8f9552d9e171974b3b06ebea44ba4291ddefc3f520bf3af4d786788aca3322b04e7b4113e777b", 0xf7, 0x10, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', r0}, 0x10) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="73a795149707cbea4777be6e5a"], 0x7, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000100)=0x460000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) memfd_create(&(0x7f0000000200)='keyringsecurityvmnet0\x00', 0x1) 01:15:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/46) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x6, 0x2, 0xbf, &(0x7f0000000000)="cb5cb63f731dbea0f91184a7b878779c44fa96775f4c668a79b02fe11203bbb65f568bec61db736bbfcf636ec6ae69218ae9d0332ccbabdb608b1e724c8acc3e576b1e77d977030908f0bf885c75ecac416cc8250599bff84442009354cb0b9af8e1de59bca0e71be6b014d8f939905142f9c2b201426e6a7de95b56d4c6f47c5e775abce0f6cc630acc1d7fb1cafddbd5a6539cfeec0af8ae361f8a0370608f1e00b496ea2441adc04da00f3f2b907b45de5ba979d13983dd833f3f4488b3"}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) fcntl$setsig(r0, 0xa, 0x13) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 290.054906] tls_set_device_offload_rx: netdev lo with no TLS offload 01:15:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800020}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x98, r1, 0x202, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x67}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x98ed}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4e0}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x1) 01:15:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x950, r0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x7e9d03c6, 0x7, 0xffff, 0x3}, 0x10) 01:15:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x280040) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000780), 0x4) fanotify_init(0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname$llc(r2, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0xfffffd60) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getpriority(0x0, 0x0) syslog(0xa, &(0x7f00000007c0)=""/138, 0x8a) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)}}], 0x1, 0x100, &(0x7f0000001000)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00'}, 0x2c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0xffffffff00000001, 0x9]) 01:15:23 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000000)="73201800026c6c00") ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x5, 0x0, [{0xc000000f, 0x8001, 0x5, 0x5, 0x7, 0x2, 0x1}, {0x80000019, 0x9, 0x4, 0x7, 0x9, 0x4, 0x5}, {0xa, 0xfffffffffffffe01, 0x1, 0x7ad3, 0x74f80000, 0x8, 0xffffffffffffffaf}, {0x7, 0x8, 0x0, 0x0, 0x100, 0x0, 0xff}, {0x0, 0xd701, 0x0, 0x2, 0x2, 0x8, 0x2}]}) sendfile(r0, r2, 0x0, 0x1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="490000000000000002004e2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e220000020000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x110) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000200)=0x54) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 01:15:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xf, 0x100, 0x0, {0x3ff, 0x6, 0x100000, 0x4}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000200)={r0, r0, 0x200, 0x1, &(0x7f0000000100)="194b49747018e4e4b4c8565641ce6bf9a6e6388e6d969cd5a85ed2da0c76075eb34eb5ad8613b725910cfe12a0b02688c00fc94e28776ede0aa856b828a5f1ce006da87696a1d2fff7b53203b1095a988e6bfe84117f8ac6cdf301cbdbba12ddf8268c127df999fc63b39cee2d40680ee2b288c3e5803272f41af09a5efc7443dd5af7f10400884c1167e8b995eb9c499b0db517b1b0a1d9b68fc3e0ace0e51ac7d100d6c4cfe95bd2d83be66a0abc8933c267048b19748c850a6023b0594f395d611b1c08fe93baf87e53caf9497ae4", 0x1, 0x2, 0x5, 0x1, 0x447, 0x7fff, 0x6, "d4cd85c4cdfa4e3c0288d8dbc5c390216af32c28350912ce0273dfbaf1c1d325b081c29ecdf8023057c905b370f1ed69966577a9a15c0b11a4a03e93c48234dcb45b83ced3b644bbb0d6c4b53655e3509175d4a168cae44cf67cc811a79c510987eb5f643a4cdd9b56329e859333324934a3b697f67cb9c6ab86d00e352af9a9f37f"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000000)={{0x1000, 0x6}, {0x8, 0xfffffffeffffffff}, 0x6, 0x6, 0x4}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x13, r0, 0x0) getsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000080), &(0x7f00000002c0)=0x4) [ 290.321988] tls_set_device_offload_rx: netdev lo with no TLS offload 01:15:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) memfd_create(&(0x7f0000000000)='/dev/swradio#\x00', 0x5) 01:15:23 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x280040) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000780), 0x4) fanotify_init(0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname$llc(r2, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0xfffffd60) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getpriority(0x0, 0x0) syslog(0xa, &(0x7f00000007c0)=""/138, 0x8a) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)}}], 0x1, 0x100, &(0x7f0000001000)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00'}, 0x2c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) epoll_create(0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 01:15:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) close(r0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000180)="1d80dc655b3e547bc75367a34fddbb8aaa1e8c69fb2d9fc372268a43ffeac03c68a2e20cbf73aba4d9a49d7ece31870b2a76577074d0223bb0a7ba17d69b3fc63f5bd4f30d6b87a3b24de15cf010c1216bd0132c91a21f69c22b446cccc1a0dfd1795ef5c957c53cb2e4845cebd87fbcaaa4647689106f7b42ebf385a241252d8799c736392f7d591d5c3ce819343dffa9cd206b598707238eca29bae510b8ef4bde13d1f405147748b77623c14e01") ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x7fffffff, 0xffffffffffffff80, 0x4, {0x0, @pix={0x80000000, 0x7f, 0x47595a53, 0x7, 0x3, 0x80000001, 0x0, 0x5, 0x1, 0x7, 0x1}}}) 01:15:23 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000014c0)={'ip6g2e0\x00'}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f00000019c0)=""/246, &(0x7f00000004c0)=""/4096}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(0x0, 0x0, 0x0) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x1100000000000000, 0x1100, 0xaa, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000018c0)="f4001100002b2c25e994efd18498d66205baa68754a3000000000200000000000000000000ffffff8400000000000000c00195c1e2d4f32ebdbed828", 0x3c}], 0x1}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x3e, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="04630440010000000c630000a62994ac11c0c0b340d1c08c22ba06c0acfb33f5e3aef374687adce003288c331caf08817127d607ef2ef8d4c1eb388593e2"], 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x21, 0x8}, 0x10) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000002c0)={0x200000000001}) close(0xffffffffffffffff) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0xff) bind$alg(0xffffffffffffffff, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-aesni\x00'}, 0x58) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001600)={&(0x7f0000000480)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000001540)) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x800, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r4 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r3, r4, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f0000000000)={0x5, 0x0, 0x800}) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 01:15:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) mmap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0xfffffffffffffffd, 0x11, r0, 0x20000) 01:15:23 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, "f39db5f05afad4c0e45b225125a7"}, 0xf, 0x3) [ 290.727647] tls_set_device_offload_rx: netdev lo with no TLS offload 01:15:23 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x32, r0, 0x0) 01:15:23 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x5b) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:23 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000040)=0xfffffffffffffffd) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0xe, {0x9, 0xaa6, 0xffffffffffffffff, 0xfffffffffffffff8}}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 01:15:24 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x280040) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000780), 0x4) fanotify_init(0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname$llc(r2, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0xfffffd60) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getpriority(0x0, 0x0) syslog(0xa, &(0x7f00000007c0)=""/138, 0x8a) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)}}], 0x1, 0x100, &(0x7f0000001000)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00'}, 0x2c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:24 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000100)={0x0, @bt={0x3, 0x7, 0x1, 0x0, 0x8, 0x8, 0x2, 0x80000000, 0xffffffff, 0x3e56d11, 0xb8, 0x4, 0x200, 0x3, 0x2, 0x1a}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000000)=0x4, 0x4) 01:15:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x400000ffff, 0x9, 0x5, {0xb, @pix_mp={0x0, 0x400000004000000, 0x3533374d, 0x7, 0xc, [{0x401, 0x1}, {0x0, 0xffffffffffffff7f}, {0x6, 0x6}, {0x3}, {0xff, 0xffffffffffffff81}, {0xffffffffffffffc0, 0x4}, {0x3}, {0x4, 0x4}], 0x8001, 0x7, 0x8, 0x3}}}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x100000000, &(0x7f0000000040)=0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) 01:15:24 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) clone(0x200401ff, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x20) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x4e, 0x0, 0x5, "b8273c4adce7bc3327192de85fe7a13e", "673ffdc362e2945b1967332f8143e85cd33344365e94550ff697f717ee9d75e1f8bb0c089664c23957688ee9e0302efc0e1d57b372d8f2148c"}, 0x4e, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000300400000000000050020000000000000000000050020000600300006003000060030000600300006003000004000000", @ANYPTR=&(0x7f0000000bc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000008000000000000000000d53e14df705a89027d19d1fc8b8269c21d02faef1dd2a72eb252acd39c16649cc763dcc805e5fa9311354f7255a46ee7fa3e36391815efe689be78f087c6d081bfa73a720a79069f8212682490ed1356ae41d7c00b01c855fc24abd8ee946923cc8b1a1c2d3fc9c8e52eaa05"], @ANYBLOB="fe800000000000000000000000000012fe8000000000000000000000000000bbffffffffffffffff000000ff00000000ff000000ffffff00ff0000ffffffffff65727370616e30000000000000000000726f7365300000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e003f0620000000000000000000000000000000100138010000000000000000000000000000000000000000000000004800647374000000000000000000000000000000000000000000000000000000030000000101ff0f03000600000140beff03f599540a0000f9ffb902010002000400020080000200280052454a4543540000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000028006d680000000000000000000000000000000000000000000000000000000000040000000000002800534554000000000000000000000000000000000000000000000000000001740709fd000001ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800100100000000000000000000000000000000000000000000000048004c454400000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000109000000a8faffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x490) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x80000, 0x0) exit_group(0x3f) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000100)={0x80, 0x4, 0x400, 0x3, 0x0, 0x8fc2, 0x1000, 0x80000001, 0x20, 0x1f, 0x6, 0x9}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000940)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000980)={0x1b0, r4, 0x104, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffff53d2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x45}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x28}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4a}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @empty}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x67e484f4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8090}, 0x4000000) open$dir(&(0x7f0000000000)='./file1\x00', 0x100027e, 0x0) 01:15:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0xffffffffffffffc1, 0xa, 0x4, 0x100000000, 0xffffffffffffffff, 0x5, 0x80000001, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x6, @mcast1, 0x8}}}, 0x84) getdents(r0, 0x0, 0x0) 01:15:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video0\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000100)={0x0, 0x4, 0x1, {0xd, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x40010, r0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0xfffffffffffffffc) 01:15:24 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'bcsf0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x8000, 0x7, 0x476e, 0xf1, 0x1000, 0x2, 0x101, 0x3}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000000)={0x3, 0x9, 0x200b, 0x7, 0x69, {0x300000000, 0xfffffffffffffff7}}) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:24 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x280040) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000780), 0x4) fanotify_init(0x0, 0x0) r3 = socket$inet(0x2b, 0x1, 0x0) getsockname$llc(r2, &(0x7f0000000700)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000002c0)=0xfffffd60) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) getpriority(0x0, 0x0) syslog(0xa, &(0x7f00000007c0)=""/138, 0x8a) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r3, 0x11a, 0x2, &(0x7f0000000140)={@rand_addr=0x3033300, @multicast2, @loopback}, 0x28) recvmmsg(r3, &(0x7f0000000f00)=[{{&(0x7f0000000dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000e80), 0x0, &(0x7f0000000ec0)}}], 0x1, 0x100, &(0x7f0000001000)={0x77359400}) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @broadcast, 0x0, 0x0, 'ovf\x00'}, 0x2c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000001080)=ANY=[], 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000340), 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000001e000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000040)="660f3a177c564b0f019a27dbbaa000ec66b9800000c00f326635000400000f30360f01dfba6100b81bffef66b9910300000f3236876a0066b9800000c00f326635002000000f30f226260f01df", 0x4d}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 291.146694] tls_set_device_offload_rx: netdev lo with no TLS offload 01:15:24 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000100)={"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"}) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) pwrite64(r0, &(0x7f0000000040)="092d70589705f43839c728d59f066f4c47ad537dcec88832005e0f18649e79667769f2f831eb908833e7e4465649e86af54bd197a7c5ada9dcdd200aa55884fbd21eec8f7dd7947867ad2c83d68ba1c5fb74d954afca0628961e267bc7398c19738aa30c5536d40109e9f8cc8ad031ce72956c74af0ae459dc838b61", 0x7c, 0x0) lseek(r0, 0x0, 0x2) 01:15:24 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000000)={0x2, 0x9, 0x8, 0x2, 0x6, 0x40, 0xfffffffffffffff9}) 01:15:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 01:15:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x0, 0x70bd2b, 0x25dfdbfb, {0x0, r1, {0xf, 0xc}, {0x10, 0xd}, {0xffff, 0xfff2}}, [@TCA_RATE={0x8, 0x5, {0x3ff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x6, 0x6, 0x1, 0x0, 0xfffffffffffffffa, 0x8, 0x200, 0x8, 0x3, 0x3a3e64fd, 0x80, 0x7, 0x4, 0x8, 0x0, 0x20}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) [ 291.376971] tls_set_device_offload_rx: netdev lo with no TLS offload 01:15:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) write$P9_RXATTRCREATE(r0, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) 01:15:24 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x1ffffffffffffffe, 0x9, 0x20000000000001, {0x1, @sliced={0xb68e, [0x0, 0x80, 0x1f, 0x7fffffff, 0x27, 0xfffffffffffff44e, 0x4, 0x33e, 0x1, 0x3d9083b, 0x80000001, 0x4, 0x480000, 0x80000000, 0x80000000, 0x7fff, 0x400, 0x1, 0x7, 0x1, 0x5, 0x2, 0xff, 0xff, 0xffffffffffffff70, 0x7fffffff, 0x6, 0xffffffffffffff80, 0x7, 0x0, 0x1, 0x3, 0x9, 0xc80, 0x6, 0x1, 0x0, 0x101, 0x40, 0x9b8, 0xac, 0x26, 0x996, 0x1, 0x8f8, 0x6, 0x6, 0x8], 0x800}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:24 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000080)=0x68) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x20004801) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000600)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r4 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r3, r4, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) 01:15:24 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0xa000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r1, 0x0) 01:15:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x121202, 0x0) 01:15:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x0, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffffffffffff0001}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r2, 0x2}, &(0x7f0000000100)=0x8) 01:15:24 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x0, 0x70bd2b, 0x25dfdbfb, {0x0, r1, {0xf, 0xc}, {0x10, 0xd}, {0xffff, 0xfff2}}, [@TCA_RATE={0x8, 0x5, {0x3ff, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000000)={0x0, @bt={0x6, 0x6, 0x1, 0x0, 0xfffffffffffffffa, 0x8, 0x200, 0x8, 0x3, 0x3a3e64fd, 0x80, 0x7, 0x4, 0x8, 0x0, 0x20}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x240, 0x0) 01:15:24 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)={0x7, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x0, 0x4, [{{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e21, @multicast2}}]}, 0x290) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 01:15:24 executing program 1: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x8b43, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_dellink={0x9c, 0x11, 0x300, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x5c080, 0x20000}, [@IFLA_OPERSTATE={0x8, 0x10, 0x3}, @IFLA_LINK={0x8, 0x5, 0x100}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_PHYS_PORT_ID={0x10, 0x22, "d27de3aaec2fb6f1c5f4"}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}, @IFLA_IF_NETNSID={0x8, 0x2e, 0xffffffff}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8050}, 0x40004) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r2, 0x0) 01:15:24 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000100)={0x6, {{0xa, 0x4e20, 0x0, @local, 0xffffffffffffffff}}, {{0xa, 0x4e21, 0x8, @local, 0x3}}}, 0x108) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0x5, 0x81, 0x1, 0x4000, r0}) 01:15:24 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r1 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r0, r1, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000340)={0x60, 0xfffffffffffffffe, 0x8, {{0x7, 0x59, 0x1, 0x6, 0xcb08, 0x5, 0x9, 0xfcc}}}, 0x60) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x4019, @mcast2, 0x3}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, [], 0x11}, 0x4}, @in6={0xa, 0x4e21, 0x1f, @loopback, 0x2}, @in6={0xa, 0x4e22, 0x80, @ipv4={[], [], @multicast2}}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e21, @rand_addr=0x5}, @in6={0xa, 0x4e24, 0x800, @mcast2, 0x8001}], 0xac) 01:15:24 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r1, 0x4) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@remote}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) setresuid(r2, r3, r4) 01:15:24 executing program 3 (fault-call:9 fault-nth:0): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)="6e7230010060a19ef9d2c673d9a1571cb9e1369bcd61ef7e49793ae18712eceb1daa769497800b7fbbd35b170c10751d39aeb660d863e49b8c4f3b3cad48902b5b2d6cfd0abd372c63bcf5d70df3fd4d2e8d443c88c60fd7140fbc0e5637dd82fc3435bed4de5d693c9a781c863e05d8a6f8689a5be29216061f3ff53f8b6b396678e7ba155ef9152d7e43b1eccb2331eb8eb1ed5586dcf8b3b0b999361a44ff2c22c2abbef42dd24eabe6723346a6e46c0499a21442d8d00dcb57f013ff7595edd0ff076930de3675d34117a44eb0e4f832936da44e") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6e72300100", 0x80e}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000980)=0x3f) write$cgroup_type(r2, &(0x7f0000001900)="746888646164656400", 0xfdef) socketpair(0x0, 0x0, 0x0, 0x0) 01:15:25 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x4c0000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={r1, 0x0, 0x2}, &(0x7f0000000240)=0x8) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000000)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) 01:15:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0x5, @pix={0x0, 0x1f}}}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) getdents(r0, 0x0, 0x0) fcntl$setflags(r0, 0x2, 0x1) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x2) 01:15:25 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000480)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") r2 = syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00') sendfile(r1, r2, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000200)='./file0\x00', 0x100027e, 0x0) [ 292.211631] device nr0 entered promiscuous mode 01:15:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x7, 0x12) 01:15:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$TIOCCONS(r0, 0x541d) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000000)={0x4, "9cbd8795fb5979b8f1ebdcac7a86b323ea6c9dac4486a5bc0ba93e2930977f67", 0x220, 0x1, 0x1, 0x9, 0x5}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe000, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400100401000200027000f8", 0x16}], 0x0, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x101000, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x5c}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000340)=""/4096) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/create\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x5, [0x9, 0x5, 0xfffffffffffffff7, 0x101, 0x422]}, 0xe) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000100)={0x101}) sendmsg$alg(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f00000013c0)=[@assoc={0x18, 0x117, 0x4, 0x101}, @assoc={0x18, 0x117, 0x4, 0x100}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x800}, 0xc4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000001340)={r2, 0x0, r1}) 01:15:25 executing program 1: lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x8b43, 0x4) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=@bridge_dellink={0x9c, 0x11, 0x300, 0x70bd28, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x5c080, 0x20000}, [@IFLA_OPERSTATE={0x8, 0x10, 0x3}, @IFLA_LINK={0x8, 0x5, 0x100}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_PHYS_PORT_ID={0x10, 0x22, "d27de3aaec2fb6f1c5f4"}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_LINKINFO={0x2c, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x18, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @remote}]}}}, @IFLA_IF_NETNSID={0x8, 0x2e, 0xffffffff}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8050}, 0x40004) sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0) r2 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r2, 0x0) 01:15:25 executing program 0: clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0xffd) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)="636c6561725f7265667300b04978e60c4ba32fd7b949714bcbe80c57af59747c61a31619cbafea034f5b6bb15332860b9f14c654d1012484f5c9d8edcad2f073e0ca5078fc64d38d1e297b9d66a71452b92cae675696216e08f21e87b8b54da0d1b5f3b4d6f8caf34a15ed2b2c98fcbf581297b31beafaffb76778a196ad93aa3d2d7a06720827") ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) gettid() getpgid(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) r2 = getpgrp(r1) r3 = syz_open_procfs(r2, &(0x7f0000000080)="73797363611f6c00") sendfile(r0, r3, 0x0, 0x1) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100027e, 0x0) 01:15:25 executing program 2: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000000)=""/42) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffd, 0x11, r0, 0x0) 01:15:25 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)=0x7) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x1f) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000080)) [ 292.838520] ================================================================== [ 292.846309] BUG: KASAN: use-after-free in vb2_mmap+0x662/0x6f0 [ 292.852317] Read of size 8 at addr ffff8881d307b240 by task syz-executor1/11704 [ 292.859780] [ 292.861434] CPU: 1 PID: 11704 Comm: syz-executor1 Not tainted 4.20.0-rc5+ #149 [ 292.868799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.878159] Call Trace: [ 292.878187] dump_stack+0x244/0x39d [ 292.878207] ? dump_stack_print_info.cold.1+0x20/0x20 [ 292.878295] ? printk+0xa7/0xcf [ 292.878316] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 292.897740] print_address_description.cold.7+0x9/0x1ff [ 292.897762] kasan_report.cold.8+0x242/0x309 [ 292.907536] ? vb2_mmap+0x662/0x6f0 [ 292.907556] __asan_report_load8_noabort+0x14/0x20 [ 292.907569] vb2_mmap+0x662/0x6f0 [ 292.907590] ? vb2_poll+0x1d0/0x1d0 [ 292.907604] vb2_fop_mmap+0x4b/0x70 [ 292.907710] v4l2_mmap+0x153/0x200 [ 292.907731] mmap_region+0xe85/0x1cd0 [ 292.930505] ? __x64_sys_brk+0x8b0/0x8b0 [ 292.930533] ? selinux_task_getsecid+0x1f9/0x3a0 [ 292.943153] ? lock_downgrade+0x900/0x900 [ 292.947317] ? check_preemption_disabled+0x48/0x280 [ 292.952365] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 292.957317] ? kasan_check_read+0x11/0x20 [ 292.961485] ? mpx_unmapped_area_check+0xd8/0x108 [ 292.966360] ? arch_get_unmapped_area+0x750/0x750 [ 292.971228] ? lock_acquire+0x1ed/0x520 [ 292.975219] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 292.980780] ? selinux_mmap_addr+0x2d/0x110 [ 292.985133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 292.990690] ? security_mmap_addr+0x80/0xa0 [ 292.995033] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.000589] ? get_unmapped_area+0x292/0x3b0 [ 293.005020] do_mmap+0xa22/0x1230 [ 293.008495] ? mmap_region+0x1cd0/0x1cd0 [ 293.012569] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 293.016651] ? down_read_killable+0x150/0x150 [ 293.021167] ? security_mmap_file+0x174/0x1b0 [ 293.025685] vm_mmap_pgoff+0x213/0x2c0 [ 293.029601] ? vma_is_stack_for_current+0xd0/0xd0 [ 293.034469] ? _copy_to_user+0xc8/0x110 [ 293.038475] ksys_mmap_pgoff+0x4da/0x660 [ 293.042554] ? do_syscall_64+0x9a/0x820 [ 293.046548] ? find_mergeable_anon_vma+0xd0/0xd0 [ 293.051320] ? trace_hardirqs_on+0xbd/0x310 [ 293.055655] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.061210] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.066594] ? trace_hardirqs_off_caller+0x310/0x310 [ 293.071723] __x64_sys_mmap+0xe9/0x1b0 [ 293.075629] do_syscall_64+0x1b9/0x820 [ 293.079531] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 293.084909] ? syscall_return_slowpath+0x5e0/0x5e0 [ 293.089858] ? trace_hardirqs_on_caller+0x310/0x310 [ 293.094909] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 293.099944] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 293.106629] ? __switch_to_asm+0x40/0x70 [ 293.110704] ? __switch_to_asm+0x34/0x70 [ 293.114784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.119648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.124844] RIP: 0033:0x457659 [ 293.128051] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.146968] RSP: 002b:00007f046b124c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 293.154694] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457659 [ 293.161981] RDX: fffffffffffffffd RSI: 0000000000002000 RDI: 0000000020ffe000 [ 293.169266] RBP: 000000000072bfa0 R08: 0000000000000005 R09: 0000000000000000 [ 293.176549] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f046b1256d4 [ 293.183832] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 00000000ffffffff [ 293.191135] [ 293.192774] Allocated by task 11695: [ 293.196507] save_stack+0x43/0xd0 [ 293.199974] kasan_kmalloc+0xc7/0xe0 [ 293.203693] __kmalloc+0x15b/0x760 [ 293.207251] __vb2_queue_alloc+0xf7/0xf90 [ 293.211403] vb2_core_create_bufs+0x401/0x8c0 [ 293.215914] vb2_create_bufs+0x3c6/0x7f0 [ 293.219994] vb2_ioctl_create_bufs+0x25e/0x3d0 [ 293.224585] v4l_create_bufs+0x152/0x230 [ 293.228653] __video_do_ioctl+0x8b1/0x1050 [ 293.232902] video_usercopy+0x5c1/0x1760 [ 293.236975] video_ioctl2+0x2c/0x33 [ 293.240606] v4l2_ioctl+0x154/0x1b0 [ 293.244244] do_vfs_ioctl+0x1de/0x1790 [ 293.248144] ksys_ioctl+0xa9/0xd0 [ 293.251606] __x64_sys_ioctl+0x73/0xb0 [ 293.255506] do_syscall_64+0x1b9/0x820 [ 293.259410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.264615] [ 293.266259] Freed by task 11689: [ 293.269639] save_stack+0x43/0xd0 [ 293.273119] __kasan_slab_free+0x102/0x150 [ 293.277365] kasan_slab_free+0xe/0x10 [ 293.281176] kfree+0xcf/0x230 [ 293.284290] __vb2_queue_free+0x5e2/0xa30 [ 293.288457] vb2_core_queue_release+0x62/0x80 [ 293.292973] _vb2_fop_release+0x1d2/0x2b0 [ 293.297145] vb2_fop_release+0x77/0xc0 [ 293.301136] vivid_fop_release+0x18e/0x440 [ 293.305389] v4l2_release+0x224/0x3a0 [ 293.309213] __fput+0x385/0xa30 [ 293.312502] ____fput+0x15/0x20 [ 293.315786] task_work_run+0x1e8/0x2a0 [ 293.319685] do_exit+0x1ad6/0x26d0 [ 293.323239] do_group_exit+0x177/0x440 [ 293.327142] get_signal+0x8b0/0x1980 [ 293.330881] do_signal+0x9c/0x21c0 [ 293.334435] exit_to_usermode_loop+0x2e5/0x380 [ 293.339024] do_syscall_64+0x6be/0x820 [ 293.343468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.348657] [ 293.350296] The buggy address belongs to the object at ffff8881d307b240 [ 293.350296] which belongs to the cache kmalloc-1k of size 1024 [ 293.362974] The buggy address is located 0 bytes inside of [ 293.362974] 1024-byte region [ffff8881d307b240, ffff8881d307b640) [ 293.374778] The buggy address belongs to the page: [ 293.379730] page:ffffea00074c1e80 count:1 mapcount:0 mapping:ffff8881da800ac0 index:0x0 compound_mapcount: 0 [ 293.389734] flags: 0x2fffc0000010200(slab|head) [ 293.394424] raw: 02fffc0000010200 ffffea0007344f88 ffffea00075dab88 ffff8881da800ac0 [ 293.402325] raw: 0000000000000000 ffff8881d307a040 0000000100000007 0000000000000000 [ 293.410219] page dumped because: kasan: bad access detected [ 293.415937] [ 293.417570] Memory state around the buggy address: [ 293.422508] ffff8881d307b100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.429885] ffff8881d307b180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 293.437258] >ffff8881d307b200: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 293.444622] ^ [ 293.450093] ffff8881d307b280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.457493] ffff8881d307b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 293.464868] ================================================================== [ 293.472246] Disabling lock debugging due to kernel taint [ 293.483584] Kernel panic - not syncing: panic_on_warn set ... [ 293.489524] CPU: 0 PID: 11704 Comm: syz-executor1 Tainted: G B 4.20.0-rc5+ #149 [ 293.498281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 293.507640] Call Trace: [ 293.510245] dump_stack+0x244/0x39d [ 293.513884] ? dump_stack_print_info.cold.1+0x20/0x20 [ 293.519094] panic+0x2ad/0x55c [ 293.522310] ? add_taint.cold.5+0x16/0x16 [ 293.526467] ? preempt_schedule+0x4d/0x60 [ 293.530629] ? ___preempt_schedule+0x16/0x18 [ 293.535049] ? trace_hardirqs_on+0xb4/0x310 [ 293.539389] kasan_end_report+0x47/0x4f [ 293.543381] kasan_report.cold.8+0x76/0x309 [ 293.547711] ? vb2_mmap+0x662/0x6f0 [ 293.551351] __asan_report_load8_noabort+0x14/0x20 [ 293.556331] vb2_mmap+0x662/0x6f0 [ 293.559805] ? vb2_poll+0x1d0/0x1d0 [ 293.563440] vb2_fop_mmap+0x4b/0x70 [ 293.567096] v4l2_mmap+0x153/0x200 [ 293.570684] mmap_region+0xe85/0x1cd0 [ 293.574501] ? __x64_sys_brk+0x8b0/0x8b0 [ 293.578577] ? selinux_task_getsecid+0x1f9/0x3a0 [ 293.583350] ? lock_downgrade+0x900/0x900 [ 293.587519] ? check_preemption_disabled+0x48/0x280 [ 293.592546] ? rcu_read_unlock_special+0x1c0/0x1c0 [ 293.597488] ? kasan_check_read+0x11/0x20 [ 293.601652] ? mpx_unmapped_area_check+0xd8/0x108 [ 293.606513] ? arch_get_unmapped_area+0x750/0x750 [ 293.611379] ? lock_acquire+0x1ed/0x520 [ 293.615377] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.620927] ? selinux_mmap_addr+0x2d/0x110 [ 293.625261] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.630813] ? security_mmap_addr+0x80/0xa0 [ 293.635145] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 293.640698] ? get_unmapped_area+0x292/0x3b0 [ 293.645130] do_mmap+0xa22/0x1230 [ 293.648601] ? mmap_region+0x1cd0/0x1cd0 [ 293.652682] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 293.656761] ? down_read_killable+0x150/0x150 [ 293.661272] ? security_mmap_file+0x174/0x1b0 [ 293.665786] vm_mmap_pgoff+0x213/0x2c0 [ 293.669692] ? vma_is_stack_for_current+0xd0/0xd0 [ 293.674551] ? _copy_to_user+0xc8/0x110 [ 293.678543] ksys_mmap_pgoff+0x4da/0x660 [ 293.682633] ? do_syscall_64+0x9a/0x820 [ 293.686618] ? find_mergeable_anon_vma+0xd0/0xd0 [ 293.691390] ? trace_hardirqs_on+0xbd/0x310 [ 293.695723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 293.701277] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.706656] ? trace_hardirqs_off_caller+0x310/0x310 [ 293.711779] __x64_sys_mmap+0xe9/0x1b0 [ 293.715684] do_syscall_64+0x1b9/0x820 [ 293.719581] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 293.724961] ? syscall_return_slowpath+0x5e0/0x5e0 [ 293.729904] ? trace_hardirqs_on_caller+0x310/0x310 [ 293.734935] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 293.739969] ? post_copy_siginfo_from_user.isra.25.part.26+0x250/0x250 [ 293.746646] ? __switch_to_asm+0x40/0x70 [ 293.750716] ? __switch_to_asm+0x34/0x70 [ 293.754796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 293.759658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 293.764857] RIP: 0033:0x457659 [ 293.768060] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 293.786979] RSP: 002b:00007f046b124c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 293.794702] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457659 [ 293.801986] RDX: fffffffffffffffd RSI: 0000000000002000 RDI: 0000000020ffe000 [ 293.809267] RBP: 000000000072bfa0 R08: 0000000000000005 R09: 0000000000000000 [ 293.816544] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f046b1256d4 [ 293.823825] R13: 00000000004c2d3e R14: 00000000004d5078 R15: 00000000ffffffff [ 293.832195] Kernel Offset: disabled [ 293.835830] Rebooting in 86400 seconds..