en(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:30 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x3ff, 0x10000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:31 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = getuid() ioprio_set$uid(0x3, r1, 0x8) 11:08:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:31 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000240)=0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r3, 0x10001}, &(0x7f00000001c0)=0x8) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8f9b59abaa3581e54914c2e67d4ec5500"}) execve(&(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)=[&(0x7f00000002c0)='/dev/v4l-subdev#\x00', &(0x7f0000000300)='/dev/swradio#\x00', &(0x7f0000000340)='/dev/full\x00', &(0x7f0000000380)='cpuset*+vboxnet0[\x9f(\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='/dev/v4l-subdev#\x00', &(0x7f0000000440)='/dev/full\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='/dev/swradio#\x00', &(0x7f0000000500)='}eth1*&vboxnet0\x00']) symlinkat(&(0x7f0000000580)='./file0\x00', r0, &(0x7f00000005c0)='./file0\x00') 11:08:31 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000001, 0xfffffffffffffffe) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001340)='/dev/autofs\x00', 0x2000020000, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000280)=""/4096) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000001280)={0x1, "2397970400a5f6f9cbd85df68ac59985704546f200fed5df6d51f9d362f8145a", 0x4, 0x144, 0x8, 0x5, 0x1, 0x2, 0x3, 0x10000}) 11:08:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3fc, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:31 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x980c0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x9, 0x4, 0xfffffffffffffffc, 0x2, 0x4}, 0x14) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)=0x4002) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000240)=""/198, &(0x7f0000000340)=0xc6) 11:08:31 executing program 1: r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000000)={{0x3, @netrom}, [@bcast, @remote, @null, @netrom, @netrom, @null, @netrom, @default]}, &(0x7f0000000100)=0x48, 0x80800) recvfrom(r0, &(0x7f0000000140)=""/200, 0xc8, 0x1, &(0x7f0000000240)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x80) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) 11:08:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:31 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x200080, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000080)={0x10001, 0x7, 0xab, 0x1}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:31 executing program 1: ppoll(&(0x7f00000000c0)=[{}], 0x0, 0x0, 0x0, 0x0) 11:08:31 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) accept$inet6(r1, 0x0, &(0x7f0000000040)) 11:08:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x8, 0x1fffd) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x80000000, 0x7ff}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:32 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x8, 0x401) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7]}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x200) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x2, 0x1, [0x3c, 0x787d244d, 0x200, 0x8, 0x2, 0x5, 0x64, 0xfffffffeffffffff]}) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x6) lseek(r0, 0x0, 0x7) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x7f, @mcast2, 0x7}}, 0x24) 11:08:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:32 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000002c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x40000]}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x80000, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f00000001c0)={0x0, 0x5, 0x2c, "a38fd7a45f1ee0bed7a52876b2b38c62682fcc82f56be6d77c396988af0fb95306688ad20ec4e7c389c6a496e44fcf79b62e3670bcfa043bd10bfd14", 0x6, "0bbc4c1d36a886b013dbea4e0948933288f427fbf192e60b956afd97836fcb9b87c1aa9009fb388419fdd22584474daede04bbd29d2d4d0927db3753", 0x80}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9466211, 0x2000) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x6130cfa2, 0xffffffffffffc96e, 0xfffffffffffffffa}) 11:08:32 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9c, 0x101) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x16f, 0x2, 0x740000000, 0x7f1}, 0x8) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) socket$inet_udp(0x2, 0x2, 0x0) 11:08:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:32 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000040)) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) [ 364.081663][T23071] Debayer B: ================= START STATUS ================= 11:08:33 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0xac281, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000001c0)={0x8, 0x2, 0x4, 0x4040, {0x77359400}, {0x1, 0xc, 0x7ff, 0x80000001, 0x9, 0x5b6f00000, "c51655a5"}, 0x5, 0x5, @userptr=0x5, 0x4}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) [ 364.156671][T23071] Debayer B: ================== END STATUS ================== 11:08:33 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0x400}], 0x1, &(0x7f0000000100)={r1, r2+30000000}, &(0x7f0000000140)={0x1f}, 0x8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, [], @raw_data=[0xffffffff80000000, 0x9, 0x6, 0x7f, 0xffffffff, 0x20, 0xf5d0, 0x4, 0x40, 0x2cb4, 0x6, 0x6, 0x7ff, 0x5, 0x1f, 0x7, 0x0, 0x24, 0x7, 0x7, 0x100000000, 0x40, 0x964d, 0x6b98, 0x5, 0x1521, 0x9d, 0x100000001, 0x8, 0xffff, 0x16a, 0x1000]}) 11:08:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 364.208309][T23071] Debayer B: ================= START STATUS ================= [ 364.225625][T23071] Debayer B: ================== END STATUS ================== 11:08:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = syz_open_dev$radio(&(0x7f0000000400)='/dev/radio#\x00', 0x0, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x3}}, 0x18) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000003c0)=0x7) 11:08:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:33 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000000)={0x99, 0x2, &(0x7f00000001c0)="67d849bac461004bdf47087feead5a477c736df3adad2f0db148900364d314e09f1d9f7c560c3149045ff05de3fe562ccf2691ad8c064b46854f8c64f9a082b039b03cc2d16add3ee3944ad81940401f268618819f001c400f5d779b6eaeefbb8cf67cf9b7742771a34b30c802ba87e24cbede19e43791db16a732d62d19b0363361c3579ec7d279dde304f5cd10e1a02f2e9a034b6e75a0afabe18505e615e49a37179d2ac405dc4ea73719260d7085e45a99e2650610fc41a9809d5902295bd47012ab22809490718f5b5fd376c53e4b6347b2a6", {0x1, 0x0, 0x41564e57, 0xb, 0x8, 0x3, 0xf, 0x100000001}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:33 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8c402, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') r3 = accept(r0, &(0x7f0000000140)=@can, &(0x7f00000001c0)=0x80) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x8000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x0, 0x2) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x800, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x17d6, 0x200) r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x18200, 0x0) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x20c00, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f00000006c0)={&(0x7f0000000040), 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="000127bd7000fbdbdf25050000020c000400fbffffffffffffff3c00070008000100d23047cf54a625179fd4ceadbbea4c636abf00e9cee0d48db269a304a30566969c1201f90c9cb01095eb60d2dcea4bc3d5ab", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c000800faffffffffffffff0c0006000300000000000000040007000c00060002000000000000000c0005000001000000000000"], 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x80) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000300)=0x2, 0x4) 11:08:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x40, 0x0) getsockname$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x1c) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) fsetxattr$security_ima(r0, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@sha1={0x1, "414faca3baf699945fcf7a96c1592b5dbc65ec90"}, 0x15, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000440)='/dev/v4l-subdev#\x00', 0xffffffffffffffff}, 0x30) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r1, 0x9) r7 = getuid() fstat(r0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000f80)=0x0) r10 = geteuid() r11 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002440)={0xffffffffffffffff, r1, 0x0, 0xb, &(0x7f0000002400)='/dev/vsock\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r13, 0x10, &(0x7f0000002d80)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002600)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000002700)=0xe8) stat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r1, &(0x7f0000001140)='./file0\x00', r10, r4, 0x1c00) r19 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000002c00)=[{&(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000380)="e85f1fe4187cd8711e31d0f587f959725b77c41ff11119138d4bbc3c5fda78dbaeff4dc1c590cf720fcf2d737b0d86d32dc76126b538d8a7cd2029650ce4fba016dc58eada066e9676df5c9fd17c2c8d485bbeaae613dadc7f26005077967d9143cf52c88bb5e02d2f89e29be8d0a602a37ccebe56db5ff3a07fed396b292ed7a3", 0x81}, {&(0x7f0000000040)="025a52a483d8632c1c61559692ae6a4c99a5e35eb98884c53b38283c859572", 0x1f}], 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000018000060c654c5dba5992d0000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x10}, {&(0x7f0000000680)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000700)="2296f8c12056c63da57e5e8193390a871af81bb7ed271e7aac14a934ca785519049e14683224019b2148cdaeed677ec60e10d20a9e7ac91a6861e455adfd94906f2ad6a4459f6bf31e9dac6a0efb3228cf98025316fa0b63f3f948ae58597c8eecec76b6f57f87405da3b370e2fd2780948b61bb4f635c64ca2c1e12d788f5c49e7d910bcac101f522d05e66ea41ed47b56aa59613860514100c0cbda21e4849c5b1674d0b50953011ddd7868fc77f8400a64466f7d9cbce35e91f55af2d56b5e5d82d4deabe15cf223d5d368bba0052", 0xd0}, {&(0x7f0000000800)="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", 0xfc}, {&(0x7f0000000900)="64e32d18ed9fb1bd252edd8d5d7c20c757d8c6a8fe14339d08730b25e5903d344a9ee057335130781dce4b7f2f7b3dcda409ada0ae0436bf6ce0fe614cb5db011897234fe11ba162f89534b5619a1fd5303e9f41a521426386257b6ef01a1d27af7354f2c5c17ab867dbc219127d6389b01a51ffe480f4e5f565693b00d2ae4252019a8759810ca1d39f78d1c79857509049f2f6b28593d78e5c0229d13e3b99ddd3f9ef86af2038bc0af725f446", 0xae}, {&(0x7f00000009c0)="37178f02c001de011815481b67af17be1ced9f7e5a09055d39f62042a61ee90388c14630f06ecf015a6720e63e4dab2e36d97a1e481f862472", 0x39}, {&(0x7f0000000a00)="2111186680ee42e2241840219151da9da466a467dcbb9d38231fed98383dc7050fa398ba2fa52f0d106f1023106fcad413e6c65d6a5fccbc0f21405bab92546faa41a58155ef7688442e08ffad96ca03302281339be3786ee4ed55141c0e5416328d094f0355391e0358fe99835034086a9b1b3be49c358709bd8d40d4672816046261b56222cdc011c2e7ae4f7890ec9388c853f210cdb1deb19cba1a2c89a4f274ddc0efdeb74a37ca6cce46cc27ba9f5823b9e1c858e964a77a8699a45b350ff633d9d9e886028e66d8346717be27", 0xd0}, {&(0x7f0000000b00)="7036c90b0b34a3a4d60dc2e2b37216", 0xf}, {&(0x7f0000000b40)="cb8449556bf6dbcb2f6ce09a74478533fda25baafd369820a48b636464337dff42db86adcf6005f44c8c127ef2160bf5e78cfbf37744edebe6aa79e258e4173c40ac46592babe624ea75bc186fe6ba956c76ff31a7bb7c11cdde7f7eee06a5cc25b3f2f9843a3115edc679115acd143cf8b6eb15f5dd5db2caa6a546dbafd9746f3c6b3d6a4e0ae65d7f7a1de1f2ed7d1b43d9d0c17e2c7611adb12831f3f4028c9a4abba7c6004bfa4c", 0xaa}, {&(0x7f0000000c00)="acff96ba551ff18ae0b6f9cea80b29602cd20092bed1e79d1e7cb87b793e80f48c75e43fbfd2eb99c20103fc2dc1d974896159236d792bc72e", 0x39}, {&(0x7f0000000c40)="95765236a5a62dcc", 0x8}], 0x9, 0x0, 0x0, 0xa48f45ce2e73a8dc}, {&(0x7f0000000d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="c3b462b568025a32250556f73f95539cf70538eb04907729af27ee828b929a4a76c99efe410676eec88aa7e58b6afc1941d28c412c4e2384ea4dfdd1795c0234021129fa160004dbbe", 0x49}, {&(0x7f0000000e40)="88e5dd442d1bda01726e7cdb9d666d00a815e431b31ccc291d3c7e4743fb1280a9ac7c4bbee88b2ac14d027fdada0455166faf8c674b0cea428c9412a8608a2b038748ae638f1db69b2192ac295349e1e58e9c41e6c098ef8f5e53ce48a96c", 0x5f}], 0x2, &(0x7f0000000fc0)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}], 0x70, 0x40}, {&(0x7f0000001040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f00000010c0)="c9fb8dbf0964f61d", 0x8}], 0x1, &(0x7f0000002dc0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x4}, {&(0x7f0000001180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001200)="082537f57f85bfd2d71beffdf157f1801af382bb41f3d79cb162182e901ff0a1a8861fe4e875282abbc1cc89241472463a53144a25c88f2186a56c1f374763a499c9b96f951880ffa61d7e59cef0cb72859df9095d3cdba136b6358f7ace524843025559064aa3f001", 0x69}, {&(0x7f0000001280)="58028b36122771bd6a7cfe0371318d08ab5afa045df65c7ac064af9e945b8306c1422ea62d175f5a187b51c80df6faa5f7578f2b573b57f36a18b4dd840738f2e5", 0x41}, {&(0x7f0000001300)="4898990a87b08dbe77c2aa0ef72e", 0xe}, {&(0x7f0000001340)="a957ffe92dc950e9b3fb98da651dfeb953fe55e272d3", 0x16}, {&(0x7f0000001380)="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", 0x1000}], 0x5, &(0x7f0000002980)=[@cred={0x20, 0x1, 0x2, r12, r14, r15}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r1, r1, r0]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @rights={0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffff9c, r1]}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r1, r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r0, r0, r1, r0]}], 0x100, 0x10}, {&(0x7f0000002a80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002b00)="791bbdaa64e741bd0af70728e5f9a285b803741668c8d7da66556c757d96eda0e8b1ef3d98552f4bd6768bd70990f7816b9a2668467ec189733fe8f5f655aae91db6be93f276b3c275efffaadab3c5d44664dc7334d3c1d3a696eb1fd851e03c827cf38d2889f91924d3c7b8cad86378a8b8aa08fb59ac9645334b308d27bab2c255e332c0583b3244f9f0ba5b162c5dcf4b25cfbb29420dc690d63a1642a913a011ea1583c358b2c1f6", 0xaa}], 0x1, 0x0, 0x0, 0x4000}], 0x6, 0x4000000) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U-', 0x7f}, 0x28, 0x1) 11:08:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:33 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 364.553877][T23234] Unknown ioctl 21545 11:08:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 364.606273][T23234] Unknown ioctl 21545 11:08:33 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) lseek(r0, 0x0, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x103012, r1, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x1, 0x0, 0xfffffffffffffffe}) 11:08:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x10001, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x2, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f", 0x0, 0x0, 0x800}) 11:08:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:33 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x5) 11:08:33 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0x5, 0xfffffffffffff93e, [], &(0x7f0000000000)=0x31}) 11:08:33 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) [ 364.920774][T23369] Unknown ioctl 19465 11:08:34 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0xffffffffffffff39) 11:08:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:34 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) r2 = dup2(r0, r0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa, 0x4000000000000001) ioctl$PPPIOCDISCONN(r3, 0x7439) 11:08:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x10001, @mcast2, 0x5}, @in6={0xa, 0x4e21, 0xffffffff7fffffff, @rand_addr="479c0edc028a6bff03bb0f929e7a23e8", 0x2}, @in={0x2, 0x4e22, @empty}], 0x48) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:34 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x80, 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000000d00)=[{{&(0x7f0000000480)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/213, 0xd5}, {&(0x7f0000000600)=""/130, 0x82}, {&(0x7f00000006c0)=""/72, 0x48}, {&(0x7f0000000740)=""/84, 0x54}, {&(0x7f00000007c0)=""/193, 0xc1}, {&(0x7f00000008c0)=""/233, 0xe9}], 0x6, &(0x7f0000000a40)=""/14, 0xe}, 0x937}, {{&(0x7f0000000a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b00)=""/78, 0x4e}, {&(0x7f0000000b80)=""/156, 0x9c}], 0x2, &(0x7f0000000c80)=""/117, 0x75}}], 0x2, 0x2000, 0x0) recvfrom$packet(r0, &(0x7f0000000200)=""/245, 0xf5, 0x10042, &(0x7f0000000d80)={0x11, 0xf7, r1, 0x1, 0x10000, 0x6, @dev={[], 0xe}}, 0x14) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000300)=0x135) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x13b4, 0x0, 0xf, 0xc, 0x4}}) 11:08:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) 11:08:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:34 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @multicast1}, &(0x7f0000000200)=0xc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, r1, 0x400, 0x70bd26, 0x25dfdbfd, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x6}}}, 0x24}}, 0xc000) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 11:08:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:34 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x2200) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000280)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x4, @remote, 0x5}, r1}}, 0x30) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x4}) r2 = syz_open_dev$video4linux(&(0x7f0000000300)='/dev/v4l-subdev#\x00', 0x8000000000000006, 0x404) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x6}, 0x28, 0x2) 11:08:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x3, 0x0, "4b69c59ef00a00000000000099a2f9b59abaa3581e54914c2e67d4ec4f00", 0x0, 0x7}) 11:08:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:34 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x92) 11:08:34 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x101000, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000240)={0x4, 0x2}) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000001c0)=@ng={0x4, 0x10, "f68dd2048d4722ce"}, 0xa, 0x0) 11:08:34 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:34 executing program 5: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2000, 0x1}) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f00000000c0)) r1 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="649443a3a10936f4e94093260d430f41af1023392849200cec9682880284fddccae36eec08342036320175", 0x2b, 0x0) r2 = request_key(&(0x7f00000002c0)='encrypted\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000240)='logon\x00', &(0x7f0000000280)={'syz', 0x1}, r2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:34 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0xb2ce, 0x200020100) ppoll(&(0x7f0000000000)=[{r0}], 0x3a7, 0x0, 0x0, 0x0) 11:08:34 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 11:08:34 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000002c0)) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x0, 0x0, {0x4, 0x100, 0xfa, 0x1}}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000200)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000240)={0x2, 0x0, 0x6, 0xab6, r2}) 11:08:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:34 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000040)={0x6bf6, "3f20c90b446a99f0650c2835fa14eca700ae1198701c64c7dda8aea5d1d6ab6a", 0x880, 0x2, 0x0, 0x7}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x9, 0x1000001, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f", 0x0, 0x7ff, 0x0, 0x0, 0x100}) 11:08:34 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xfffc, 0x40) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:35 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000001c0)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000000)={0x8, [0x3, 0x0, 0x7, 0x5, 0x3, 0x80000000, 0x4, 0x2bad, 0x80000000, 0x7b96be96, 0xffffffffffffff09, 0x80000000, 0x6c, 0x247, 0x36, 0x6, 0x10000, 0x3b5, 0x2, 0x6, 0x1, 0x81, 0xd0d, 0x9, 0x1000, 0x3, 0x80000000, 0xffffffffffff0000, 0x8001, 0x8, 0x8, 0x4, 0x2, 0x9, 0x6d55500a, 0x0, 0x101, 0x8, 0xffffffff, 0x5, 0x7ff, 0x200, 0x0, 0x1, 0x80000000, 0xfffffffffffff924, 0x3, 0x7fff], 0x6}) r1 = dup(r0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) 11:08:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 11:08:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000080)) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:35 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) get_mempolicy(&(0x7f00000000c0), &(0x7f0000000100), 0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x180, 0x0) ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:35 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 11:08:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000900)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0\x00') ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) 11:08:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:35 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0xc42) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)=0x1) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000140)=""/94, &(0x7f0000000040)=0xffffffffffffff15) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:35 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) umount2(&(0x7f0000000000)='./file0\x00', 0xc) 11:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 11:08:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:35 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x17b) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000100)=0x8) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000240)) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:35 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x1, 0x80000) write$P9_RLOCK(r0, &(0x7f0000000040)={0x8, 0x35, 0x1, 0x3}, 0x8) write$P9_RLERROR(r0, &(0x7f00000001c0)={0x15, 0x7, 0x1, {0xc, '/dev/amidi#\x00'}}, 0x15) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x3) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x9, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, [0x0, 0x0, 0xfffffffffffffffe]}) 11:08:35 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) accept$alg(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x50) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) sysinfo(&(0x7f0000000040)=""/67) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x9, 0x8, [], &(0x7f00000000c0)=0x7fffffff}) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x4, 0x200001) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000240)={0x0, r0}) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x5, 0x8000) 11:08:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:35 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) r1 = socket$netlink(0x10, 0x3, 0x5) sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000000)=@caif=@util={0x25, "e192e5ff1c0cacbfdd32b302af9fff86"}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)="772f1b7307c35699d9349580b8589f82deb3036f81e36909403ec4c16ad2e271c0f15ee5a27073833e27ef8a0ca275dbf86976d8ed79af3389ee2f1f8da70b8cc4e5857a84ebf73a5a84314d8a12372f78cd66d41285154c1575ee22ed681a4831fbc2da87d38e8677611756bf7bd912a5eaa2987acc3e92c4ea889fe33864e440c9d77cf665d176c43c967815f3f450d2b18488271a0d800034738ba9f659239d05ef423d18f5d06481c1a99e7fc30210f007ab90ae0ecea12f7a4e3dc2740de5ec0f", 0xc3}, {&(0x7f0000000200)="9f164165bb7fdeb13db5c3ed1e73e14505705d0491a6b507cc0bad88807b1627284ca6fe0653067d50985980ec448cb5ffa9538ca1e7d8f3602651bb7495c3efe9bc8c17542c0e588eb1581b6ea2a5fbc276e319830b331974524a415d1f1ff584a3a5fe97e0748d1b1db47f296cc6419345d748fb0fd5872fc2b0a999293cdcfe4c3071d4c0ff1783116550422cd5df6d65", 0x92}, {&(0x7f00000002c0)="46582b7cdc5c22ad7575436c8221a97ce0b9cbc77a41c9a57a1e501aa4689e7935b3c09fb27c16375c163bf8ffb9c5a214b04d1637fb2bd0658dceec4c7b8bde30c302075e4be72e5ed3282ee4c4b41488d86f999c05069091327eca00051a3feae42bed091983d0d1c03601122ca69cc34a84cf70f2b5fe6ca98f507e5da5ba3b87b5f86aec6bce00776dd473a4745994ec6dfb242f2487720a0306dad6369abdf8ccc9879d01c88756aa", 0xab}], 0x3, &(0x7f00000003c0)=[{0x30, 0x10f, 0x401, "50373b916cd542ef95ed89c30dafee2cef907a023f1c39ccc10cf9580085"}, {0x70, 0xff, 0xfffffffffffffff8, "0998ff458c3b318d50a22a8ef5d5a43c6f7087ccdd3e8c9e4bb691fa1c06dbfb4180c349f02b794699c2d5649ff8ae5a9060912f58de4cacc0e56ae6b39c3c886ba0ae47eb92d458cc572885d7299c971cf2ee25d6c56e82ede8e52fbbbcdada"}, {0xe8, 0x29, 0x7ff, "6943fb32802cb2bc40e3e9744459b3d601f0f3b7cb98c7e01764c00541621c70fe65be3e92f3bb1b4b9effc9c5fdb4467ffcaf68103aca31f4d17a0615bbf31dd02f7b05cb1b71f4f61a84edd4a81800038b459098291f67c58b00d46b5b98df383cbbcfd978a4ad5836647884f9b7d839e6c4a11074dfe8e2c11c4efa830cb61a42a98a05ddb3616b08121f4b30803630090b28e7554188108029d1b58afe0fdbe35ba292e0f5dd8cfa8be58519f189028255fcf5f7e3064abbc6fb19b59fe29f52aab73317af236944b3a15d601dce097e134af99ced80"}, {0x100, 0x113, 0x80, "08940d74897fd8aba1c867fe0d06eb4c41b61c2b01d5129ff3c1a8e4463fcd3f2b5ead7b33beea369c7cf33195c0d88ea2da283183506b96edd5938fccb86df9943e42ff687f656ddfdb5124bf0470baa92b18328697fe838b9fc8f7cd12e6633c0a30bec3bec781a19a24e1d337da51b34acfc81e4968b289bca0d97324e2969ebab099435500d9859a82c4632ac4e95c49756d8f3777a42b967b23bdb63593c5734b9172129bab9f3e473ecf3a137770abb4d8d8dd86c3c08a15239d0430580bddb492148703a8ec24bb07a8ace23f93a97d3337de56220f1514d995addecc6f8c12838374e44c50f1304f75949a4c"}, {0x30, 0x1ff, 0x8, "0e26b7e00c059646803534687aad80bed1e9ac30c28807da99b0ba0c284dcb"}], 0x2b8}, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:08:35 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x80000001, @mcast1, 0x52a49d67}, r2}}, 0x30) 11:08:35 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:35 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) ioctl$FIBMAP(r0, 0x1, &(0x7f00000001c0)=0x4) prctl$PR_GET_TSC(0x19, &(0x7f0000000300)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x100, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000280)=0xfffffffffffffe21, 0x8) sendmsg$alg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xe8, 0x8010}, 0x4000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffff9c}) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0x3, @capture={0x1000, 0x1, {0x7, 0x3f}, 0x0, 0x1742}}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'bridge0\x00', 0x2111}) sendmsg$alg(r1, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000005c0)="d60b912890c157cd373484480ee2a43422045e2066a78e973315416717d6dcc12ed84f0c79241be1e512442fc8b409a6e4a45eaaf36ab9e034a507b28fa65b2e9361aebe332bf681b64eb6", 0x4b}, {&(0x7f00000003c0)="712e153fa12822b40ddab53de4", 0xd}, {&(0x7f0000000640)="de820a0a93ca718310da121f2be9804ffa6d4d0233d1a94708527eaec518096e76a34bff1ad1e73d464bb82110d77cd442", 0x31}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="7f6920a059ea8da27818aa01bd58905cc49170c040bbbfcbc300040de5f65e97178fbdfc0912edf1a5208034b434e2dd3016007a84e44dd47a7416778e646816ae74061cafe4e5f9f8c74492ddb93a9a944616b0b951c7ed02c74b5307740504395a0ac855145e3aa9f18afe67393ab1cbb3f008763a6f2759baeeb5f757bea2d8088f9b1120c695bdadf4a7bba4fcd656528ed93d007fd052681a7717c57774382c99aa06e386480171aa403386c90eb4f50cfebd884a01282314263caa5918d1af00a60239997521cb41eaa8dfdaccd5faae97e1836b0ee830468b3030d407bc6165e61e64ed9db29af0209954d506c1e728434f35389e12f2", 0xfa}, {&(0x7f0000001780)="f308bd7fef9797a0bcbbab31e4777493bc60e5e472b0561285ee718a039f0f805837c3eef2d3661ffc862e5aa2a22b82cdbba8d8b05e7d88bec964961fc550af4ca8c7e84388c77dcd91062251f1d074b0bd259964405e0e97e3aeb199f2a5c73f460dae28667c2a27db78fb1c63c09d6de6506bd57619c16cc05a86241248f0b956cda0b1f4fa48cdb4e8f837d8fa184e019a73f110732fbc697120e5fcfeaca4c2e3474a879d9536aab9dce836f8a0f2540dc59b9315f1ff1fe48380c2efc54fb4280fb139570ff3334d07fa9666a7ae", 0xd1}, {&(0x7f0000001880)="a4cc9a4f35fa6acdd48fdfab42775166ea6c1079bc49b6e9f45b787a804af27ebfe7bf98004c39a0e878140dc6cbd28ae18463bac1763e114282c6e0b8998a5a977443a6156dc6ad5bbbe6bc9a46c83aabc6cca5c2542b143e6453238e84280c33b01d4968c10e5821792e83f235e8546cd5ad03e139a7283a96b38d5ef50394328db7448153e2c1daf344630aaa3c8fb90499499c395bc65b9aaffd589c0b9f1fe9a738e9f29f79ff2a49b7fc04fddf29d17f2caf5d667b0758c77cd29786e3a12b78df96a22f5c0fae675e8064af0e7a0dc05715b562396477dab7e63f57295efa41ee5c24ad81273b3d6ca6f68e68d064e8295039c8d50d7e", 0xfa}, {&(0x7f0000001980)="007fdb00b9af917e1b8c08f6b08dbd6650f589893fddbb15cbb817c27c4a83a819cda4f5c4a910f98c9c1f036c733df2f4821e186aeda21e484eaa4b29ab9bd7d47fc796df42ec05c39e612569be713ad16a3a5a3d767c3f8b8e92ee4563c597661cc2e842a85010d03c5b5ac99484f895418a7219cf81370573a94842128258f8f7cf7db024e33b7f4b99014c67a7961c74f22cca2e74ff2c84c6384e8701c3f08eaf4010161e370dc45f656b1b07351b8bfd728508a3be184c421c2bac1673a4ddae3ea75a3ef514f38541580713249a7fca6c68a946709dc4804edf22171ba6fd144ed81c573bc367fb2b0a3f1afdf3ee808fda2468cad51fc9e4e8d9aa", 0xff}, {&(0x7f0000001a80)="63dfea2555eaabc0ece8556ee37fcda131d0fb027d466614c3e1f0c8dcbf00c4e79afc6f9a2586eb9e14c028ef468b60182c925ae0bbb3688455fb0c6592ffba1eb22e5cecc203cbcf6d3aeefa4fffe43001eeef361f53ca99f78c116c8ebccb0f06", 0x62}, {&(0x7f0000001b00)="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", 0x1000}], 0xa, &(0x7f0000002bc0)=[@iv={0x100, 0x117, 0x2, 0xec, "79c1c783a49bc0603f39fd47fdfe2c3fd91386197d23365049aab4e0bf2c0082541e399655b9d1cabad42c4aaff2f4fa180877fe2d351b9e1a6cc7ca2a4210e179a28e33c06d2704cadaf90eb942b82c678ec528d0c6ed1554d336d5448746fb7d48fccb12a38cd73f58529f22438922879a4d11186fe47f30c4d56eba6688cbdb0479c7f075f6ef089bf5e19a4dd2dad680166bdb8b709d51023fbe95357da1bb2231567193484c41b76d97666d68408aacc26f2b5cd174cf8ef5b90a1335aed40720d9e0f887969177f9adee1b9e90ed3ab86264dd233d6010d727af98dfffd5e8f24a9a220e0fb4d997b4"}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18, 0x117, 0x3, 0x1}], 0x130, 0x8000}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000002d40)={0xff, 0x28, [0x4, 0x1, 0x157, 0x2, 0x800, 0x100000001, 0x3, 0x8000, 0xc2ce, 0x4c7]}) 11:08:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:35 executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x400000, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000100)={0x9}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x101000, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) 11:08:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x3ff, 0x20a42) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0xffffffffffffffff, 0x3, "4b69c59ef0d48deaa85654914c2e67d4ec4f00", 0x200, 0x3, 0x0, 0x0, 0xffffffffffffffff}) 11:08:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000000)={0x7, "da681e9fd8569ad27d20819fe9c924cbcb690eb23e4439f491d71e7a9ce73d29", 0x3, 0x824, 0x9fc4, 0x7ff, 0x14, 0x3, 0x2, 0x9}) 11:08:36 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:36 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x200) syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x1, 0x2) accept4$unix(r1, 0x0, &(0x7f0000000080), 0x800) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59e00000000a8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 11:08:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:36 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000400)='/dev/v4l-subdev#\x00', 0x5, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x80000, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000340)={0x80, 0x9e22}) dup2(r0, r0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x2, @pix={0x0, 0x7, 0x37303250, 0x7, 0x7, 0x9, 0x2, 0x6, 0x1, 0x0, 0x3, 0x7}}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e24, @local}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000440)) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000100)) clone(0x24004000, &(0x7f0000000080)="28046bde54a588de9aa80d672bb5c622bbe53e672e2df6b86e93ab1461e03e055c396d1be9e985aefffc", &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000a40)="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") openat$cgroup_ro(r4, &(0x7f0000000540)='memory.events\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, &(0x7f0000000580)=0x5, 0x4) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r5, @ANYBLOB="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"], 0x22c}, 0x1, 0x0, 0x0, 0x80}, 0x44000) 11:08:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}) 11:08:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080)) 11:08:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:08:36 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 11:08:36 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f00000000c0)={0x0, 0x1, 0x5, [], &(0x7f0000000080)=0x8}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400400, 0x10) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000200)=""/37) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) 11:08:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:36 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$int_out(r0, 0x2, &(0x7f00000000c0)) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x81, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast2, @loopback}, &(0x7f0000000300)=0xc) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=@canfd={{0x0, 0x1fe22000000, 0x3, 0x3}, 0x34, 0x3, 0x0, 0x0, "f5ea39415f3aa063405860dccca6cbd2133ab36a051b867296e9b00f6f5722d05eb849737dbbc4d076430e29bd852b0d2c6d6a6a01a4169fb96e968adf3f748b"}, 0x48}, 0x1, 0x0, 0x0, 0x4004080}, 0x40000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = openat$cgroup_ro(r1, &(0x7f0000000480)='cgroup.event\x83\x00\x97\f\x9dA&p\xf23`\xe5\x8c\xa4\xdf\xf8\x7f#\x16G5\xb9Z\x96\x04(', 0x0, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000100)=""/96) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000040)) ioctl$TIOCEXCL(r3, 0x540c) 11:08:36 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:36 executing program 5: r0 = creat(&(0x7f0000000100)='./file0\x00', 0x40) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x8, 0x22a, 0x9, 0x17, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_address={0x3, 0x17, 0x3f, 0xa0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_key={0xe, 0x9, 0x328, 0x0, "a36a7b16e8273ca1a1e55ca69e06a36620e1da83086daa09686a5b861cc44c81d4f040a5c65c762ffdc0c0738b58fa92e7738f8dfcd8293741f7d244fc15b6c41d5ed73ea149fc0f3bd90112624112ee5fda7607e40d1b0b1f8839ba3e0d356210b60692dd"}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x1, 0x3500}, @sadb_x_sa2={0x2, 0x13, 0xfff, 0x0, 0x0, 0x70bd26, 0x3504}]}, 0xb8}}, 0x4080) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000300)=0x4, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x6, 0x0, 0x2000000000000000, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f00000000c0)={r3, 0x31}) 11:08:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:37 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getpeername(r1, &(0x7f0000000000)=@can, &(0x7f0000000100)=0x80) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = semget(0x2, 0x3, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101, 0x0) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0x2, 0x391}) lsetxattr$security_evm(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@v2={0x3, 0x0, 0xa, 0x9, 0xe2, "0c250f25e051cc4b1868090b7a00a8a669ba3a1d0ddc7c0547dd14050ff04d165fae51758695989f222012d005e383d497f814dbf301103909f85656c8f7a3450c6f79bf56114c82bed997650722ad9cb873e9482cb4ed174e0f47b5d5b1651fafc1e28198259217208637f1ee8531b86cd76b5c4ac771e2a4dcbd9cc27ce6277233510fe413c392f7cd49000d54af9190cb6a9ef8c40625b955c8b9dde78cd862bb4b5fa1ad8ae3229f0c65994241e8b36586e1fbeb21fd7d4bb50239dba4f92df2912b4c7eacfac8d2392724f6e77823351dfa1d798fd438a336b77cd4defbb466"}, 0xec, 0x3) semctl$GETVAL(r1, 0x0, 0xc, &(0x7f00000001c0)=""/226) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:37 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000340)='/dev/v4l-subdev#\x00', 0x200200100000005, 0x60000) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x230000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ad000000", @ANYRES16=r2, @ANYBLOB="080026bd7000fcdbdf250200000004000400"], 0x18}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x88b, 0x4) 11:08:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:37 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x20000000020000, 0xfffffffffffffffd) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x100000010000, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0xf, &(0x7f0000000080)=""/39, &(0x7f0000000100)=0x27) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) 11:08:37 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000300)={0x101, 0x6, 0x80, 0x8001, 0x8}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) socketpair(0x0, 0x80003, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r3, 0x402, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}]}, 0x6c}}, 0x1) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:37 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:37 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:08:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f", 0x0, 0x0, 0x1000}) 11:08:37 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000001, 0x1) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f00000001c0)={0x1, 0x0, [], {0x0, @reserved}}) 11:08:37 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:37 executing program 0: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) syncfs(r0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:37 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x8000) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2f, 'memory'}, {0x2f, 'rdma'}]}, 0xe) 11:08:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:38 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10001, 0x800) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) 11:08:38 executing program 3: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:38 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 11:08:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:08:38 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x6, 0xffff, 0x4, {0xf, @vbi={0x81, 0x3, 0xfffffffffffff000, 0x41414770, [0x0, 0x9], [0x7, 0x5], 0x10b}}}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) r1 = dup(r0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x8, 0x6, 0x7}, 0x10) 11:08:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:38 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:38 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x7ff, 0x4000000000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:38 executing program 1: syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) 11:08:38 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x3ff, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0205647, &(0x7f0000000140)={0x0, 0x0, "4b69c59ef0d48deaa8fd6aed5ac63b99a2f9b59abaa3581e54914c2e67d4ec4f"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x20000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000002c0)=0x3) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x3, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x3, &(0x7f00000001c0)='[[\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r1, r3, 0x0, 0x3, &(0x7f0000000100)='/dev/dsp#\x00', r4}, 0x30) 11:08:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:38 executing program 1: ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 11:08:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:08:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x2, 0x9, 0x40, 0xfffffffffffff000, "0950b829b100f13169f8963f09b02455ae796787506dcb21cb627a6917721428"}) 11:08:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) getuid() lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 11:08:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:39 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x2c1f4105, 0x8000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0x40000000, 0x6, "96fd675aeb6df12c9ae3ba322828a79fd5fb4f4465e740d7ee9dbe0e7b964156", 0xffffffff, 0x0, 0x1, 0x3, 0xee4, 0xffffffff, 0x0, 0xffffffff7fffffff, [0x1fffffffe0, 0x80000001, 0x2, 0x7fffffff]}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7, 0x7f, 0x2}, 0x7) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x9) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3, 0x400000000000000]}) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @bt={0x7, 0x3, 0x8, 0x8001, 0x1, 0xb087, 0x1, 0xb}}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x8) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)) 11:08:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x9b52, 0x3373d57d, 0x0, 0x0, 0x0, 0x3}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x49) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x804, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000000000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x18}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8085}, 0x40080) 11:08:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000280)='/dev/v4l-subdev#\x00', 0x3ffffffffe, 0x18000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000380)={0xffffffffffffffff, 0x0, "3740c0f18664e414b878a71906000000424006c8cad76ca5f753edddad6da7ed", 0x8d, 0x0, 0x200000000, 0x0, 0x10000000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x100, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x9, 0x400000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x5, 0x3}, &(0x7f0000000200)=0x90) setrlimit(0x7, &(0x7f0000000840)={0x50c, 0x7ff000000000000}) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x15, 0x8, 0xb, 0x13, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0xd, 0x4, 0x10}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_sa={0x2, 0x1, 0x4d3, 0x5ec5, 0x4, 0xea, 0x1, 0xa0000001}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e20, 0xf3, @local, 0x8}, @in={0x2, 0x4e24, @multicast2}}, @sadb_ident={0x2, 0xb, 0x7}]}, 0x98}}, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r4, 0x100, 0x70bd2b, 0xfffffffffffffffc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xfffffffffffffff8}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000240)={r3, 0x765b3521}, 0x8) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0x3, 0x10001, 0x2, 0xfffffffffffffff8, 0xa, 0x80, 0x0, 0x2, 0x2, 0x2}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000780)={0x4, 0x0, [{0x4002, 0x51, &(0x7f00000004c0)=""/81}, {0x10000, 0x8e, &(0x7f0000000540)=""/142}, {0x3, 0xe2, &(0x7f0000000600)=""/226}, {0x5000, 0x76, &(0x7f0000000700)=""/118}]}) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000000)) 11:08:39 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0xf, @raw_data="dc0f6e1af5df9cba87cd3fffb761082ecb1c38cf7e91f1b88e02ffcc39fa86bf3f8a676eefa7e4e6bbf1310d38fe720541e8292908c9461c534e547a64a1060187cb88185b8cebd20857a652692cb910733dc11afc9a4f929d513fef070eac345f7937519013378ea9d8d48eab12a0d86391e0dcb2052c1c1a2a49f3755d99f5fb58d59d96466fa08b896c5adaca9460a27e8564a02faa1f20363b0aa7d709a23576860e544d1f26fb014991c39ca39e482d7724dba470a5dc5b7e8445b003273016665cf003d9da"}) 11:08:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:39 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x5, 0x7fff, 0x8000, 0x36a15e94, 0x8, 0xfffffffffffffc03, 0xfffffffffffffffe, 0x5, 0x7, 0x1, 0x40000000000, 0xfff}) 11:08:39 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) getuid() lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 11:08:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:08:39 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000000)={0x2, 0x10f, "545de275d005a810622ccc9fff226055431a31d43b0c79701772a17237b092f1", 0xb5, 0x100000000, 0x4, 0x52, 0x28}) 11:08:40 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ubi_ctrl\x00', 0x404000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0x1, @raw_data="e14c58ce4fcf3aa0063c21a4cc95944fc8f12ffc6041674e03fd464ecf58e7b35f5236ce4f8ddfef88eb572b7bc32ea8ad50430629cdf9a3a620b670853560e59d66a96bd33d6e0ea72f044eb05969aa5024db848e52be9a7bcae36f7a67714ec23601847e21d9b8c6e2e9286ce89097ea4bb2d9aa9f9b05ab502859990f4cf65b0126cb0b9e7ec4aeb5f21c38abd3d8fb3296b72f0091e422cde442efc3088edf6831666c9b5f3fcd0994ef0865bd7323a216fb1d7c22aa923618517b1c19cc40b63fcca8f2c23d"}) r2 = syz_open_dev$video(&(0x7f00000002c0)='/dev/video#\x00', 0x28d, 0x8200) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x408000, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000440)={0x9, 0x3, 0x3, 0x1024, 0xbe1, 0x7fffffff, 0x8}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000300)={0x17002, 0x17000}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000003c0)) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) ioctl$KVM_PPC_GET_SMMU_INFO(r3, 0x8250aea6, &(0x7f0000000340)=""/108) 11:08:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 371.191791][T24858] FAT-fs (loop3): bogus number of reserved sectors 11:08:40 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10002, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001340)=ANY=[@ANYBLOB="060000000000000000000000000000003900000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000004000000000000001000000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000700000000000000010000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000201000000000004600000000000000", @ANYPTR=&(0x7f0000001440)=ANY=[@ANYBLOB="00000000000003980f9100000044e91969a147144e86d4000000000000000000000005140000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="000000000000000000f00000000000009200000000000000", @ANYPTR=&(0x7f00000011c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000bb00000000000000", @ANYPTR=&(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0xfffffffffffffede) [ 371.245654][T24858] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:08:40 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x3ffffffffd, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x7}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000040)={0x5, 0x5}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000200)={0x8, 0x0, 0x8000, 0x2, 0x100000000, 0xffffffff, 0x4}) 11:08:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)={0x3f, 0xb, 0x4, 0x40, {0x0, 0x2710}, {0x5, 0x2, 0x81, 0x5, 0x7fffffff, 0xca9, "3a19d82d"}, 0x6, 0xed770905c0a192ee, @offset=0x5, 0x4}) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000180)={r1, 0x1, 0xda72}, 0x8) syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0xf4b, 0x800000000000) 11:08:40 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10200, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x100) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x4000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) [ 371.578678][T24995] FAT-fs (loop3): bogus number of reserved sectors [ 371.610680][T24995] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:40 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/252) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f0000000240)=""/210, &(0x7f0000000340)=0xd2) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) signalfd4(r1, &(0x7f0000000200)={0x8}, 0x8, 0x80000) 11:08:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) getuid() lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 11:08:40 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)="7849bbadc07bd6518a859545ced56e2b21b2a6e1977f52cfaa3eb1570e76d7ce33b535caeb269b9c71bf95b7612656c42cb7cc1f02122d1e071cad0e3a350b77ad2258432cddc52c70c1e45cebcbc5a8dc23a8f4e91d7bd05d57390a57fb7076c19af8fdce820764799531106de378942e042a16210a336438a2fc32020bf941a13091", 0x83}, {}], 0x2, 0xa) 11:08:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:40 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:40 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x5) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x200000, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000240)='/dev/vbi#\x00', 0x3, 0x2) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000280)) utimensat(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x77359400}, {0x0, 0x2710}}, 0xf66704cae6183e40) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x2, 0x8, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) 11:08:40 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x9, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f0000000040)={0x0, 0x2, 0x6, [], &(0x7f0000000000)=0x1000}) [ 372.186331][T25120] FAT-fs (loop3): bogus number of reserved sectors [ 372.227714][T25120] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:41 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x501000, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040)) 11:08:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:08:41 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}) r2 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@default, @remote, @bcast, @netrom, @bcast, @netrom, @bcast]}, &(0x7f00000001c0)=0x48, 0x800) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000200)) 11:08:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:41 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0xf4b, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 372.460091][T25245] FAT-fs (loop3): bogus number of reserved sectors 11:08:41 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x0, 0x20000000000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) [ 372.516445][T25245] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:41 executing program 5: getgroups(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, 0x0, 0x2008000fffffffe) getuid() lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev}, 0x10) 11:08:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ftruncate(r0, 0x28007d) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) getuid() lstat(&(0x7f0000000240)='./file0\x00', 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) 11:08:41 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xc, &(0x7f0000000040)='#nodevGPL}+\x00'}, 0x30) kcmp(r1, r2, 0x0, r0, r0) 11:08:41 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:41 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) 11:08:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}]}) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 373.104429][T25375] FAT-fs (loop3): bogus number of reserved sectors [ 373.113111][T25375] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x4}) 11:08:42 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x10507e) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/189, 0xbd}], 0x1) 11:08:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:42 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 11:08:42 executing program 1: keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'nodev', 0x20, 0x39}, 0x2c, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r0) 11:08:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000001c0)=""/242, &(0x7f0000000040)=0xf2) 11:08:42 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) [ 373.344858][T25492] FAT-fs (loop3): bogus number of reserved sectors [ 373.369693][T25492] FAT-fs (loop3): Can't find a valid FAT filesystem [ 373.370407][T25499] encrypted_key: keyword 'new' not allowed when called from .update method 11:08:42 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1e2e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0xd) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0xffffffff, 0x8, 0x8, 0x1, r1, 0xffffffffffffeffd}, 0x2c) r3 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000600), 0x0, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfddd, &(0x7f00000001c0), 0x12f}, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000440), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r6, &(0x7f0000000980), 0xffffff4d) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xdc, 0xffffffffffffff8d, {"845607a58689056da5e3c0a3b1b9e68e8c75cd609f6d70981c1808833fa67e519bbc470ee4fecbc214b0000639036dfd7a653309cb78564a0a8d81d5849bd1865ff0969f0c5876776c687dae9e978c91243129303fb446ed3f70612de65597d8aa0e276c44112a3c4ea2abd898f430b6756c8f464ac5485e0da7077c1c7fab0a5d0e23b1efb2928abeb3e52c9919b09946d8a25a2d17442196b25ac13948ecfc24f8aaf15d558cc987ea2cf324906c8f2df0f408ec6bf659ef1d926253b03793f77c"}}, {0x0, "b405a4de08680a0a298b06cbc5ae769584ff1f25f4212c2a964abc63c0f58c7c6afbd59994d44571ec0c5c840a54f4579fba6fd8f2c9dfc8d3c6fe52a0582eb2bb9e5e294492579d661da3302feb1026a0f48b6948df56f256fb1f48034022b7f9d781b1"}}, 0x0, 0x142}, 0x20) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000009c0)='&', 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 373.714358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.720149][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 373.725981][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 373.731751][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:08:42 executing program 4: r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4004000000001, 0x8c500) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8200, 0x60) ioctl$KDADDIO(r1, 0x4b34, 0x2481) 11:08:42 executing program 5: syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x4, 0x0) 11:08:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:42 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:08:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xc, 0x2, 0x4, {0x9, 0x96, 0x3, 0x8}}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0x40000000, 0x6, "02d8c7bd5ad29ffdade7286dda4194ade269c2144410f5bfe205cc62b8754e13", 0x79, 0x7fffffff, 0x1000, 0xffffffff, 0x5, 0x9, 0x92d7, 0x0, [0x5, 0x7, 0xffffffff, 0x8001]}) [ 374.010480][T25625] FAT-fs (loop3): bogus number of reserved sectors [ 374.028285][T25625] FAT-fs (loop3): Can't find a valid FAT filesystem [ 374.035045][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 374.035094][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:08:42 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x1) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)={0x3, 0x3, "a757f4"}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7ff, 0x1, 0x101, 0x3ff, 0x1f, 0x4, 0x5, {0x0, @in={{0x2, 0x4e22}}, 0x0, 0xd2, 0x9, 0xffff, 0x3}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r1, 0x81}, 0x8) r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x8, 0x800) connect$caif(r2, &(0x7f0000000040)=@dbg={0x25, 0x80000000, 0xffffffffffffffff}, 0x18) 11:08:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:08:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:43 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000001, 0x22001) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:43 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x401, 0xfffffffffffffffd) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) [ 374.261225][T25745] FAT-fs (loop3): bogus number of reserved sectors [ 374.283332][T25745] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:43 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1e2e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0xd) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0xffffffff, 0x8, 0x8, 0x1, r1, 0xffffffffffffeffd}, 0x2c) r3 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000600), 0x0, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfddd, &(0x7f00000001c0), 0x12f}, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000440), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r6, &(0x7f0000000980), 0xffffff4d) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xdc, 0xffffffffffffff8d, {"845607a58689056da5e3c0a3b1b9e68e8c75cd609f6d70981c1808833fa67e519bbc470ee4fecbc214b0000639036dfd7a653309cb78564a0a8d81d5849bd1865ff0969f0c5876776c687dae9e978c91243129303fb446ed3f70612de65597d8aa0e276c44112a3c4ea2abd898f430b6756c8f464ac5485e0da7077c1c7fab0a5d0e23b1efb2928abeb3e52c9919b09946d8a25a2d17442196b25ac13948ecfc24f8aaf15d558cc987ea2cf324906c8f2df0f408ec6bf659ef1d926253b03793f77c"}}, {0x0, "b405a4de08680a0a298b06cbc5ae769584ff1f25f4212c2a964abc63c0f58c7c6afbd59994d44571ec0c5c840a54f4579fba6fd8f2c9dfc8d3c6fe52a0582eb2bb9e5e294492579d661da3302feb1026a0f48b6948df56f256fb1f48034022b7f9d781b1"}}, 0x0, 0x142}, 0x20) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000009c0)='&', 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:43 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:43 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000001c0)={0xfffffffffffffffd, 0x0, {0x3, 0x0, 0x6, 0x0, 0x75}}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000340)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000003c0)={{0x4, 0x6, 0x6, 0x101, 'syz0\x00', 0x8d}, 0x6, 0x8, 0xc552, r2, 0x2, 0x80000001, 'syz1\x00', &(0x7f0000000380)=[',nodev-\x00', '}md5sum\x00'], 0x10, [], [0x7, 0x10000, 0x1, 0x12e2]}) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) modify_ldt$read(0x0, &(0x7f0000000240)=""/241, 0xf1) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:43 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = syz_open_dev$radio(&(0x7f0000000280)='/dev/radio#\x00', 0x1, 0x2) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000780)={0x10001, 0xffffffff, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x2, 0x30, 0x800, 0x6}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r2, 0x3, 0x20}, &(0x7f00000003c0)=0xc) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x84) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="9857a83823376d21a4bd589855fdc3ed6af89dc9ea7527e76f9b6629714960d33070006b312340e6d99b0fba31b96fd9b0ce8680da7d68a4d88c0f67bdc07c1cae420e2398f9e05d53e65e93f4aeb0aa7510e1f26255d8a85bd39c9cbe5d519a3d3195f594396d55ae3c4b27b30be5b124b9012b34853e5a0551b5a9105133293c1ee10558de094707b489d9df0f200706b836b74ecee3fa9b637cd2490be148979a5f73446b77045c402c5fb97de337704c329413d9996d250c45acfa17cd9664f9e3cb511703eb687d3b0dfb090ed8acc60047d54495de3c3449f4bfd2b0099448a010e6a4ee1af2eea1ca85", 0xed, 0xfffffffffffffffc) getpid() keyctl$assume_authority(0x10, r3) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.origin\x00', &(0x7f0000000240)='y\x00', 0x2, 0x3) r4 = geteuid() syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000740)=[{&(0x7f0000000600)="f98e77e111146c59c9341d1c97091ef816fa2c7e2e827e01235d9e2adea3e99b45d29b739e6041b8c49cfdf4ec51fa2d81c9825cb29f874c9eeb483739aec383b10ef73541366eccb5d39c1207f15df00875d25d7199334ea3543adcd4869b16ce4dc58ee66aa6c474e2ecf4d29942c0f94c231b30b6af662ad7894c923962d2f0903ad3a57ada83e7f2094cf609771041144b9b08c5682329833b48da0867254ac4fe9303c234dc4947e32c81da5fd9fdb4a127a9a068e40519742b7e8a3f9585e08e80734538408ace77ad70c7a6708554a2f08cd27be4d4bb083b1ecf6cb4d459a1054d085bd938a407f9468604202fb2", 0xf2}, {&(0x7f0000000700)="b640dea5a2de53050be341d7b605fb673a683ee98604ac7f58039c22c04a9e02c24dd9d2be1ca5bf51b244c445198e", 0x2f, 0x6}], 0x40, &(0x7f0000000880)=ANY=[@ANYBLOB="6a6f75726e616c5f636865636b73756d2c6e6f6d626c6b5f696f5f7375626d69742c626172726965722c646174613d6a6f75726e616c2c686173682c666f776e65725d72954bdc91d1178dc961c443220240405a266217daa730a6062ddaab35520008000000000000e60554f1f16bc67239f020e83954bce8a67febeaa949f0d6a435c3fc467ed649168bd913f135dc04c10822502e41f3c9d1de8151822f16ab01b0bf87d8ce5a690f399eb28584dcf43e9632c1aaaf6400000000000000000000000000000000", @ANYRESDEC=r4, @ANYBLOB=',fsmagic=0x0000000000000000,\x00']) [ 374.888640][T25869] FAT-fs (loop3): bogus number of reserved sectors [ 374.912515][T25869] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:43 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1e2e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0xd) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xf, 0xffffffff, 0x8, 0x8, 0x1, r1, 0xffffffffffffeffd}, 0x2c) r3 = socket$kcm(0xa, 0x522000000003, 0x11) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000600), 0x0, 0x2}, 0x20) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000040)=@nl=@unspec={0x0, 0xffffff7f00000000, 0x7e4c, 0x80fe}, 0xfddd, &(0x7f00000001c0), 0x12f}, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000440), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r6, &(0x7f0000000980), 0xffffff4d) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xdc, 0xffffffffffffff8d, {"845607a58689056da5e3c0a3b1b9e68e8c75cd609f6d70981c1808833fa67e519bbc470ee4fecbc214b0000639036dfd7a653309cb78564a0a8d81d5849bd1865ff0969f0c5876776c687dae9e978c91243129303fb446ed3f70612de65597d8aa0e276c44112a3c4ea2abd898f430b6756c8f464ac5485e0da7077c1c7fab0a5d0e23b1efb2928abeb3e52c9919b09946d8a25a2d17442196b25ac13948ecfc24f8aaf15d558cc987ea2cf324906c8f2df0f408ec6bf659ef1d926253b03793f77c"}}, {0x0, "b405a4de08680a0a298b06cbc5ae769584ff1f25f4212c2a964abc63c0f58c7c6afbd59994d44571ec0c5c840a54f4579fba6fd8f2c9dfc8d3c6fe52a0582eb2bb9e5e294492579d661da3302feb1026a0f48b6948df56f256fb1f48034022b7f9d781b1"}}, 0x0, 0x142}, 0x20) sendmsg$kcm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000009c0)='&', 0x1}], 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) 11:08:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) [ 375.030873][T25923] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 11:08:43 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:08:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000300)={0x5, 0x5, 0xa700, 0xa4, &(0x7f00000001c0)=""/164, 0x22, &(0x7f0000000040)=""/34, 0x5c, &(0x7f0000000280)=""/92}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) [ 375.159396][T25993] FAT-fs (loop3): bogus number of reserved sectors [ 375.173391][T25993] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:44 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x77, "8131e492ed5e2171bb4392f3db0639f84b769335957acc799e5068ad998d4cab52879709bad40668acbed254eac5ef10f725ccf03d88348441998631ece857cd847969d73b84334b0c4f2fa38a6d88bd4496006d8860b7b436d76b63f49edf7dae85b1684582c1ed0331a991595d7dc3e52110d957304a"}, &(0x7f0000000500)=0x9b) ioctl$VIDIOC_S_EDID(r0, 0xc0285629, &(0x7f00000001c0)={0x0, 0x1, 0xfffffffffffff4ee, [], &(0x7f0000000040)=0x80000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) write$P9_RLOCK(r0, &(0x7f0000000300)={0x8, 0x35, 0x2, 0x2}, 0x8) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000004c0)=0x8000000100000, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x4) 11:08:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, [0x7, 0x0, 0x0, 0x200000000000]}) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="b4b07033ac855b9adf29efc711ccc20e6033a55aa51e1d8fec7c92a26aed60e94aabb58e", 0x24, 0x2}], 0x10000, 0x0) [ 375.368523][T26107] FAT-fs (loop3): bogus number of reserved sectors 11:08:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 375.427939][T26107] FAT-fs (loop3): Can't find a valid FAT filesystem [ 375.533439][T26120] MINIX-fs: unable to read superblock [ 375.638783][T26157] MINIX-fs: unable to read superblock 11:08:44 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:44 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000000)=0x8) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) [ 375.794328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 375.800171][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 375.805998][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 375.811752][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 375.844408][T26239] FAT-fs (loop3): bogus number of reserved sectors [ 375.851129][T26239] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:44 executing program 5 (fault-call:5 fault-nth:0): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:44 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1]}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x8}}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', r1}, 0x10) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000240)) 11:08:44 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 11:08:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) [ 376.073885][T26359] FAT-fs (loop3): bogus number of reserved sectors [ 376.093243][T26359] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x200801, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000280)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000002c0)) setsockopt$inet_mreqsrc(r2, 0x0, 0x2d, &(0x7f0000000300)={@rand_addr=0x401, @broadcast, @loopback}, 0xc) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000200)={'b\x00', 0x6}) epoll_wait(r4, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x2) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) r5 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={r3, 0x7, 0x1, 0x100000001, &(0x7f0000000340)=[0x0, 0x0], 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f00000003c0)="30b1187ff308f904f2a3cf7a5b15f3d6f5f6a229506adb8bc4713abb844a432730566a5fdd1bdea4474494407e06e64b436a493b23426bed2595c82438d41e6e06967307bb31bb9a624247c6b544c05ac8dcfacb40162e739b26c5fbef1e96d043fa306434559ec72009fba87dfe30e67e5c9a6c613018284242329b900070614198c1ccfa10c023883ae531f61ec3daf1bd"}, 0x10) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x5) 11:08:45 executing program 1 (fault-call:5 fault-nth:0): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 376.308765][T26476] FAULT_INJECTION: forcing a failure. [ 376.308765][T26476] name failslab, interval 1, probability 0, space 0, times 0 [ 376.321610][T26476] CPU: 1 PID: 26476 Comm: syz-executor.1 Not tainted 5.0.0-rc7-next-20190222 #41 [ 376.330714][T26476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.340750][T26476] Call Trace: [ 376.344025][T26476] dump_stack+0x172/0x1f0 [ 376.348351][T26476] should_fail.cold+0xa/0x15 [ 376.352929][T26476] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 376.358720][T26476] ? ___might_sleep+0x163/0x280 [ 376.363583][T26476] __should_failslab+0x121/0x190 [ 376.368530][T26476] should_failslab+0x9/0x14 [ 376.373018][T26476] kmem_cache_alloc_node+0x264/0x710 [ 376.378293][T26476] ? __lock_acquire+0x55d/0x4710 [ 376.383214][T26476] __alloc_skb+0xd5/0x5e0 [ 376.387524][T26476] ? skb_trim+0x190/0x190 [ 376.391836][T26476] ? mark_held_locks+0xf0/0xf0 [ 376.396600][T26476] ? mark_held_locks+0xf0/0xf0 [ 376.401377][T26476] alloc_skb_with_frags+0x93/0x580 [ 376.406496][T26476] ? find_held_lock+0x35/0x130 [ 376.411242][T26476] sock_alloc_send_pskb+0x72d/0x8a0 [ 376.416421][T26476] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 376.422149][T26476] ? sock_wmalloc+0x120/0x120 [ 376.426810][T26476] ? _copy_from_iter_full+0x259/0x930 [ 376.432178][T26476] ? kasan_check_read+0x11/0x20 [ 376.437041][T26476] packet_sendmsg+0x17d7/0x5f80 [ 376.441890][T26476] ? lock_downgrade+0x880/0x880 [ 376.446739][T26476] ? packet_getname_spkt+0x2b0/0x2b0 [ 376.452040][T26476] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 376.457567][T26476] ? apparmor_socket_sendmsg+0x2a/0x30 [ 376.463037][T26476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.469275][T26476] ? security_socket_sendmsg+0x93/0xc0 [ 376.474731][T26476] ? packet_getname_spkt+0x2b0/0x2b0 [ 376.480017][T26476] sock_sendmsg+0xdd/0x130 [ 376.484438][T26476] __sys_sendto+0x262/0x380 [ 376.489273][T26476] ? __ia32_sys_getpeername+0xb0/0xb0 [ 376.494636][T26476] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 376.500177][T26476] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 376.506397][T26476] ? fput_many+0x12c/0x1a0 [ 376.510792][T26476] ? fput+0x1b/0x20 [ 376.514592][T26476] ? ksys_write+0x166/0x1f0 [ 376.519092][T26476] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 376.524549][T26476] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 376.530005][T26476] ? do_syscall_64+0x26/0x610 [ 376.534698][T26476] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.540751][T26476] __x64_sys_sendto+0xe1/0x1a0 [ 376.545648][T26476] do_syscall_64+0x103/0x610 [ 376.550249][T26476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 376.556133][T26476] RIP: 0033:0x457e29 [ 376.560007][T26476] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 376.579607][T26476] RSP: 002b:00007f35fae38c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 376.588008][T26476] RAX: ffffffffffffffda RBX: 00007f35fae38c90 RCX: 0000000000457e29 [ 376.595972][T26476] RDX: 000000000000006c RSI: 0000000020000040 RDI: 0000000000000004 11:08:45 executing program 4: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:45 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, 0x1000}, &(0x7f0000000080)=0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000280)=0xc) sendfile(r1, r2, 0x0, 0x5) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f00000001c0)) accept$ax25(r2, &(0x7f0000000140)={{}, [@netrom, @rose, @remote, @rose, @null, @bcast, @null, @netrom]}, &(0x7f0000000040)=0x48) [ 376.603928][T26476] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 376.611889][T26476] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35fae396d4 [ 376.619927][T26476] R13: 00000000004c555d R14: 00000000004d94a0 R15: 0000000000000005 11:08:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80002, 0x0) ioctl$RTC_AIE_ON(r2, 0x7001) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) 11:08:45 executing program 1 (fault-call:5 fault-nth:1): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 376.688705][T26483] FAT-fs (loop3): bogus number of reserved sectors [ 376.697834][T26483] FAT-fs (loop3): Can't find a valid FAT filesystem [ 376.815017][T26595] FAULT_INJECTION: forcing a failure. [ 376.815017][T26595] name failslab, interval 1, probability 0, space 0, times 0 [ 376.827864][T26595] CPU: 1 PID: 26595 Comm: syz-executor.1 Not tainted 5.0.0-rc7-next-20190222 #41 [ 376.836970][T26595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.836977][T26595] Call Trace: [ 376.837008][T26595] dump_stack+0x172/0x1f0 [ 376.837030][T26595] should_fail.cold+0xa/0x15 [ 376.837050][T26595] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 376.837071][T26595] ? ___might_sleep+0x163/0x280 [ 376.837091][T26595] __should_failslab+0x121/0x190 [ 376.837109][T26595] should_failslab+0x9/0x14 [ 376.837125][T26595] kmem_cache_alloc_node_trace+0x270/0x720 [ 376.837151][T26595] __kmalloc_node_track_caller+0x3d/0x70 [ 376.837167][T26595] __kmalloc_reserve.isra.0+0x40/0xf0 [ 376.837187][T26595] __alloc_skb+0x10b/0x5e0 [ 376.900770][T26595] ? skb_trim+0x190/0x190 [ 376.905085][T26595] ? mark_held_locks+0xf0/0xf0 [ 376.909843][T26595] ? mark_held_locks+0xf0/0xf0 [ 376.914590][T26595] alloc_skb_with_frags+0x93/0x580 [ 376.919682][T26595] ? find_held_lock+0x35/0x130 [ 376.924434][T26595] sock_alloc_send_pskb+0x72d/0x8a0 [ 376.929902][T26595] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 376.935630][T26595] ? sock_wmalloc+0x120/0x120 [ 376.940315][T26595] ? _copy_from_iter_full+0x259/0x930 [ 376.945687][T26595] ? kasan_check_read+0x11/0x20 [ 376.945714][T26595] packet_sendmsg+0x17d7/0x5f80 [ 376.945738][T26595] ? lock_downgrade+0x880/0x880 [ 376.945768][T26595] ? packet_getname_spkt+0x2b0/0x2b0 [ 376.955433][T26595] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 376.955453][T26595] ? apparmor_socket_sendmsg+0x2a/0x30 [ 376.955469][T26595] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 376.955483][T26595] ? security_socket_sendmsg+0x93/0xc0 [ 376.955501][T26595] ? packet_getname_spkt+0x2b0/0x2b0 [ 376.955520][T26595] sock_sendmsg+0xdd/0x130 [ 376.997938][T26595] __sys_sendto+0x262/0x380 [ 377.002455][T26595] ? __ia32_sys_getpeername+0xb0/0xb0 [ 377.007824][T26595] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 377.013383][T26595] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 377.019613][T26595] ? fput_many+0x12c/0x1a0 [ 377.024030][T26595] ? fput+0x1b/0x20 [ 377.027825][T26595] ? ksys_write+0x166/0x1f0 [ 377.032416][T26595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 377.037882][T26595] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 377.043352][T26595] ? do_syscall_64+0x26/0x610 [ 377.048098][T26595] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.054162][T26595] __x64_sys_sendto+0xe1/0x1a0 [ 377.058926][T26595] do_syscall_64+0x103/0x610 11:08:45 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x410040) sendto$isdn(r1, &(0x7f00000001c0)={0x10000, 0x6, "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"}, 0x1008, 0x8000, 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = accept4(r0, 0x0, &(0x7f00000022c0), 0x80800) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002340)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000002400)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x500c0}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x40, r4, 0x21, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x5) 11:08:45 executing program 2 (fault-call:5 fault-nth:0): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) [ 377.063526][T26595] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.069414][T26595] RIP: 0033:0x457e29 [ 377.073303][T26595] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.092914][T26595] RSP: 002b:00007f35fae38c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 377.101311][T26595] RAX: ffffffffffffffda RBX: 00007f35fae38c90 RCX: 0000000000457e29 [ 377.109282][T26595] RDX: 000000000000006c RSI: 0000000020000040 RDI: 0000000000000004 [ 377.117250][T26595] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.117260][T26595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f35fae396d4 [ 377.117269][T26595] R13: 00000000004c555d R14: 00000000004d94a0 R15: 0000000000000005 [ 377.136717][T26605] FAULT_INJECTION: forcing a failure. [ 377.136717][T26605] name failslab, interval 1, probability 0, space 0, times 0 [ 377.163790][T26605] CPU: 1 PID: 26605 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 377.172900][T26605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.172910][T26605] Call Trace: [ 377.186247][T26605] dump_stack+0x172/0x1f0 [ 377.190592][T26605] should_fail.cold+0xa/0x15 [ 377.195301][T26605] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 377.195406][T26603] FAT-fs (loop3): bogus number of reserved sectors [ 377.201111][T26605] ? ___might_sleep+0x163/0x280 [ 377.201130][T26605] __should_failslab+0x121/0x190 [ 377.201150][T26605] should_failslab+0x9/0x14 [ 377.212460][T26605] kmem_cache_alloc_node+0x264/0x710 [ 377.212480][T26605] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 377.212502][T26605] ? tcp_established_options+0x29d/0x4d0 [ 377.224811][T26603] FAT-fs (loop3): Can't find a valid FAT filesystem [ 377.227171][T26605] __alloc_skb+0xd5/0x5e0 [ 377.227189][T26605] ? skb_trim+0x190/0x190 [ 377.227210][T26605] ? aa_label_merge+0x13c2/0x2370 [ 377.259549][T26605] sk_stream_alloc_skb+0xc8/0x860 [ 377.264580][T26605] tcp_sendmsg_locked+0xc83/0x34b0 [ 377.269687][T26605] ? lock_sock_nested+0xac/0x120 [ 377.274614][T26605] ? tcp_sendpage+0x60/0x60 [ 377.279100][T26605] ? trace_hardirqs_on+0x67/0x230 [ 377.284108][T26605] ? lock_sock_nested+0x9a/0x120 [ 377.289048][T26605] ? __local_bh_enable_ip+0x15a/0x270 [ 377.294402][T26605] tcp_sendmsg+0x30/0x50 [ 377.298627][T26605] inet_sendmsg+0x147/0x5d0 [ 377.303118][T26605] ? ipip_gro_receive+0x100/0x100 [ 377.308143][T26605] sock_sendmsg+0xdd/0x130 [ 377.312569][T26605] __sys_sendto+0x262/0x380 [ 377.317081][T26605] ? __ia32_sys_getpeername+0xb0/0xb0 [ 377.322439][T26605] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 377.327986][T26605] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 377.334206][T26605] ? fput_many+0x12c/0x1a0 [ 377.338600][T26605] ? fput+0x1b/0x20 [ 377.342386][T26605] ? ksys_write+0x166/0x1f0 [ 377.346873][T26605] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 377.352316][T26605] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 377.357781][T26605] ? do_syscall_64+0x26/0x610 [ 377.362442][T26605] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.368509][T26605] __x64_sys_sendto+0xe1/0x1a0 [ 377.373255][T26605] do_syscall_64+0x103/0x610 [ 377.377826][T26605] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 377.383704][T26605] RIP: 0033:0x457e29 [ 377.387589][T26605] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 377.407194][T26605] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c 11:08:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x3, 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet(0x2, 0x10000000000003, 0x9) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x13, &(0x7f0000000280)={0x4, {{0x2, 0x0, @multicast2}}}, 0x90) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000340)=0x80, 0x4) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x40, 0x0) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x3, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev\x00') ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0xd7b7) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) getpgid(r6) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x5) [ 377.415607][T26605] RAX: ffffffffffffffda RBX: 00007f4861150c90 RCX: 0000000000457e29 [ 377.423571][T26605] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 377.431703][T26605] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 377.439663][T26605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 377.447614][T26605] R13: 00000000004c5551 R14: 00000000004d9488 R15: 0000000000000004 11:08:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:46 executing program 1 (fault-call:5 fault-nth:2): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:46 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:46 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f00000001c0)) 11:08:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000001c0)=0x4, 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xd8, 0x2c0040) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x5) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x4) sendto$llc(r6, &(0x7f0000000200)="33839f0ad8df18e7195fa710c14855151ce2f17a41e6155bbe0b7a9287da81548c6272885934d6439fb6a5d7618f95ce58edac0d4fb132af62a4895d1f456edab258a37f22d24cdcf582c1a7cd315e7af4237415e3e1163b6cf5fefb8615", 0x5e, 0x20040010, &(0x7f0000000280)={0x1a, 0x31b, 0xff, 0x40, 0x200, 0x78e, @local}, 0x10) 11:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 377.648755][T26729] FAT-fs (loop3): bogus number of reserved sectors [ 377.666553][T26729] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:46 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x2600, 0x4) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000640)) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0xe8, &(0x7f0000000300)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e21, 0xfffffffffffffff7, @mcast2, 0x40}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in6={0xa, 0x4e20, 0xffffffffffffffe0, @dev={0xfe, 0x80, [], 0x27}, 0xffffffffffff8b96}, @in6={0xa, 0x4e22, 0x1, @loopback, 0x7f}, @in6={0xa, 0x4e22, 0x8001, @mcast1, 0x1e148ca5}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, [], 0x19}, 0xcb6}, @in6={0xa, 0x4e23, 0x2, @mcast2, 0x2064}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000480)={r2, 0x80000000}, 0x8) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000500)=""/134) fsetxattr$security_evm(r0, &(0x7f00000005c0)='security.evm\x00', &(0x7f0000000600)=@ng={0x4, 0x12, "f76182c26b40f1b45e56e1e05b5d32a648ec0d"}, 0x15, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f00000004c0)=0x6) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x52, 0xd49e, 0x3, 0x0, 0x401, 0x7fff, 0x6, {0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0x1000}}, 0x80000000, 0x200, 0xfffffffffffffffc, 0xff, 0x4}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={r2, 0xfffffffffffffff8, 0x7}, 0x8) 11:08:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000100)={r3, 0xffffffffffffd12a, 0x4, "f18296ecb6d59b747525952ec2e79e054443eac21d48bf6026b884e956fb7292c36462f0facda658db94dbcb296df148d12021d6ec6879d011c4687fc844b094e636fdfbc2084eff96f3cc7e0f5fd6eea6cef39b12ddbb20a147f8e06b16bfe66f6b0ec3246a2612593afb911ed46838f889f7f76d3f4d3b9ea001152cadf2610ced55f3a6db37e51cdc6a6dd7eeec63d3c89bae57cdafbf53e498b906c5"}) 11:08:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x2, 0x0, 0x0) shutdown(r0, 0x1) 11:08:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x800}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x4}}}, &(0x7f0000000300)=0x84) r5 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r5, 0x0, 0x5) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x31c}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={r6, 0xc1b}, 0x8) 11:08:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="020300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:46 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0xffff, @remote, 0x5}}, 0x69, 0xfffffffffffffeff, 0x8, 0x8, 0xfffffffffffff001}, &(0x7f00000002c0)=0x98) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x8, 0x8001, 0x6, 0xfffffffffffffff9, 0xc491, 0x100000000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r1, 0x0, 0x17, &(0x7f0000000300)='@cgroupsecurity#md5sum\x00', 0xffffffffffffffff}, 0x30) r4 = fcntl$getown(r0, 0x9) tgkill(r3, r4, 0xd) [ 377.963560][T26868] FAT-fs (loop3): bogus number of reserved sectors [ 377.970758][T26868] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:47 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:47 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) pwrite64(r0, &(0x7f00000001c0)="272e2eee8090365ba9e36307afdbf0bea1aa03246475bdb09946e394288406ef01028f688f3626dfc16bbde97642aa338929fc8b8f67d62d3116c6723771e6641aba7bd03e4dd09a8d40c4ddfb8df63c0db1184c5c541e2896828a2059f78bbc5b583ef0099a4924a16e583b20d9b4ec9124b8fce5bd43497a9fa05450da8cb0afd35597e8ad09e0298424e3c854c9c57f6dd7ca3b9ccb909a01706950859e1293509c638f4a08304d1e3cc6d62d691e2d4f25b73e43ac1125aa", 0xba, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r2 = semget(0x3, 0x4, 0x4a0) semctl$SEM_INFO(r2, 0x1, 0x13, &(0x7f00000000c0)=""/120) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000280)={0x1, 0xffffffffffffffff, "3740c0f18664e414b878a7192200d2e6634006c8cad76ca5f753edddad6da7ed", 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, [0x1]}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000480)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x8, &(0x7f00000004c0)={[{@data_err_abort='data_err=abort'}, {@init_itable_val={'init_itable'}}, {@minixdf='minixdf'}, {@noinit_itable='noinit_itable'}], [{@obj_type={'obj_type', 0x3d, '@eth1!\'nodev\'keyring,]$'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/v4l-subdev#\x00'}}, {@fsname={'fsname', 0x3d, '){\\[bdev%^selinux'}}, {@uid_lt={'uid<', r3}}, {@context={'context', 0x3d, 'system_u'}}]}) 11:08:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:47 executing program 5: r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCSBRK(r0, 0x5427) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x48, 0xffffffffffffffff, &(0x7f00000000c0)=[0x20, 0x68, 0x78, 0x38, 0x0, 0x28, 0x20, 0x38, 0x18]}}, @release={0x40046306, 0x3}], 0x96, 0x0, &(0x7f0000000240)="a0b371aa59d434b3f61bf51b965e29d97d6c772c81ab00c008d6c3a0bcf0461cb9a385ccff64cc8f6881b00c8144708f87d622531f71d14576ed30a20a6bac6077b6a91f477a73e1baa8520a5f5cbac98bff07712394f29c8b89a7677b343d833738150d46a17152b3802207167acc5126a58c03631815d4cad0221391de97cd1ac439c788c06108c4e8ec8383a67a218e469e17ea49"}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='huget\x1aW@lbQ2MB.usage_in_bytes\x00\x8a\xd2\x84\x7fM\xb1o\x88L\xecg\xd9\x88Q\xf2o\b\xaad\xa1\xf3(\x03\x1fA\x99\xc3\x13S\x05L\x86\xaa\xb8\x18?G\a#\x1e\xcb>\xe8\x00\x1er\xe7\x0e\xc2\xfb\xe5.o\xc6\x86\x89\xec\xf6\xa9\xd7Q\xb5\t\xe6>)S8\bc\x9a\xb3', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x5) 11:08:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3, 0x0, 0x0) shutdown(r0, 0x1) 11:08:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="040300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x28000) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) [ 378.456588][T26989] FAT-fs (loop3): bogus number of reserved sectors [ 378.477101][T26992] EXT4-fs (loop0): VFS: Can't find ext4 filesystem 11:08:47 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x4, 0x0, 0x0) shutdown(r0, 0x1) 11:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x40000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x101) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) [ 378.509526][T26989] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:47 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030200000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000900)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000940)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000a40)=0xe8) r7 = getegid() sendmsg$unix(r0, &(0x7f0000000ac0)={&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000480)="dca696b6e06b5fc09b97ee689a1ca25159edcb7a68ba4bc154766c07a0d763a8467f9d59579a960d52abac687443771deac2531c8ebfc5aa", 0x38}, {&(0x7f00000004c0)="2091f796b223bba3bec135b29889efc51ad7a39525a4e4dd205748604158e33ff4828d4348cd2aafedcb27f07e0c74f6a727458cf91557067602942cd0de310a1690600ca8847eca00349d10a479b3a222c8e44e0a83bc83eb38df06b270f66b9a2c854e7142d3be8c3aab619f4cdde579bbe187d0ddad19f003bf3489f19112b3aac3ee488f83e8d49818046010bf81ce9386cf519d5256898b923d8ebcc867e389db47f5e2ff72de9c28", 0xab}, {&(0x7f0000000580)="cb28aa1a4f40eb2738ce299aeedea7c11be6e766d25856d3329b4781cd2ec22ccd7c41d96436178bfb8f70c3318a9aac4ade67e9358b71f563afe23ddd55e1f75485e79a2a978ebed6a00aef7f6d72fa7cfd30572dd4b4dbec6e8f0b0fe8b6ae40386c0d396b6ec60e394e874aacd592ef3c245e0d3fac42355f4ec851a573986eee7f30", 0x84}, {&(0x7f0000000640)="3da3ac7ef371fa01bfc677b005a4fae1f943830e32b84980a04089545bb8853f4b52073f98bafedc5e885d0e3b855084eb38a96e15421b080a03", 0x3a}, {&(0x7f0000000680)="27eb9f72c6fe85198eb99d8a76428f409e4b3c97b28d0874444af02964c6f72f19b2139b9cf78670a1cd91a07f1ee69e219d64621a422d08be4cfd6a2a92fc53717be697a474e4fa8b66677fcd4554edcdb0e34848f21d97a0029afed2d4262789d613a1cccbd58343297f25478b8f01e684fd6425bce99d8301cdddad75f23290758643fd8687cdca23138abf322b2e477891805b27237e4a8f2bd16a4ccbd6d42c020883376913d29d2b5db344b6f1e47247145dc41ab9e70b486d8058d641005f989a0eb0c8091312f9ea05768f", 0xcf}, {&(0x7f0000000780)="ccb9dbfc0319897f4dad6b2fecf47dc1e5a34c6012cdf862e3484b611a4cf16aa9faee11c8744a5288cb23a234b1d0abf568c95800b7758373ec4af8013d126fb8ca21b3caad090cc611801d69d5cc9861939e29909ca1142821337b56573bc23691669c2c248046464443a2e7cbed2c2021e6057b0d0f71bcf3d5c4bf81a2e2bdb95530af8f5c2bb24565470135759d8d916139f6dccb29f32c11857fea15d1669789a063ed87a4393fa6151f15d0372150bbae487cda12be954590ffce7a865885b6dc22b05fffa8deb26a4d7b6f339fca4e85c2125df15147b852b39d", 0xde}], 0x6, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x20, 0x4}, 0x48001) sendmmsg(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @rand_addr=0xe21}, 0x3, 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="a89053756aa25c7b8f3a955877f3c0ff739cc42763b3697f7d7b6c27726e4809877fb635902c62f0de8aa2341ccac43945b00e079b3042b6431c7c0abbd04a6fc684ddd5bba2f082ae268bc89ddb00dec89eb36e1eb3d4730f457d8b09efca380fceec8524e15fc87c4ea2039fd67950a5a83e0e7fe23ba9f93ed93fdb8c4a6b694cb15c86769605b3d9d404479f36d2aafb9e8ad53cd5e6b13f521fe9da0c501f3aebaf", 0xa4}, {&(0x7f0000000240)="9a6ecea30ac216c2759a9636000e7a9289bf2a158f216c9628d2dced295284eeb8903cbe01ac3cef8029f003a670c1eca873d814ea7eaac8897623f9664c5f43369b171c907b71a7f95c1256160a403bb3f8f6f5d682ce06a6d31140b903ba5e7db455ff2d2c08bcb5b553cf62574a44272533a2cd8974988561cbb90ea96b18bd", 0x81}], 0x2, &(0x7f0000000300)=[{0x98, 0x13f, 0x9b74, "2bc78c530e3bea2a64a9c7e269b5c7d5dfef83408bbb9f7334e47c6eee25520c749d9c08b58c3f6f5e64d08e1695117defd67f33b9c0db6eca9470e79f9ea1c175711cef3dd64a48792b43b360a25d20b94f6d0514bc5710b940402204bb4bf898393bc15c51621abe12bf0c1fc74d99c05a2dbfd04242012a13cba740fbd20723d7eb8d"}], 0x98}, 0x101}], 0x1, 0x810) 11:08:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) [ 378.811746][T27123] FAT-fs (loop3): invalid media value (0x00) [ 378.819480][T27123] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:48 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYBLOB="0156"], 0x2) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f00000001c0)={0x2000, 0x6000, 0x4, 0x100000001}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00r\f\x00\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x7, 0x0, 0x0) shutdown(r0, 0x1) 11:08:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', 0x0, 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:48 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x400, 0x5, 0x8, 0x208, 0x7, 0x81, 0xe}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x2000000000000, 0x7fff, 0x100000000, 0x80000000000, 0x6, 0x9}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000000100)="ca2936c34dac5c77a0a73ba70bcb8c8831230ecfae91a517ad5b48e621b469aa88d60edd7b0d8999a534e6225ca4cfa251de6c1b711858ca551bbd29177cc0728593e66c425483b8db4a3d48f9b52987f5889f81b135401e6aae3a27bc5258f208b4989c286d028e101105bb1944b95e8cb441b2359a3b93e8b706c8d87ce82841e47049601dfcfa9ad6ad17c67f752407581a2b537ce8bc6c1d6214f7f0231cdf793c7343cdcc00794efd60c1ba118569f7049f256023008e6b0c4d115f64083e1ad28153b65182d1beb7c9727ec9809b1a593280a3f7c97e6437") sendfile(r3, r1, 0x0, 0x200000000000001) [ 379.338818][T27246] FAT-fs (loop3): invalid media value (0x00) [ 379.346185][T27246] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r0, 0x0, 0x15) 11:08:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8, 0x0, 0x0) shutdown(r0, 0x1) 11:08:48 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000001c0)={0x6, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000380)={0x0, 0x0, "3740c0f18664e4fcffffffffffffff0c624006c8cad76ca5f753edddad6da7e5", 0x0, 0x400, 0x0, 0x0, 0xfffffffffffffffd}) io_setup(0x4, &(0x7f0000000000)=0x0) io_getevents(r1, 0x10001, 0x7, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x0) 11:08:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030302000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:48 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x9, 0x0, 0x0) shutdown(r0, 0x1) [ 379.613583][T27375] FAT-fs (loop3): invalid media value (0x00) [ 379.644214][T27375] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000140)={0x1, 0x4, 0x3ff, 0x7f, r3}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r4, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000001c0)}}, 0x10) sendfile(r2, r4, 0x0, 0x5) ioctl$IMCLEAR_L2(r4, 0x80044946, &(0x7f0000000000)=0x58bf) write(r0, &(0x7f0000000180)="8a8cd24bf27d8b90c12864f98636c913a2874500deec", 0x16) 11:08:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:48 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f00000002c0)=0xe8) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) r4 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002cc0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000002dc0)=0xe8) r6 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f00)={0x0}, &(0x7f0000002f40)=0xc) r8 = geteuid() fstat(r0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003000)={0x0}, &(0x7f0000003040)=0xfffffffffffffe7f) getresuid(&(0x7f0000003080), &(0x7f00000030c0), &(0x7f0000003100)=0x0) getgroups(0x2, &(0x7f0000003140)=[0xee00, 0xee00]) r13 = gettid() stat(&(0x7f0000003180)='./file0\x00', &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getegid() r16 = getpgid(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003240)={0x0, 0x0}, &(0x7f0000003280)=0xf6) getgroups(0x3, &(0x7f00000032c0)=[0xee01, 0x0, 0xffffffffffffffff]) sendmsg$netlink(r1, &(0x7f0000003400)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ec0)=[{&(0x7f0000000340)={0x2510, 0x42, 0x201, 0x70bd29, 0x25dfdbfc, "", [@nested={0xfc, 0x46, [@typed={0x8, 0xf, @fd=r0}, @typed={0x8, 0x6f, @uid=r2}, @typed={0x14, 0x4f, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @generic="5712104bfbf9c7b3ca413de4b6ae11deaec75698295b1aac6437d077b53c6fa090adb0364a530b659d6a163176ed824d223440ee7f744bb306c6194ee6883d8a9b2eebe2dbc9ba6407870bfbeb5fbf9da173eaed007e498f15affd79a7bc40", @typed={0x18, 0x3, @binary="34612e17b923389cd8368da236712063e775d023"}, @generic="e88e861ae5b7e4688fd364736220a907eb85d2571b2d7dbd981834cd3dcfffa99ed48a4733da216d574d8af1f86167304de7c3010e632b8ae62cc51e9d081d15430b424c54f763ba7f790da5bfc55312bccca0e2643488697979c7"]}, @typed={0x8, 0x90, @fd=r0}, @nested={0x18, 0x36, [@typed={0x4, 0x25}, @typed={0x8, 0x22, @u32=0x9}, @typed={0x8, 0x29, @u32=0x9}]}, @generic="2c0cfb7b6a30444ed13996fe3502d1fd0bdd8c1b9ef2ce348ddc52d8a730fe9fe47937d7b90f3eb07f7e636d51bd4800b307866b0b8ea86ed02364def901f7ea154365e12c35559c8e411118a991b20827", @generic="7ac7815c1fc51ace0ccc4737fe53babbf63602ed18a496c356abdc3befe596170ba0dc7b5a32ad150299ec556725469b9ac687cfe27c747ff78b7edfdbf0eaaf09c33fac2fd74dbc36837eea7a34835cb5e4e8d801ec4f2534ec273df6c1049c317c356fee71e718b5970fd5797c478affea07aa2e663ef8769f4c9d63e51f8ff253f67a1e21794fb8b13d570161dfc1e64d9b27c2f1e036ebed19d6f31e45fab16ed4a9b1ee4bf458a48f106459f74afec76450f0ff26bf8bfec98380bdd04ce2e7a08a2dd540905bbf", @nested={0x22b8, 0x5a, [@generic="5d0a6900f9", @typed={0x58, 0x26, @binary="36a9138ed3b7e61bbb226c0bbae88f08c6e334b0d9f2c9aab457814998db46334b5598a94204ab5e6c5f84ef80b63722eccc76511860d8acd4696aec31e3b84f104ce58542cbf79041b6fee5fd93dd661689"}, @generic="cb53515cee304187fa8525705667618075d40df58bed6357c603860765a6c7dee1a496319d48b8bde3fba2fb3a88285cc28e5eaf1725eb12029f4b10495a769ed07cc6bae20c1bee734c27533652c4cbcebb791a217e37c4c090c67ac8bf4dda00e517796fb82c4cd845fc8ff33fc8f9ecfc7c027e0571c0d00bddc6c7315637a4f886741fd87158a4862aa403bcf25f6d62fe0ce9364913d5428bc82076cddb0cdd66cb3bf3c2ae1389a63118a7d6ef8e37caa60c78c8dca3a5549c2c1d2eb3d975e5b1b48fd9b15987ebc7390cac1db543f5b7b0d3ec79dc2a186ce154cdab1302b63cf97a22e14febc4ff3fa51d8217", @typed={0x8, 0x2b, @u32=0x3}, @generic="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", @generic="317dd9bafa73b3f7c9c59fc61a435a971d09c9cba3a3f9b9476129a138b8e69838558f12c38b6f1f62b43bff84bff6d15fe4ca9015227450e37864a84928468c17286a90512b94f06ac9b13279bf48019a279452ed3b05478bbd257beb783057522047d28f285b43f864450365b2237a5854f7c9cdc5450f41a3a13d9102c325d309077945c76d9bfbded60db0d547bb75f4b1495082a91a7259c0c15a4306f307c2785e358932d5e634e3072479a983ad0da716a8dcce1f01ea2b03af202c5f77f73853b24446f604d978d164748c452a0d832fe39abef1c6b48864129a354bcce4209da06bba58e565ff0a5a966e0e1e9bc8d4c06c4dee4742808628787ee8f34f374bac71b69b333d5c98ced616599c116d3ab095807d1b079d4b4ed017749c8884167f028b7bb87fff8700b3fcc9b9bac25045cc0ac198c6f42d35b0c43e8d99329cceb5ddd72c80079ffe050ba600f889e3c0106bacb07f4076b0363977e297185e63728fcb7c03f7d2ba7afa76c07a69e736f96be58fe8ad9bbc1d0fca066e12c09e1ab8b1b856719cd160da3e4f774de35bac9e1c81e8fe579cf4a70b99acef24cfbffe8ce4b2439bc3bfd2bed471708f68a222bd52191550d70da7246b7f5e90f7ca65c416631a92403304799e3876cf331b3607ee00ed835b7719a8a2ac310ea3cf596ee0f8e0a931538576d3b8c43df13a9a33f2034dd4a5aed265eaa6e5ab6180054fa47a070f670cc92d96aed6aef515abb34a6d26fb497179630b67e95ce763ceeb716a6aca8f5669592ef7373b3cd47091187398ee3a2ca6d696cae0f7a00a23b0175187dbadc143359259fd30ba7c4cb5d33612188333ac3d23d9b38356730835724f455bba0acd5780ab62bc025d2cd72da5a4308ba11333cc4f8d2c73a618ce99cae8325ab3ee6fafd1fe27e3136b9c291cfebac418ecf266b9089f0ef09d09e5331b7716e5f541322dffdc5fd50689490a2d2e14f31724de1b4400b7c4e61a21981d7a02fa88007962482c563cdaa667b8a1ac940359d883a5b1bc96a1b632e5c40e9e58a3338f9d54f582904de9cbc8a0ba3aec37468c384b16fac624108068d60b714e4f327f7391bc8e872f9f073acf7db62f936b4024cf0188f33b0baf8cc23e8b70d5b6a4718f96cdf6a555959ff9cf7d64c4a2363e4f94d7a6f62d55f7177df284a93ac4715f9fa164edf86af397d7af542ba93785c9a5a9a270177ff22fcfe1ee9a8d484e91136319d7f1233d109a942bd27f6adf05c1e1bf8dd9e4562c2ca5e3876acdee8fa0d2f97d67b1948ef81de31ef17c08e26dcddcc0eb971c31bcfcc0d0beedebf09cc8b07a9d4d8826aacbae505cd8d94b8c634fefa0828c41dce8a90e6ad79f48037afa23a97503cf33da9711c58e6e8b23e7470eee93fdd954730d6f41a94fd1890d6935bd381be41cab9200aecc3c8d78c5418fdace7e0b3c7df9bef61bfea9db7f9ce9e162997d26e27ef6739dffd222b359edf4b66a5562bdea340d0a799b9e35a42943fab07a469a038a7e5951a29d3a9d4f13368d80a200d0e93a75ee028c8612402a1f5944ec23a1570f246a570a01216a3d9de5faa73fbc1e583fe55b789abe4d2461ec192b185268fd99b038edfac7e8c2638ea7da2aea952cae611740feb52f1ff157ee1b67d18a5e0197cf8640dd1d2d7e021c6aa5df265383d5051327492876becd2f493f306c0de2c69e74f33cb8b00f9dce8164d57ba7dd843b078fc07bc6cd2831716889bd4137272c74762013f2423feb028e8d8681755f6db206fab2aa18affb94198bfa61a862577098fd063ea26b365b32908841e0fa3b69d89a471924d9ab3a507110e3d43642aa9344830303fab7f729dd07f6ed0047fe78f033935c6f0b02f6c0440c90af2a5835d65a5c29bfbf199e3d36191cad46242e88871adcd648ba8f38177673c105fd53ab22c193f564b53b72d3d782b627e59231c171786d62b0d7d3275e7d0fe7e46bd6cafdb1242aa49bee090d6e284706e39f1d7d625d5e243eee8dcb6afdf6efe6f5e2851609d5e1a0110c4ed0603770eb2dd6882016dacbbed0885dd84d7aafb59860a868ee9c1038dabdb55c73da028dcb2edced1f3862ac3655e687e2461dc71c9a5f1cfa55d655f0f48a2fc6c7ff6df388c487d03709e5ac7e028957cd3a8fc7e649c7496cf854ea4ae74c99ff2021139a54c7c815010982ed611a2b869eb8c73acaa565b594e35edce8821c3abda4b6edf806d22e918f3ba2956478232f4586dfc69035c37e0f6602ed5b613938c16b9393770ddb6aac9fec0256a9260c66bd625599e812c6b44e2f32741d9c85993c8c855b101c473431e671d655d8db3e7f2578dbcdcf209b0ce031d819ad1c88951ac5ae2b6ac5a7266c625e11c681a333b3530be2ff5ff4282903b96d8a7d02272002de5af6f982f82031b9276a3892556b736d1abd1988dc29c74334c5156d03bdc2958119b563a1d857659561d4ca758d916b94fa624d416204489f2244d3f73b8bb70b16bca8df4ef521ff4d07dc8b2106c6a33bdce80c0002d88e6bf584b83da417f693ac28c1f72caeea0df35ddac3aaf195497ad78529cae55633155f338e08f2d7d61e1ea0a0130fae91b0ddb7a93037f2d4bc1e16bc17f5d12b2a2af731f7768cc9dd0a09c7ab50b3d2d136c7aa36feae690dfb34e0cdfc9112fea6add6862e44226337c5310469b6c730c91c3f8f80120845243b27d3721e5350cc721382e7e7d0c6e1df1870e10271e3f2e3f143846d440902dd408910a536f50a2a4e8f2a539d8f970c9e9dc4bf6add2825e8b3f8430f316c56cfa3e7e00dfc6953c6e3e1cfcb95ecb03ba7d62a1831ec38016ee7c026b5a36cae4680ac9b4474e7f3f0eec9b93851da0ccd013f8e0939b67c51958dedb6cdb42e1e55586f3835b213411ca06ff9ad706ad94f533d208ee561a693b407cc86e67654a088ed9bbe8bb6b0ca2af7f6b02d6bb1ad2b74fb32f993ab0347ad2c0e122ad0dad6adffa4667b30006ffbba699d18456fc20cbbf11041f841e3841ec754f114444fd3f3e4d11c71ff14af738fe896fbf98330cbc6e1777cece4d805c214adb320a3736ce6b6154662afa39781c7d18b4c964d99d7ab39a3b7ab65df2ce4cc74d21b3b324f867669505fd8f1a8eee0963236b19cb36c7fe7783c1951dec73e13ba61440419b5aa43c3148a436253c8a6f8c0bc4c7b8fcba2b1b0ef66a1cce213c08447a1c606feb09a5185cddc10cf0d58462e3e77283bfed2ee28ae607addc63a8bbc90305ab85bac8b866fafeee6e746c091018da026805cdab9f7d5d738ad0e1568ab244ba7f628ad6a6a6d5e3ddbea015db7114b1c2145c48d44371331b450cf7047f26e854ab61904560b5c084ccf27dd8a8ac56c42d33b4ce4c66aa0f1d4dab890732eb459efd48facdfbf819ffe524230cda77b0e06488e87f8b9b37b522c998fff54e96953c302f6a66228bc62b253512490e64d39376bc2ae3ddfc65d78c0779108a2b030818870e9f38f1d27a4ec71faf9bc7517b96dd32589bbdd27453557498af3ae2b9aa051160fcba7c982910d2159452b56cb5aaf7e89263ac44c1088be8e11b2898276d046ba3dc31631683984b74a821ddf5a88ab1c99dfb28e3c3868c6b86551707ec0baff18a285a469e5b5190db09ebbbcf3c67e91cdc853bcfa555484074f276fa6a7117e0fd8264655e426ba8eb74e630dd71ca5bd888546d19e043b0bebfefcde1e44e033f3ded8aafd6fbf1ad8a3d0d10a3a7b5ea53f5f123c9d0688e24235f9543144f04411fb4675d4d4480ef7a0159355142128ebee00bb84584538fd3f3fb4646b60a7c627cb8992ffecb101ef1109d13302930fb2f7b79fc0e7bc34f2d560c7834e896a33b187d301e493b49f50c4db07d46cfb98d143166abb8ac62cfdbcbc85b4605811fb39c106df93049f6265c4c3ec4a3dee78c4369fa7dafa63db76501573d011e5e733f732c95eef61a2b4132e10de5164b7c0fb209ae2f6d003768cb2cc16642aefa5e8ad30a26ac15c87f812d204c9a9829a605dd0c529ff1e468e24898d849f388920f736b83f8e117389243e941fc70d5ce2d654e03c1c3f1da729fd04b6c3befad9030ef913ac5d59fc0a1abfaf6f0904b6ca6ca65f137fbff121c11e3640edb3631e62629c3a0bd18ddf5205adbd20911dcbfcf578610e74d131fe2286a3ff4cd8a69d0ac5417653e618bb2f170e1a390eddb606b557fb6e111d022970993dbc24e193230919b93f00b8572941fba7df3c2cf1b922617e10457b0627af2b6678be247104194e25b76f37d8e1f9e81050232b5aa296fb46c48d80259e9e8f1208ab84d8df45bd1119551673ec908976f0d6a7624ae75f4b96443056b5cbc35eb07d71385450caf68c3269da114bbc74799896d9ca42bbd86c529fdc5595d7cadbdf8bb39c1fd97ea86dc9e9d69e0c5ec79bd381b82f10d5cbb14d3b6ffc594cc4a665f3343bc4c85bb786dc8b40ef2c84b23f557e78d4665d719e8fbf28952523116769286252dafe51beea15db319542386b6d8ad242e11c4f9cb7784c02a1464cac824b5885382a198fb9836957410488e3919b06a460bb33190c9a08c10b89f929b55ad6866235e970c3418983d6dac3acc4d659026dea83f0fc692587717cb4843ae85a38f4d42466a3f215afe7ead1045d6f4358038a22cfde9e09c471a25010dc5c92a70517f7901335519547b2c893400dd11b1dd89ca4a0dd20411049f2ba3b17ea3724269e199d514d9c06751b39fbfe814d86b212e7c9322247f535807829de6aa4219c2f3eea19430e9c017b8765ae00fb4fcebde099fabb864055fa6431711ad2c5e8fac12c8cd3b31a47e54048ea043e3b540d839d41b630941431e2e1bf40d45b5f6f44a25968aa2f8580e22c932781986822db4c6fb414bbb6396e24ad19e3b56b408e30d740595e841ca08cbf6797a3df541793704727521b0896dda44864fe5cc54ed8bc0a12c5c15365cf146d55465357ab8efa8277373af8260f601064d4fac9d5f6a92645198e47b17ab24a68acc5062289299515fbc0906e0e23b1baabe9a3defff6ac23fe807f061691b48d151735faba84cf8e526b945cb749268a5a1d90f3cee2d8c7214d76e3745d7869476aa1a5404c7db415c59a8d3d144da605f6eaeac8c31a33971860db1bc0d9b069af1d55dd88a9561647855466ab6b1114a5e531cd2a84327616fd5dae18d165680a195177f750326497b81d9598b4facb6ebee794e8fd2aa92dab0aac237b1940aeff4c99383033860f11347e4c6ca62a05320cb1ea7c13dc5689ba2753beeeae66b97bfd2d318c1e04ea10d4c7842ff25a6631a3d45f74ab045a5d155579afc270fb550e00512f35d628bd8d32664754981241c16a2b18b96fa566b1e1a3f2802397814e42acc88b653acafcd2388293c655c0a6f281d71a83a4210a15c81175df02af7907b7b8acf7aa3460ed1817c2ff87f83c4308a56916185833104c9475de0e8d5cf36a4943d6d1b0cbce956d3d6cd0459755fb659ee6caf7fc816d503028c6c989d2888cd5e7283d37ad67dfc8613f318a2e1ef009dfdac66238c688eab14a850eed6c947c68d138749850f58c0723b6a3c49456a880d0b41c16e63badde55871ab730f2602aa5d5e817c79db570ede966dd46cc35029676e27e47bc74e8e6cb076d70bc68d6babb2b422583d7a928e508d1e04bd4034532fad906c08400dd04725905f388dce63c1d552ad40e31b59eae77ab80b5b5b95550b5b3ffb077735fb076", @generic="f2deca14cac4595ec1b2c8598e9c0b4da806c789646adb62e7dde830ee19d3f3221a82c6527ac76e3b2edb6b841a7d7a005d7948ce435f6b19ab16f2bebb3fdf623c27b94474218f3eb40437833984d88b884c6315364233438e5a6f2d6af7252e54d81bad3c193ad307c5bf36f5860c55ee3fcfec3a7df6fd5bf9b559bc715b9d3c921089c221a67ba41968e7b58ee2f24c4596ed02975f2eac63022179a91c420d0ec86abceb3297c81e4b34ebc80bc105c095c2c7314cd3c6cb720f345d14ba57fd224d905c615919b4f68b9f", @typed={0x14, 0x3d, @ipv6=@mcast1}, @typed={0x8, 0x64, @pid=r3}, @generic="ed6f84ae2134e7935f986f6b830e7e4ed6dfab3290c6ea37a1bc5bdd05e28325492c895a3d57ac061dd2b973c0173db0f58a1bba1037b8db8f0e935c35c91880bd9062c5d84e8030d73f023c376a903cdcbcb44f53a3beebabaf1597f77d5a6c801ed674af85c9ed085d37f54427c00247e4"]}, @typed={0x8, 0x16, @fd=r0}, @typed={0x8, 0x28, @ipv4=@multicast1}]}, 0x2510}, {&(0x7f0000003440)=ANY=[@ANYBLOB="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"], 0x3b8}, {&(0x7f0000002c40)={0x48, 0x26, 0x8, 0x70bd29, 0x25dfdbfe, "", [@generic="92223a81c4becae828f2c8ed6e6aee12ea4481c5c8788cda7c19cdd641ca1ff6e23ffc31", @typed={0x14, 0x25, @ipv6=@remote}]}, 0x48}, {&(0x7f0000002e00)={0xa8, 0x37, 0x200, 0x70bd26, 0x25dfdbfd, "", [@nested={0x98, 0x47, [@typed={0x8, 0x31, @pid=r4}, @typed={0x4, 0x85}, @generic="3a9efc61a6d88cc68890c3b77f716d37b778cde6", @typed={0x8, 0x59, @ipv4=@rand_addr=0x3f}, @typed={0x4, 0x8b}, @typed={0x8, 0x8, @uid=r5}, @generic="68d2d220b90c9bd889a1685f33cb", @generic="8e20b62673400ee6115f572e48c9861f4b1a549ce9825b9cb6bb206c5ae84cee0f424a9092ad87995f2d757bbac012ce4c927d0a286a33819f5eb423799a536d8b44e665227056fb0e", @typed={0x8, 0x6, @uid=r6}]}]}, 0xa8}], 0x4, &(0x7f0000003300)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}], 0xf8, 0x810}, 0x4000) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x7, 0x0, [0x0, 0x0, 0xa0f]}) 11:08:48 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030304000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @remote}, {0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x20, {0x2, 0x4e21, @multicast2}, 'team_slave_0\x00'}) sendfile(r2, r3, 0x0, 0x5) 11:08:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xa, 0x0, 0x0) shutdown(r0, 0x1) 11:08:49 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x4, {0x3, 0x17b, 0x40, 0x328}}) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm_plock\x00', 0x400801, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x40400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x5) sendmsg$nl_crypto(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=@getstat={0xe0, 0x15, 0x20, 0x70bd2d, 0x25dfdbfe, {{'drbg_pr_sha256\x00'}, [], [], 0x2400, 0x2400}, ["", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0xc0c0}, 0x8800) [ 380.217012][T27513] FAT-fs (loop3): invalid media value (0x00) [ 380.228195][T27513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 380.258608][T27517] FAT-fs (loop4): bogus number of reserved sectors 11:08:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe, 0x0, 0x0) shutdown(r0, 0x1) 11:08:49 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x4, 0x0, [{0xc0000000, 0x10001, 0x1, 0x76b, 0x1, 0xffffffffffff8000, 0xc223}, {0x80000008, 0x200, 0x2, 0x2fef, 0x0, 0x5, 0x8c6}, {0xc000001f, 0xfff, 0x6, 0xeea, 0x2, 0x7fffffff, 0x40}, {0xd, 0x9, 0x4, 0x1, 0x400, 0x10001}]}) 11:08:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030308000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 380.311062][T27517] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400207) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x3) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) 11:08:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x10, 0x0, 0x0) shutdown(r0, 0x1) 11:08:49 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x20000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000200)="e529c8c342348e3bc44a4e20b04c8caf3ddfc30ee7093bf3b469d68a7a92629663e3128771f565f0f11b11b4627c9499b9478df965de5f9c26e254ef453dc4c2e4d0985d42d839da068d6f5afe5f901069437a25ccf2a9a6c4f68ca992ff2815ce736286343672096867b56f7e2c808915a73a23fdc38bd7118fe6f3c331ff282b7bc1413547c3cf72e015be5c02478c1145d56f31194f39dabb9cff5c5f4d14510046ae48e20875d8", &(0x7f00000002c0)="cd533ae4551b32e8c3898e517ca5ccf951a32771896738a385da0b48264944fa5959caf0a7e72ad71c6a3b4f14b65633f71bf239847198353a9a4853722bbf94e285bc0e2c47ed13a0b77d834fa514e12f1b1c2c8ffb58b4b973c08fd19483183251405887b9d49ba920462815b7d4b18c41", 0x2}, 0x20) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x1000000, 0x1, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20, 0x0, 0x0, [0x80000000]}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f0000000040)=[0x7f, 0x9a]) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000380)={0x101, 0x1f, 0x3, 0x3, 0x7}) [ 380.489595][T27651] FAT-fs (loop3): invalid media value (0x00) [ 380.514365][T27651] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000300)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000340)=0x7, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x101800, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x600}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x2, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000180)={0xfd, 0x3}) r5 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f0000000100)={0x9, 0x3, {0x3, 0x3, 0x8c1, 0x0, 0x8000}}) sendfile(r5, r6, 0x0, 0x5) 11:08:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="03030a000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 380.595072][T27673] FAT-fs (loop4): bogus number of reserved sectors [ 380.627313][T27673] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:49 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x400) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1, 0x70, "882f2a584e8718d001450ebeb96a8ecbfa97965fd2b2f933514b2d70dc5668d54f9c03bdd631da6969d0428e2adff4e00219095bef551d27e248c8aa08cc14243ad70ddbc16752a6b465b489bee0412034735b8388de2eb3fd0bb895313d784c5ef5f75acd7b868696a0bbe5c9769758"}, &(0x7f0000000280)=0x78) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000002c0)={0x6, 0x1, 0x7, 0x5, 0x7ff, 0x6}) r2 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) [ 380.754355][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 380.760202][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:08:49 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x11, 0x0, 0x0) shutdown(r0, 0x1) 11:08:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = fcntl$dupfd(r1, 0x406, r0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x5) 11:08:49 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x0, 0x6, 0x0, 0x4000000, 0x0, 0x1ff, 0x0, [0x0, 0x8001, 0x0, 0x564d]}) [ 380.844528][T27785] FAT-fs (loop3): invalid media value (0x00) [ 380.877282][T27785] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030310000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='\x00u\x00.2MB\x96Os\x02\x00\x1c\x00\x00\x00\x00\x00\x8f\x9des\x00\xf4\xc6.\xab\xa8\x19)\x00\x00\x00\x00', 0x0, 0x0) 11:08:50 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x17, 0x0, 0x0) shutdown(r0, 0x1) 11:08:50 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000000)) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7e9", 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) 11:08:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r3, r0, &(0x7f0000000000), 0x8c) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) 11:08:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030311000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:50 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xf1, 0x101000) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)) 11:08:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x6, 0x7fffffff, 0x0, 0x8, 0x0, 0x2c44, 0x100, 0x6, 0x8, 0x0, 0x7, 0x101, 0x5, 0x1, 0xfffffffffffffffe, 0x8f1c, 0x100000000, 0x1, 0x800, 0x3c, 0xaf7, 0x1, 0x8, 0x3, 0x7, 0x2, 0x1, 0x800, 0x7f, 0x3, 0x401, 0x9, 0x80000001, 0xfffffffffffffffd, 0x4, 0x80000001, 0x0, 0x9, 0x5, @perf_bp={&(0x7f0000000000), 0xc}, 0x1, 0x101, 0x1000, 0x7, 0x1, 0x5d31}, r4, 0xf, r3, 0x8) sendfile(r2, r3, 0x0, 0x5) [ 381.456020][T27924] FAT-fs (loop3): invalid media value (0x00) [ 381.467956][T27924] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:50 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x60, 0x0, 0x0) shutdown(r0, 0x1) [ 381.510316][T27932] FAT-fs (loop4): bogus number of reserved sectors 11:08:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030330000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:50 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000040)={0x5, "d212708183a2675896f068a175a378f08c9a4dc735e3657283af039f70e945ce", 0x4, 0x200, 0x100, 0x9, 0x4, 0x3, 0x783, 0xf79}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) [ 381.580097][T27932] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) [ 381.797050][T28051] FAT-fs (loop3): invalid media value (0x00) [ 381.815620][T28051] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:51 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0x0) shutdown(r0, 0x1) 11:08:51 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8800, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xfffffffffffffffd}, &(0x7f00000001c0)=0x8) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)={0x8, 0xa, 0x4, 0x40000, {r1, r2/1000+30000}, {0x2, 0xc, 0x4, 0xffffffff, 0xfff, 0x7, "4f8fd898"}, 0x4, 0x4, @offset=0x100000000000, 0x4}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4000000001, 0x8339afc686a0dbf9) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) 11:08:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)='selinux\x00'}, 0x30) syz_open_procfs(r1, &(0x7f0000000180)='task\x00') r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) getgid() lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getegid() fstat(r2, &(0x7f00000003c0)) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) getgroups(0x576, &(0x7f00000005c0)) fchown(r4, r5, 0x0) openat$cgroup_ro(r3, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 11:08:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030354000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001fe) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x80400, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000380)={r2}) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x1f) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x3, 0x2) openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r5, r5, 0x0, 0x5) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7f) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000200)={0xb975, 0x0, 0x8000}, 0x4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000500)={0x4e, 0x8001}) bind$rxrpc(r4, &(0x7f0000000540)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r6, 0x720, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdb00080005000000000a0c00010008ea0b007369700000000000004727774499df7f7768e4090ec877541354079fcc947991b02e5bfbc8bc1162beb67875613a811692be3e4f83ea9b1cd7beea01dc181d5a4ea18873bf94d0e2b6ab697e6a34f78e0905a8c5052684bddf585500d3271397408b95052e4e6ce7ecbe87618404e144b0389011d8e90c517623c5a494706ed2bf6264e43d261d4afb6615d4535e9b0b57c5a64a323b49b482b122d01b566a153af5f8069905bed1a693954f69dd88a4f90fb45ef859acd41b05c9b1fc8b398a86edfeb6a69350c6d539397cc2317adac7cecf1a8ec3a200000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) [ 382.341416][T28181] FAT-fs (loop3): invalid media value (0x00) [ 382.354709][T28181] FAT-fs (loop3): Can't find a valid FAT filesystem 11:08:51 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000001c0)={0xc0000000, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x3, 0x0, 0x3ff, 0x2, 0x0, 0x0, 0x2, [0x0, 0x6, 0x0, 0x6]}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) shutdown(r1, 0x0) fsync(r0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f00000002c0)=""/221, 0x1004000, 0x800, 0x2}, 0x18) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x420000, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000e44e6d0828f13d4b549245da420a25b93537a9b4a477658cc979343fc0ee21daeb4a7e6a5ede046ab929095d40c655d4e1c65a29fb94c6ef9853b2494eb51458fcab89f669e7f4bcd7a7"], &(0x7f0000000140)=0xfffffef3) 11:08:51 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x0) shutdown(r0, 0x1) [ 382.451916][T28184] FAT-fs (loop4): bogus number of reserved sectors 11:08:51 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030362000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) r4 = perf_event_open$cgroup(&(0x7f0000000100)={0x7, 0x70, 0x40, 0x9, 0x100000000, 0x100, 0x0, 0x40000000, 0x100, 0x5, 0x5, 0x1, 0x7fff, 0x23, 0x4a, 0x3ff, 0x3, 0x1, 0x7ff, 0xfffffffffffffff8, 0x8001, 0x2, 0xfffffffffffffffd, 0xb32, 0x401, 0x33d4, 0x7, 0x401, 0x5905, 0x0, 0x0, 0x90f, 0x1, 0x0, 0xee, 0x3ff, 0x9, 0x10001, 0x0, 0xfffffffffffffff9, 0x2, @perf_bp={&(0x7f0000000000), 0x8}, 0x4, 0x5b05, 0x2, 0xc, 0x2, 0x2, 0x2}, r1, 0xffffffffffffffff, r3, 0xe) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x3, 0x400, 0x4, 0x20, 0x0, 0x3, 0x40000, 0x1, 0xff, 0x380, 0x6, 0x9, 0x100000000, 0x80, 0x3, 0x2, 0x3ff, 0x1000, 0x9, 0xfffffffffffff24c, 0x6, 0x20, 0xf6f, 0x0, 0x5, 0x6, 0x2, 0x9, 0x9, 0x771, 0x1, 0x200, 0x9, 0xa77, 0x9, 0x5, 0x0, 0x1000, 0x4, @perf_config_ext={0x8, 0x9}, 0x400, 0x5, 0x6e0, 0x0, 0x441f, 0x2, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4}) 11:08:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) [ 382.549475][T28184] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x300, 0x0, 0x0) shutdown(r0, 0x1) 11:08:52 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x3a) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 11:08:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000100)) 11:08:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="0303000a0300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:52 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x1000, 0x3) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x101004, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x803, 0x0) write$vnet(r2, &(0x7f0000000400)={0x1, {&(0x7f0000000280)=""/103, 0x67, &(0x7f0000000300)=""/202, 0x0, 0x4}}, 0x68) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="03576fbaa9"], &(0x7f00000001c0)=0xa) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000004c0)={r3, 0x5, 0x80000001, 0x6}, 0x10) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000500)=""/229, &(0x7f0000000200)=0xe5) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}, 0x8) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x1, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7, 0x0, 0x0, 0xffffffffffffffff]}) [ 383.267130][T28338] FAT-fs (loop4): bogus number of reserved sectors [ 383.282954][T28338] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0x0) shutdown(r0, 0x1) 11:08:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300110300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$void(r0, 0x5451) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x40, 0x40000) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0xffff, 0x4}) r4 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x5) 11:08:52 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x404000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x59468cf4070e521c, 0x7, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed", 0x0, 0x2000000, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffff81, 0x0, 0x8000000006, [0x8000000008]}) 11:08:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11:08:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x700, 0x0, 0x0) shutdown(r0, 0x1) 11:08:52 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x4000000001, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f00000000c0)={0x0, 0x0, "3740c0f18664e414b878a7192200d2e6624006c8cad76ca5f753edddad6da7ed"}) ftruncate(r0, 0x3f) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) 11:08:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300300300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair(0x1, 0x5, 0x9, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000180)={r5}, 0xc) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000000)) r6 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0xfe1) 11:08:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xa, 0x0, 0x0) shutdown(r0, 0x1) [ 384.148620][T28491] FAT-fs (loop4): bogus number of reserved sectors [ 384.169585][T28491] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x900, 0x0, 0x0) shutdown(r0, 0x1) 11:08:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300540300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:53 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xa00, 0x0, 0x0) shutdown(r0, 0x1) 11:08:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000000)) syz_read_part_table(0xdbea, 0x5, &(0x7f0000002300)=[{&(0x7f0000000100)="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", 0x1000, 0x101}, {&(0x7f0000001100)="8febf44ef89b1587acc288728cec7316b1bf6c51e22d5b24cb2a2918e24fdf789deaf8ebbfcd167e37e00fc0deed09850999fb4975bef13fad5c733580a6e2e8dee6765341e27406d3cc760c1cece759b47914fc228e33b7391704e9a5630d9237eb73d02433316d21ae9447622cc1f1fcd137c0a5b3cdcd52ffde425af6d28e5ac2954cdb2b6fc03251209f09efcf56c36e0bbe7f8c1868852be09cc2446b96db69965e87033629abb60707a60aa50b621346f37f3d869701ebdd024ad59b677f9882fc49720ac2e04fd3777b1fdbeaf5415402300a0f8705ec6b4af230bccb8700eb", 0xe3, 0x7}, {&(0x7f0000001200)="400dd1b9880756e09ffcbd68689bd658e336aad367abc3d77eaa019ca0c2abfb956d6867255ad29b5eee56eb66b5f695be9bfbaac14970f2dddddcb3306ab318c30ba19c3a0b69762221073e9ab1e051f317a375685f2247873782dcc9d300ef5dc4c9823a056c646e788f2af008f5b3f06721e194e4806967caf558ddc14089466a9385c37ba188627dcef1312565f83ea2ea15", 0x94, 0x2}, {&(0x7f00000012c0)="d59327bbe75fa4031476afb3b08232589aaf868959b6fb549f5daabdeba66233a98defd487d8a3419e762d3525ff5bf9e76a7a42", 0x34, 0x1}, {&(0x7f0000001300)="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", 0x1000, 0x10000}]) sendfile(r2, r3, 0x0, 0x5) 11:08:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300620300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:53 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x402c3) getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) [ 385.022686][T28545] FAT-fs (loop4): bogus number of reserved sectors [ 385.031890][T28545] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:53 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe00, 0x0, 0x0) shutdown(r0, 0x1) 11:08:53 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300020300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) r4 = getgid() setfsgid(r4) 11:08:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1100, 0x0, 0x0) shutdown(r0, 0x1) [ 385.338947][T28575] FAT-fs (loop4): bogus number of reserved sectors [ 385.372361][T28575] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:54 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='huge_in_b\\\xf0\xe0\x8d\xcd\xa4LU\x13\xb6\x87n\xad\xb4tes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) 11:08:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300040300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1700, 0x0, 0x0) shutdown(r0, 0x1) 11:08:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000100)={0x5c, "9e273a42a120e69fd4230aaef707b67535fb31624a09afdc61ad68f61257be2895b33e34894a5778e6c99b5a098b24592ca586de7a410ccaed81d4d17a9d767ace3b22bc664c6ba3d3ba7e3ef9ca379985e143d5d7b46f1ebf5f6023a2bf76b02505baef2822c0fdd9e74bcdefcdbb3f40a54486425bd2af6ab1fd2d2d197442"}) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f00000000c0)={0x20, 0x0, 0xf26, 0x7ff, 0x101, 0xffff, 0x5}) 11:08:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000380)={0x53, 0xffffffffffffffff, 0x66, 0x4, @buffer={0x0, 0xd5, &(0x7f0000000100)=""/213}, &(0x7f0000000200)="095df610d9be69f914348cb659ac30806fbed58a116eba1b121db4124e0cbed022fa28d6b9bc8948eb4b07f196b2b71cad6d6d3e60f85b5535664a5bc10160d931e31abd061959e14bebea8e4e98dada05fc82c07bebbdfa009fdc1c76caa97997c978fa40fc", &(0x7f0000000280)=""/234, 0x0, 0x25}) sendfile(r2, r3, 0x0, 0x5) 11:08:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:54 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3f00, 0x0, 0x0) shutdown(r0, 0x1) 11:08:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:54 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300080300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:54 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x0, &(0x7f0000000140), 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup(r1) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000000)=0xe3f8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000740)='/dev/cachefiles\x00', 0x10200, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x6e, 0x6, &(0x7f0000000580)=[{&(0x7f0000000200)="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", 0xfc, 0x5}, {&(0x7f0000000300)="6e57f661562e67ab1a58362c7dab152da016aa342b5e8107a4851e2c6efdac739a42e768df83871760f4b9a1af983d9292e5de068fbcb27a879ab9fbef967e1a58ce995847fab8dd6c3d76f0d00fc2080fc59060ece41a08d6ec1bedb2b4a6202b8d981f6d1c01b1efb0caf613a8f8c4a681b725b49b77c289a275783f2bd9181314484839f8eb1fb953888eaeab31b0e3", 0x91, 0x5}, {&(0x7f00000003c0)="d05048e6ab4b607fb62c09d4c06e45f50d1513537cc60dbfb09da109c285f0c03b995220647c1daa595251e00d97e11a0b41e820dbc0bf6da198e4308adea6a3da240fc6269d8145", 0x48, 0x40}, {&(0x7f0000000440)="81c3f3cf34b49ff000fb69f9267fa2c865577558f0479e88c91315264b58ca605437798a1089dbccaf174338afaf222d567055bb7089ff8139dc548c701ac4d5a92fd9678a1ff19da53cc057f1aa16a69ee3b52b24a53698604d1244ec9f6a89659509ee99b90921ec69887e4ed08ad13de8739a4cb2aa852b7cac8570b37cdd", 0x80, 0x1}, {&(0x7f00000004c0)="32c32bff7d0f", 0x6, 0x3}, {&(0x7f0000000500)="73d252943e1ecba2392ea851c5e8fe5438a599fd78d3d6ef139d9c13b0eb05c76b8f65d4ace3e2f9f53b5b0829e83affc6dcd5ffaa518bea83ce2232ce57daa63b3780186b88b641d6601a", 0x4b, 0x80000000}], 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='mft_zone_multiplier=0x0000000000000004,show_sys_f?\x00\x00\x00\x00\x00\x00\x00mft_zone_multiplier=0x0000000000000003,nls=utf8,disable_sparse=no,nls=koi8-ru,dmask=00000000000000000000005,subj_user=,smackfstransmute=cpuset.cpus\x00,smackfstransmute=,\x00']) sendfile(r4, r5, 0x0, 0x5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f0000000780)={0x8, 0x0, 0x6, 0x3, 0x100000000, 0x1e, 0x4, "d174f8115141ed2bf6a94e3d12c1655157ba2b28", "c0b6e6f9ebe3086a661faf7953c1305fa70b0778"}) [ 386.182476][T28731] FAT-fs (loop4): bogus number of reserved sectors [ 386.208498][T28731] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x4000, 0x0, 0x0) shutdown(r0, 0x1) 11:08:55 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x181000, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="0303000a0300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 386.476989][T28861] FAT-fs (loop4): bogus number of reserved sectors [ 386.494624][T28861] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:55 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xbf2, 0x680000) ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000100)={0x8, "97c9bea8eb34bed2fcc46b829fffdd01d0903c52b999e9bdd69d7642c939ae35", 0x1, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r2, 0x0, 0x5) 11:08:55 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x4002, 0x0, 0x0) shutdown(r0, 0x1) 11:08:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000100)=""/124, 0x7c, 0x100, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:55 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300100300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:55 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x6000, 0x0, 0x0) shutdown(r0, 0x1) 11:08:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300110300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:56 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x707a, 0x0, 0x0) shutdown(r0, 0x1) [ 387.357565][T29125] FAT-fs (loop4): bogus number of reserved sectors [ 387.392543][T29125] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300300300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)=""/121) 11:08:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x7a70, 0x0, 0x0) shutdown(r0, 0x1) 11:08:56 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) 11:08:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe803, 0x0, 0x0) shutdown(r0, 0x1) 11:08:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{0x0}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:57 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfff, 0x2000) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0xf82, 0x1) 11:08:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300540300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(0x0, &(0x7f0000000240)={0x0, 0x7f}) 11:08:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf401, 0x0, 0x0) shutdown(r0, 0x1) 11:08:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 5: socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400205) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) fremovexattr(r1, &(0x7f0000000100)=@known='system.posix_acl_access\x00') r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) [ 388.275629][T29291] FAT-fs (loop4): bogus number of reserved sectors 11:08:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(0x0, &(0x7f0000000240)={0x0, 0x7f}) 11:08:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x20480, 0x0, 0x0) shutdown(r0, 0x1) [ 388.321818][T29291] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300620300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)={'syz0', "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"}, 0x1004) sendfile(r0, r3, 0x0, 0x5) 11:08:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(0x0, &(0x7f0000000240)={0x0, 0x7f}) 11:08:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x142800, 0x0, 0x0) shutdown(r0, 0x1) 11:08:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 11:08:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000200600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 388.667664][T29329] FAT-fs (loop4): bogus number of reserved sectors [ 388.702055][T29329] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x281400, 0x0, 0x0) shutdown(r0, 0x1) 11:08:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) dup2(r2, r4) sendfile(r3, r4, 0x0, 0x5) 11:08:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', 0x0) 11:08:57 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 388.916927][T29458] FAT-fs (loop4): bogus number of reserved sectors [ 388.966045][T29458] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:57 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000400600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) sched_getattr(r4, &(0x7f0000000100), 0x30, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:57 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:57 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x800000, 0x0, 0x0) shutdown(r0, 0x1) 11:08:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', 0x0) 11:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='.ppp1eth0\x00', 0x0) keyctl$clear(0x7, r1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) 11:08:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8000a0, 0x0, 0x0) shutdown(r0, 0x1) 11:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgzoup.c\xcd\x80\x9f\x8f\xfd\xb7]j\xb1m\xf3N17BE\xf7\x91\xeaw\x810\n\x1e\xfb \xd7\x0e\xdcB\xd7\x80\x05X\xba\xc9s-Mf\x05\xa9\x93\x13\xa5X\xfc5\xc6\xd322F\x88\x9ct\xfc*\x10\xc6\xb4\x80\xc3\xb3\x84\xed\xaa}\x81>D\xc2X\x00\xc0\x98uk\xc3\xc0\x14\xcc\xbb\xc2`\x13\x15\x86\xb4|\x14\\/Gw\x97\xe4\xe7\xcd6\xb5\x04!\xc5]\xfc\xd9\x92}H\xd8Ti\xa6\x00>\xab\xfc', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="0303000003005a0000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', 0x0) 11:08:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:58 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x14040, 0x0) io_cancel(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xb, 0x1f, r1, &(0x7f0000000080)="a2", 0x1, 0x2, 0x0, 0x3, r3}, &(0x7f0000000180)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r0, r0}) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x5) 11:08:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 389.849709][T29622] FAT-fs (loop4): bogus number of reserved sectors 11:08:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)) 11:08:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000302600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:58 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8001a0, 0x0, 0x0) shutdown(r0, 0x1) [ 389.890972][T29622] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:58 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x142800, 0x0, 0x0) shutdown(r0, 0x1) 11:08:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000304600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1000000, 0x0, 0x0) shutdown(r0, 0x1) 11:08:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/dev\x00') syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x200, 0x40200) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x26ff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fe) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x1, 0x0) bind$netrom(r2, &(0x7f0000000140)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = dup3(r0, r0, 0x80000) write$P9_RLCREATE(r5, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x2, 0x2, 0x6}, 0x3}}, 0x18) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x5) 11:08:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="9676fe52787409eef62f9f9f8b6c479006af02bb9e7b33199dad14c6a27e8ac94a8a8400360b02de2c", 0x29, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000200)={r3, 0x6, 0x9}, &(0x7f0000000240)=ANY=[@ANYBLOB="656e633d72617720686173683d78632a59fa84911e6263286172633429000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], &(0x7f00000002c0)="ab77be042a173153f90e85c575", &(0x7f0000000300)="bbd06ef4ce0e805ed52818") r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x5) socket$netlink(0x10, 0x3, 0x9) r5 = fcntl$getown(r4, 0x9) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={[], 0x32e7, 0x8, 0xcc, 0xea4, 0x0, r5}) 11:08:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x142800, 0x0, 0x0) shutdown(r0, 0x1) 11:08:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x2000000, 0x0, 0x0) shutdown(r0, 0x1) 11:08:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000308600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:59 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40004002}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x74, r1, 0x303, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x4040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000007c0)='cgroup.clone_children\x00', 0x2, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x79f2, 0x101000) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) r6 = openat$cgroup_ro(r3, &(0x7f0000000600)='hugetl=p\xf8\x99\x1dS=\xc2\x16\x9d\x02\x00\x00\x00\x00\x00\x00\x00MB.Y\x83&\xc4\xd7\xa5\xe3\xc8\x863\xf5X\xe1o\xc6\xbe\x1b\xbe\x8f\x8c{/p\xcd\xdfi\xe4\xd9c\xaatrB\xfd\xf3\xaa\xbb\xec~\xac', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x5) fcntl$getflags(r2, 0x0) timerfd_create(0x1, 0x80800) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x5, 0x2a640803, 0x8}, &(0x7f0000000380)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000003c0)=@assoc_value={r8, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x58, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x8, @mcast1, 0x2}, @in6={0xa, 0x4e24, 0xfff8000000000000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6}, @in={0x2, 0x4e24, @rand_addr=0x80}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r9, 0x3, 0xfffffffffffff801}, &(0x7f0000000300)=0xc) [ 390.718744][T29788] FAT-fs (loop4): bogus number of reserved sectors [ 390.725576][T29788] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000240)=0xc029) syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xdd, 0x84180) r2 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x9, 0x20002) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x6, 0x2002) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x4001fe) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000180)={0x1, 0x6}, 0x2) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x8, 0x80000) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000280)={0x3, {{0xa, 0x4e20, 0x1, @mcast1, 0x7}}, {{0xa, 0x4e23, 0x6, @mcast2, 0x1f}}}, 0x108) sendfile(r4, r5, 0x0, 0x5) 11:08:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3000000, 0x0, 0x0) shutdown(r0, 0x1) 11:08:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:59 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x142800, 0x0, 0x0) shutdown(r0, 0x1) 11:08:59 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:08:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="03030000030a600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:08:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendto$packet(r3, &(0x7f0000000100)="6d1c23bc26d86784846ab7f272655b4a1a5aa3e16a844b4e847d60d4d50e889ffc0bab991e9802cec521a0dbada7f10b1af677bdc758b2ce35ee806593dcc7d2e2f0861a358e6ac1671065971c9404bb85fe61e3b69770f62c9293f9ac2efb832aae204727ce02047f15c450c252faf8b07ad4e0599a2a426ba7278abcdd83fea3ca20a402fb90c11d1a454871fc37bd2de9fccf40c02d54bbcf1b4d138e2fb059f6469b5550fa900578d0c3b426a9921d41a8c8231fa79becf94efd495dc3cc7342c4d7dbfb151df917ab2a66f8636709474f128948e3", 0xd7, 0xd0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:08:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 390.985091][T29915] FAT-fs (loop4): bogus number of reserved sectors 11:08:59 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x4000000, 0x0, 0x0) shutdown(r0, 0x1) [ 391.029260][T29915] FAT-fs (loop4): Can't find a valid FAT filesystem 11:08:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x8000, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x4, 0x80c02) r3 = openat$cgroup_int(r2, &(0x7f0000000280)='cpuset.cpus\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x6}}, 0x18) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x0, 0x4, 0x90, &(0x7f0000ffb000/0x4000)=nil, 0x7fff}) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) 11:09:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="020300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000310600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000680)='/dev/full\x00', 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/vga_arbiter\x00', 0x40400, 0x0) r4 = accept$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0x6, r5}, &(0x7f0000000200)=0x10) openat$full(0xffffffffffffff9c, &(0x7f0000000640)='/dev/full\x00', 0x40000, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x5) r7 = msgget$private(0x0, 0x100) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) dup(r6) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000004c0)=0x0, &(0x7f0000000500), &(0x7f0000000540)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000580)=0x0) r13 = gettid() gettid() msgctl$IPC_SET(r7, 0x1, &(0x7f00000005c0)={{0x800, r8, r9, r10, r11, 0x50, 0x8001}, 0x0, 0x7, 0x8, 0x8000, 0x2, 0x5, r12, r13}) 11:09:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x7000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000240)) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000000)=0x44) r5 = shmget(0x0, 0x3000, 0x78000995, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(r5, 0x2, &(0x7f0000000100)=""/70) r6 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x5) ioctl$NBD_SET_SIZE(r6, 0xab02, 0x3) 11:09:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174", 0xb}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:00 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="020300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:00 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x20000, 0x0) getsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x5) 11:09:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000311600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r0, 0x0, 0x2) accept$alg(r3, 0x0, 0x0) 11:09:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x9000000, 0x0, 0x0) shutdown(r0, 0x1) [ 391.882163][T30177] FAT-fs (loop4): bogus number of reserved sectors [ 391.895710][T30177] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:00 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:00 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80401, 0x0) getpeername(r0, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x14) sendfile(r3, r2, 0x0, 0x20) 11:09:00 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000), 0x4) 11:09:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x10100, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f0000000140)={0x7, 0x3, 0x454, 0xbd71, 0x4, 0x2055000000000}) open_by_handle_at(r0, &(0x7f00000001c0)={0xd, 0x2, "c180ef6121"}, 0x46000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000184000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000080d70000000000000000000000000000000000000108000000000000008000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fba3bbff2180bab88c1ff8e97e7eeae91e237b7861a56615fd7743034b9b958d167d237e3bcdfcebf9cef2a0290041b1eb471e6b8ef3540b02c0ab287454485bcbc74d4d571a4052a32cd15a2cd6fdec3058f4a3afba2f65c95341fceaf0ec5da69f8cd5017050069872ad502227dfb2b0d4d5cfc6f6faaf829f0e377452f2e"]) r6 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x5) 11:09:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000330600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000480)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000580)=0xe8) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x4, &(0x7f0000000400)=[{&(0x7f0000000140)="3e60948db1410101c10a", 0xa, 0x9}, {&(0x7f0000000180)="73ab3ed63320ab70848ed288709a0f159ee640bc291637c5b27d70a878260eb52dbafad286d84ffe21194bab73c38aff10135ffd862d92ca26f5356fbcc58b46bb6a71c581bdf15a50a9e49dc44ed896470a89fcc8db4b66c3fe89e6a1f09f633f45ca4ef4aa2d72e3d6d8360ef6992a46d97e26e9cff6e633a2", 0x7a, 0x43}, {&(0x7f0000000200)="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", 0xff, 0x8000}, {&(0x7f0000000300)="0581cc8cd730e3eaad6d4132e57f612d143d24cd00c4a8ca6dd51537b173449a0d75a5635d93a83cbf01581b61542c8a1d37c4133bb86d8beeab27eaa8a05233b8b8697f504ada2b910abc6774ed8e49a713ee7484798b15758fb22e16c25e8ada7ce0df8d3986fbfeaaea1fdce09500f0fe59bf5e6961577980f4c85307ece4c1f60d62b19f53ceccc315a26dd89caf10bad3822fa8d180b96d575453044aba1099fba41c6596285f49b20cfcb3a16115646b94c3f6e8312bea22a62ec0d1747dc684439e0a0c22b1284d5c76ea27531cc4df4e7f62ef1af2c4c80f218559e73e61afe6d0b9ce19e9c8a676cb800f88a53bc4dbca11f5", 0xf7, 0x800}], 0x20, &(0x7f0000000680)=ANY=[@ANYBLOB='hash=rupasov,usrjquota,resize=0x0000000000000000,tails=small,fowner=', @ANYRESDEC=r4, @ANYBLOB=',mask=^MAY_EXEC,uid<', @ANYRESDEC=r5, @ANYBLOB=',aueit,\x00']) sendfile(r2, r3, 0x0, 0x5) 11:09:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xa000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:01 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x866a1}}, 0x0}, 0x48) 11:09:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:01 executing program 5: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000240)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x6000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cg\x00\x00\x00N\xe9i\xdf\xc0\xe7v9\x00\x00\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2ae840, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0xfffffffffffffff8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000001c0)={r5, 0x1, 0x30, 0x9, 0x4}, &(0x7f0000000200)=0x18) r6 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r6, 0x0, 0x5) fsetxattr$security_smack_transmute(r3, &(0x7f0000000300)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000340)='TRUE', 0x4, 0x0) 11:09:01 executing program 3: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2001001, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/185, 0xb9}], 0x1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0x142) [ 392.775799][T30320] FAT-fs (loop4): invalid media value (0x00) [ 392.788228][T30320] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000140)=""/167, 0xa7, 0x10000, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) sync() sendfile(r2, r3, 0x0, 0x5) 11:09:01 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:01 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000354600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:01 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) ioctl$EVIOCGREP(r0, 0x4008744b, 0x0) 11:09:01 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 393.060134][T30348] FAT-fs (loop4): invalid media value (0x00) [ 393.085626][T30348] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x10000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000362600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:02 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x4e79aeae3ec98478, 0x0, &(0x7f0000000000)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000140)=0x800, 0x4) sendfile(r2, r3, 0x0, 0x5) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r3, 0xc0385720, &(0x7f00000001c0)={0x1, {r4, r5+30000000}, 0x1, 0x274f}) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0xd000) 11:09:02 executing program 3: getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) syz_read_part_table(0x1000, 0x0, 0x0) 11:09:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000100)=""/4096) sendfile(r2, r3, 0x0, 0x5) 11:09:02 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x11000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x200c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytesv`]\x88(cf\xdc\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x5) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f00000000c0)=0xd93) [ 393.315435][T30477] Dev loop3: unable to read RDB block 8 [ 393.331084][T30477] loop3: unable to read partition table [ 393.345871][T30477] loop3: partition table beyond EOD, truncated 11:09:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="0303000003005a0000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 393.382030][T30477] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 393.425422][T30477] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 11:09:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002", 0x11}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:02 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() prctl$PR_SET_PTRACER(0x59616d61, 0x0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2) mq_open(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa4}) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 11:09:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000002c0)='hugetl\xee\x11\xe4\x1f\xfcbh\xc6ag\xb4\xeb\xeb\xba\x9a\xe0\xd2Pes\x04', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000300)=""/231) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000180)={0x6, 0x4, 0x3, {0x77359400}, 0x40, 0x2}) write$P9_RREADDIR(r3, &(0x7f00000000c0)={0x87, 0x29, 0x2, {0xfffffffffffffffe, [{{0x11, 0x0, 0x1}, 0x2, 0x4, 0x7, './file0'}, {{0x4, 0x1, 0x7}, 0xfff, 0x9, 0x7, './file0'}, {{0x8, 0x3, 0x8}, 0x2a, 0x0, 0x7, './file0'}, {{0x8, 0x2, 0x8}, 0x1000, 0x0, 0x7, './file0'}]}}, 0x87) recvfrom$x25(r3, &(0x7f0000000200)=""/174, 0xae, 0x40002062, &(0x7f0000000000)={0x9, @null=' \x00'}, 0x12) 11:09:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x17000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600200000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000140)={0x2, 0x4, 0xe9b}) mq_getsetattr(r3, &(0x7f0000000100)={0x80000001, 0x1, 0x9, 0x5, 0xb3, 0xfffffffffffffffd, 0x4, 0x1}, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x5) 11:09:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:02 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3f000000, 0x0, 0x0) shutdown(r0, 0x1) [ 393.904117][T30517] FAT-fs (loop4): invalid media value (0x00) [ 393.932123][T30517] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r4, 0xf, &(0x7f0000000100)={0x80000001, 0x400}, 0x0) r5 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000180)={0x6d20, 0x1, 0x8, 0x3, 0x2}, 0xc) sendfile(r3, r5, 0x0, 0x5) 11:09:02 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) 11:09:02 executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000580)='/proc/capi/capi20\x00', 0x4000, 0x0) bind$vsock_dgram(r3, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host}, 0x10) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1f}, &(0x7f0000000340)=0x90) sendfile(r0, r4, 0x0, 0x200009) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x767, 0x2, 0x0, 0x1, 0x12, 0x4, "83398b9dd1406432277eb709868a9e6c89d889cf7c834697cbda7212a2bd6ed8a06a02d86e0ded5336827b0aacc78722c811b20bc90aaa1f16b0a7c3b838bb8b", "75dd4f38bf7833c285cf7eb91a04ff075a4142aaa8500f82df93b28a85bdd348e236d8d9acc66f0cb0ae88f1fab74a42b88eb75526ae9dc99ebe89c22a5155af", "1b747921f1c7f35e552daf8a0b176e20662404f27646a0c0844b47a9f955d2f7", [0x7ff, 0xa2]}) 11:09:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x40000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600400000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:03 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, [], 0x0}) 11:09:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.current\x00\xa46\xe4\x80V\xdb\x83\x92\xe7\x96\xb6\x16H1,\xba3\\L\xf9R\x05\xa7\xfdU\xcd\xfa\x10\x84\x9d9\x8c^]\xa3S\\\x8c\x91D\x83\x90\xd5:_\xc2\xb5\xc0e\xeb\x9a\xb8\xe1\xe3\xb7)(3\xa6l\x8b\x18\x9d\xb8\x862No]C\x86\x12@\x1f\x8d\xcay\x1bD^\xe2\xd2B)hL*\xff\x13\xe6\x9f\xfb\n5\xf7\x99\xf7\xd4\x8d\x7f\xfcM/SU\xa5@\xdfk?vR\xa2)\x8f\xd8\xdf\x85*\x91g\xa3\xd2\xe2X\xde\xac\x05Z\xd0\x1aD\x82\xb4O\x01\xe1d\x8c\r=\xe5U\x90p\x84\t\x8f\x83\x9d\xd8\x17;\xb1T\xe8\xea\xfe\xf3o\xb9\xa5\xe1|\x1dB\x9b,\xfe\xdc\xedz\x9bs\x03\x8a^\xdc\xb8\x9f\xa4\xa2\x9bJ\x86\xa0\xff5\n\xa7w\xaaO-:\x91;\xc1\xcfx-\xd4\xa5R\x7fD\xdb\vO\xaf\xcf\xa8S\xfa\x9f\fZ=*\x8eV\x88<\xde\xde\xd1\x197\xa1\x98a\xbb\xa50\x9aM\xe1O\x17\x96_\xde\x81\xee\x0f\xba`w\xb1\xdf\x85\xa9@\xa9*-\xe0+C.4!\x1c\xacw)G\xf3SX\xf6F\x85kV\xa3\xa3i~xF5jT\xd3\xe5\xe2\xbe\x83juQ\xf1\x14\x1bO:\xf6\xd1\x98\xfc\x0f|0O\xc2\xf1wdM\xa2[\x1f\f\xcbx\f\xf8j\xcf\x83\b\xd2\x9a\x84\x90p\v\xc8&\xd6\xed*e;N\x12\rp\xf5~F\xf0\xab\x84\x80\x05/L\xf6\xdaX\xddv\xa6\x1c\x05\x1f\x7fF\xae\xdc\xafM\xccC\x00\x00\x00\xf0\x8bf\x1c\x9f\xa1F\xcaX:N^\x83\xc4\xec\xfd\xe1-S\x99\xfbj\xf9\xb4\x93\xb7 \xf0\xc8e\xc1\x99j\xad\xbc,$\xdf\xed\xa04\xf1\x85\xbf3\xd0\xab\xa8\xb1\xeb\x06\xc8\xa0\x9dlm\v\xcf\x18]{\x96\xb8\x96\x8a\xaa\xb7\xcbnx\xc1^\xc8\xadE\xb3M\xd9\x1fL\x99\x1b\x10\x0f\x90\xa5m\xf8\xe3\x12\xe6\v\xccK\xc3:`\xc7\x83%\xd4\n\x18\xa5\x1aI\x05R', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000300)=""/165) 11:09:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x11) socket$kcm(0x11, 0xa, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) sendmsg$kcm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000009c0)="26330a8bf5189fc5bb9779ff4d7bc49267f6a34129572c05807ead334cef26a4af866911da692ba5efc938d6457d6b6d49cb10e80ff4bd339a800f492b1d22c919b04aede7e1e4128775cd479e8a8bd59f6166697a123de4324d0a6cdd5d43b9d1ba4b14ab401fccf1723373b72518cf8167b1655e0ed9b503679dd21d818015fc31e8e4605b7c0fa0b8b55db1de43bc6430a6c466f0d180b1978c07d5836ae615c3197c751b3477e64d289e105beae1ed56098b995732620317ba8d0d7812c6ac1caa0f796d6eb6721f53ce013441fa15b59ebbc0cac43196ecff36b58adcfc9b4ce256ab7848baadfa55231a1a4acff1bb21e2d47c5a7b3bff0d2843bdff9773a31b981010626b88c9461d5f55ab29b06e942225de39560951ccf25ca49e5bbb36b9ea62a8ac0a0f46b2e8378dcba860bdcf7c870be7ddad574404b636942a3f9c3b7dc6986b8c7398a81340ff17f449b3dad0f9274d4c263710630fdd33bec1e2017e528bab835999c25a88d751118c4a592ab77f41bfe55f4a0b5b88ba4f3f078e41b4e173cbe4cdbcce0d0a714099e2594f7bf19c936da3072e5614c5da49b40388517ab7ba1b3cc34a4fc713382cc48b81b6cbdf1519b0b31d024061be1ed049cf6119ae689ce37b9d89b4dc8802b5cc5add8a95feb88c6c402f301fa6a2263bbdaafb647d0c81202e77b5ed8b196cb3003d3315ed5643e896191ab444955785919169a848971914f99f144203e9f229a84a2ee9ab5a8242a416ce3055ef10562cb7b4af2b4a4bc1479714abaacfc8873601f2186e6615fd0cc55e2c1712e721fb47dbd45be75df1b19e97b76753a24fa9cb2e4ac0988cddd03f8f963e27543fcfe999ed09e39f365ddfd3709ab464242bd67e902c0206cd0e49af7b0198f65c3394e32430891e369089c7f5031a50f09d3571150e4cf416e8ec2fd48af0e3d04030600324093aeaa5b8e2e9643cb01e7e9a8e5ee90825a8a0a79281e5f378d937c1d597d0884c236b421b0fe325d035a8de3acfb1d03ab5991f09cad8baeb992cb6599a36b76ee91d1e72ed84d749eba1ae7c7c16149888f6b2e19c024f32e9291b71aafb3b7fe2f9f104fca29b9ee21ee9c3cbab5f51a62171b1daee1f9301a216b9e55bcbae5044d957c9450b8dcb16f67ce54618498177d2731046f6b21e33ae4aacc568bb381827102d1dd233caf678a157105af485356e9e2f2b0a6e3a5fb92d9ad389dea93c25eab847adbc7665ae22eff65aaf9192027d2f2bd06e4f86d48388a073b4ef049c1557dbbe6773e33e7bc0d287ce22edc61ef1359f56ceb635a0fe89a6f40856e804231e3ecbb4c9687ead295b199efa82eba1ab473d2f70094612b883ca803177f9a30d304da290b602957d30d3587ef4fc6b4febb311ea895206b47f8c09c2a4904a63bb133a151e53ed07d9be9c4032e34d3639dad13d1b65379752d7e2d8bdc61ac8c7dab49ff4fa86c4abef9ce53952c21b72e56e4338972c688edbef2fd64d3adda4ecedde2dabb89de738ee8075f9fd6b6b464b76125bf9f1c83978f82cbffe2ab3aab25b66c338030951515132dc55c27458c55b5f20eaee296fee2549b1a1181d3317858ea3d9f556cc83bf0a553fa75703e92e195e4e39411cf728a7ae28fff358a45178ecf2eeb570c1b562c92c6ac2e063babf13d7a72f797fc1857e8545d7eeff99e58061961583c547e67e424b727d9a9e63558790c992777dcef38556106c6905ee9a7314bf50d9c9e0f2fb3b048c803773db331e9b6663e146e90086a0db50465b9f6052a89675f5f2791a3b478b546b752177f642c46355221c4889e757586ccc7a4f3fbdfa778a6a3fab0e40a01276758ccb0e10cf5bde004936e7eba88d4c7e0749fca344740e39a026f4c93e18a438c7e26f0bd1550df3627dd4b457e7f9f38e710e8a502f2bd9c9c14d5d9cd3cecc11bf7482eb4a42552f7ef1615776ae1f2bcc4940cf9060d724a0c1ac1fd62d3e73ffa4a4a7105c16d49b4a35231ae0aaffa56783c393ca9bb8f41fb1118b539c25b25baaed88e8c590e7ff9d8cd7db5c1623319cb5afed5fb4aa90b4114eb8c77f53ea75bec0ea319ec5f008e9e349c1524ce1405b257afbfd1e56c460f23d89773ae6c9ae5575df38ceb9a37770bfb334adbbecbe542a00371f9fdc6e9286e75a280647b0ed5dfa16975906fc55bce9224bd310e1bee640c3c890c716c762b2de33d2093d2bef840e4cdc5be330c9790a09fbe1684e4fdb6b99219afc92179e85bbc889ac07199f8304e208035336f725cfbb2ea81188f14099b6af8594035e2a26c4e56d29edf1f4928928113cc8c952d56b631fd18495184af0d6cf9aaf454b935b242ffe66ad110244ad9afd03d9f710e7dc92278555143f079180992d3ba4f16da0fcbbc0899ae2a8c9646df116d429bcadfc3fbbc41b525c5762e836fc46044ca08adaf89f00ccc8c3cb97dd5ca174a9b6f87ecb4071451cf3f117fca7108c8efe3883cc2824fd12ae69b16b2a7b66f0568a64b83e0ba2919a06312fd28adbdd346b7fd9a8857df68edb08770748f03e8a0cf8d3db3d6109d7a19ab91270b31566885f8cdac619d8fc301cb5fd26f3f223e3070ce27f4a5168db1ba4a4ac28a462454a9438dbf139fdeb43eeb6fed7645ffea2f992b9be4b6e5c6ec9586f1c128091fd33a439ca800d08f1607dad69e4be5df7942c9d02d3293a87b1549461e53abefdd1cdcbff3698631b19b78e4836a0993e3707d406cb82c63e36cabb661cb832a01ae7d2e9f35e78798cbcadb27bbdd027958a4be83f449d323903d648aba8f73e95eb430cb3b3ce110761c990441c31eab11c3fc278e79af9d5505b451850c755949fdbbb7b400ed1c2fc4c770f5191021f851d43ae243abc4e91ddd710dedf732a48250a3f1e71e28e45f6bc7892e359df8d53153108dd94d0f65a3366fd4af62971a02d6af2baea5c0b5e52f4708c025b8af81dde38ef6ea52c380cbca17958e644b039eec8d89bced952671562b66f4acb577acda78f722a48df051e154c5b9c0f2913c448c41958eba4432df33f783ef76cca9197d46ba43eb0807322ea4d7ca279795db75a0300bc5e90424e880dd93d67ed9a332b7bb99f7257d2e3a7b2ddbb0bb70ecfd6fc365c997795c4c9ba915b80899879f27bd8b6e27198e8e6be188a1cd410518165fb8cd841accb797cd4ad3633e3824e7d5653f524b5741b9898c31f836f13e59dd3cc614222ab784caaa9dee24dfbd93b0d66edb9180b0d528bba67c50c13912cd323ba99840c1d9b38459b8161a206a8dfd44a435d026ddcf8df5a1bd9fc9fbaf0716b04ea5f7b15379ab7bd215c0ab7926c97ec502cf4592b7f870bcc47ea5b982193286347053197f2e642d3f5fa086e59b42f9c81e28f18d0484e09a9b0077973391d8f2b0d1f37d97133ea66e37d2bc89fb9a9b653cc52051145c6c2b38a68cb32a3a4562af72ffbedcae239d2ffa8ade503f287981d46b42ea0ea86771931b876d7b6d185a144977957256a3d9f55a579acf827c1fd5fca250097a16b52f98620c730f6e07aeab68ceffd4bd933ba90edbe7c6ac94b4a9fad6ccc479e6734e59c2cc44eb2529f6dc9ea0635511b678e337efb544b92337d92d241c57566f8bb186877e833a2dcd7a2a70aaa45cb2fa96c66417c4bb2867b524e3530b30e0aa8658f5f8eed1ff937a1d30273f6740a4cb78455b1b410b4135632fd2f2dccb3dee3a73ee22f13de48c23630070439ec76f8a30643ba2f7abdfd266045d7884e64162cc280dbc11d6be57a56e63d80fdd4a69f1ad9213790d807db26a4503f888a1b932a36b8ae564b22f07db63059b7a1d7ee441daf103bdf34dc92bbd5a1d8fa14fa65a8f7e3e89e2ffc487af8a16111bd95ec022d22b06eaa3e9fe983958afae8a69f379f00f5cc94b7976c0c1091aa0793e91b435c1d642feaa6584fd9ef1820300c0478a288b18d47a0f7c25806a73d6e106c01900daa24d7b9dc3287770106c842c40fdceeb4072b4b33414e1dda2cb0515ea64b2cf8acb3f88b0f415808eb1831bbf81f5fbcaf35d183ad0a61ffcd1a047a2685e218bb11e6e710c9416c8fd930cdfd5eb993f6a32ed76b3b32a198fbb34b34bbcd460dce49c133d75ca60f7cb024def375153f5fc967edb75d98a8732f2f5cd3a17787bf77f5a02ef169d890ff96ef59d147962837305ce3ab20776bc01e8fe32ddd57ef386811c97b4aca3b364a4f4703222208d18dc343fb8d2ab07c48380fb331ed38a5f88171159b2e4dc0fa2164fc22a194a48366af5e2ab4925df203f20506115b794bf675dbc44dabea131272570b2e11247957f886d41b12b8a521bf56b75178ce1711f4107d7ef43f950d452787014a42f77b882df1adfeef04c16fa714b59eccb7863bd43da15da632d99101b9e8a9ffd1bec9d146c66782fa0642bf0c297c7c6febe2f0fd2c9268b6cdc6f3ac03c2463803785875ea8a2e7c6031dc4b663769a43d63f64b0a10e4e6ed119270ed17788f8d6381c80c51f9fcd6646fc764748f7d75f75fc22807021c4e560b434a89336d6aab7aa8ed2e42b3a6a46d287a945865fc10c18ec8b54df0316e2cef1487f63ca1fd3f73eed17ef07ac9050048824da91511a811baed315709557b99ac431fe3787f46bb3b4927e231b23d03fec839f5c2ef3979bedec815a05a3d27f78f12aaa4ae16b2b292c999244e528ce7c1ccfa1a2ff29bce81bbaf880a5d86b39af2c6b97305ce136bf76cb7beb4d1c5a133c68d068215974d368f04b63b3ccb4c0ad8c718e5dbd18b78ea8ef7f531a48f014fabaee2", 0xd54}], 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) [ 394.764803][T30660] FAT-fs (loop4): invalid media value (0x00) [ 394.782715][T30660] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:03 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x40020000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:03 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x2a03, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000400)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000540)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000640)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000680)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = geteuid() mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x800, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',cache=loose,msize=0x0000000000000002,uname=hugetlb.2MB.usage_in_bytes\x00,access=client,fscache,fowner=', @ANYRESDEC=r5, @ANYBLOB=',appraise,fowner=', @ANYRESDEC=r6, @ANYBLOB=',uid=', @ANYRESDEC=r7, @ANYBLOB=',mask=^EAD,dont_appraise,uid<\x00\x00\x00\x00\x00', @ANYRESDEC=r8, @ANYBLOB=',euid=', @ANYRESDEC=r9, @ANYBLOB=',\x00']) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffff9c, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {&(0x7f0000000240)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e22, @rand_addr=0x4}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f0000000200), r10}}, 0x18) r11 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$TIOCCONS(r11, 0x541d) ioctl$SIOCX25GDTEFACILITIES(r11, 0x89ea, &(0x7f0000000000)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x10000000000001cf}, 0x68) sendfile(r1, r11, 0x0, 0x5) 11:09:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600800000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:04 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:04 executing program 5: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) 11:09:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x60000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:04 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000000000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) 11:09:04 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600a00000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:04 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x707a0000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffe) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) [ 395.622274][T30810] FAT-fs (loop4): invalid media value (0x00) [ 395.641977][T30810] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) prctl$PR_GET_FP_MODE(0x2e) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:09:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) 11:09:04 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x80040200, 0x0, 0x0) shutdown(r0, 0x1) 11:09:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300601000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:09:05 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270", 0x14}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:05 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) 11:09:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x404, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x7fffffff, 0x7, 0x8005, 0xff, 0xfffffffffffffffa, 0x9, 0x529f9e8e, 0x101, r2}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x5) 11:09:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) bind$packet(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 396.519180][T31043] FAT-fs (loop4): invalid media value (0x00) [ 396.526942][T31043] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:05 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300601100000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:05 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x1000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x20000080000000, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0) r1 = gettid() r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f000001bff4)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigqueueinfo(r1, 0x1, &(0x7f0000000180)) [ 396.594628][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 396.600449][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 396.606283][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 396.612054][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:09:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xa0008000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200200, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000180)={0x38}) r3 = openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) setsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000140)=0x8, 0x24f) 11:09:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) bind$packet(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:05 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xa0018000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet6_int(r3, 0x29, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x5) 11:09:05 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) bind$packet(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:06 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300603000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:06 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xbd1b) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x30}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)=ANY=[@ANYBLOB="dd000000b740882c0d5f28d365dc4ab7167e57268941f30a3335f106d08332eb95194c6985c3c40bea6fd9f4e46609d5574516ea8a83997e33e8bc3e6e094ed76224a86ceac103581b4e36f9978541715b0a1282d590d4d2388a1a2f7e91267e786b4dc44dd6515d17b0905b1137fb08b92b1317e3b73ddb504ebd3f3e13372e3a26cf12ca576e0f3538583fc10c337b4d12baf1e7a7d9d438bb82888c149d83330a7f2d41a629aefb67c273556775689fcf5223ff8e569b281dc7cdb5eecc6034b7b8a8cc75df11a47fbcb8044c95de8087e510011905fc173f2be8edeb506aed"], 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0), 0x0) 11:09:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) 11:09:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe8030000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) pread64(r0, &(0x7f0000000100)=""/141, 0x8d, 0x0) 11:09:06 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf4010000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 397.386522][T31222] FAT-fs (loop4): invalid media value (0x00) [ 397.393629][T31222] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = socket(0x9, 0xa, 0x200) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @local}}, 0x3, 0x6}, 0x90) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r4, 0x0, 0x5) 11:09:06 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000380)="285474dae6badf3ab85f04000000d2eb", 0x10) r2 = accept(r1, 0x0, 0x0) sendmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340), 0x8000a0}], 0x1}, 0x0) 11:09:06 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300605400000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00'}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xfdffffff, 0x0, 0x0) shutdown(r0, 0x1) 11:09:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x20) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000280), 0x64227835314c388a) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000100)={'filter\x00'}, &(0x7f0000000000)=0x78) 11:09:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) close(r1) 11:09:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300606200000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 398.245116][T31474] FAT-fs (loop4): invalid media value (0x00) [ 398.251964][T31474] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:07 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4d}}, 0x0}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) 11:09:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xfeffffff, 0x0, 0x0) shutdown(r0, 0x1) 11:09:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fadvise64(r2, 0x0, 0x401, 0x1) sendfile(r2, r3, 0x0, 0x5) 11:09:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="03030000030060000a000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:07 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:07 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0xfffffffffffffffc) keyctl$clear(0x7, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset\x00\x00\x00\x00s\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x20, &(0x7f0000000180)={@dev, @local}, &(0x7f00000001c0)=0x8) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$RTC_VL_CLR(r4, 0x7014) ioctl$TIOCCBRK(r4, 0x5428) sendfile(r3, r4, 0x0, 0x5) 11:09:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xfffffffd, 0x0, 0x0) shutdown(r0, 0x1) 11:09:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600011000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:07 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:07 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xfffffffe, 0x0, 0x0) shutdown(r0, 0x1) 11:09:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x2f8}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000340)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) inotify_init() r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000100)=0x1, 0x4) sysfs$1(0x1, &(0x7f0000000140)='\x00') r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r4, r6, 0x0, 0x5) 11:09:08 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x104000000) [ 399.113416][T31712] FAT-fs (loop4): invalid media value (0x00) [ 399.132679][T31712] FAT-fs (loop4): Can't find a valid FAT filesystem 11:09:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x14280000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:08 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl(r0, 0x4, &(0x7f0000000000)="7c731b4e9bbd07be677332dd3150976975d882434a49f367") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) 11:09:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600030000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:08 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:08 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000001480)=[{&(0x7f0000000000)="7830841b", 0x4}, {&(0x7f0000000140)="04557416a0b5bf0821b58c93da7ee88fae1bfdffaa788b3300ea545f98015bf2b82be22b81a9c6b42e939dc69276e8972f76633f79eec10bbbd7bb8cfcb33a7e", 0x40}, {&(0x7f0000000180)="f5e445ab11731ccb3054f7a0c027fcf9f1b4de1f0f932d44ac80d1968879f53612b07a8422988b5be1fcccf7ee1caf7356cd6638964ab185590bdc5eafa3214234ad6cb55d7dd57e347ce7db3999aedbed30766f0541fb2653fda1919044f11e62edb74300b77c0ce332a4df47c2fa43d10432f58eea2d4258caf8a0f81441eb7300c5ea5cb9e569a63ad8ee1649a2c896a083d06a8e7e60d96af2ba6eaf2027f9643d1415944b81ae071f588ab800367bcfab96fb3d57ad4602e9ff31191d48b3d3879dc0b3247e", 0xc8}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="8d5f01444cbc12d636f55093a044c2ea5edde8cbe0b617f2870bc91b15c5e7becab9ec6aec085f294c292d7a1156c77c891045b67daab7366409c8d44b", 0x3d}, {&(0x7f00000012c0)="3aa25ff6c5e07d38737922b3aa00f0b6357eefd5df7cf270860b2d988aa58b4a6e335632b3e558081c9684424cbaa6c17279a5d5b4d67e5b99df3be25ed1cde54ed26be6f59eb534c82aa5d79e776ded543179869d21b3206f99fa75df8144f47cc683ca49", 0x65}, {&(0x7f0000001340)="00a7a69b3d291bf8cafc3d8e46e4b4211a7cbadda27be3421fbc49067b370fecbf8d5dea3e7bd7e399078cd96d2d40316d0ac8a8af7fb43bd8866dd70c553bf84da6538aa5efb43ee69168421a1a8c1cf0153b3ee4bb0cec06a173ebac5f5fbfa4a4259bd2701faac2eb224522f9a5ada9bd2296a5e61600644a8e66e1614086579b794e63f7eb904db43b70b14df6d534d5d3246acc830a29b19a1f078f374595", 0xa1}, {&(0x7f0000001400)="d11d5bdb4c60aa4e7631fe4fd1618638c9ac5fd19aa2b1d0921efd9cce50f6f05a585c76e01b22575297e4f9ad87d35af1e239f37f0e801755d339a292547e378159968e76d76b4a283146c90445ad4f7611b22dce32d7df6cb527c2e0df7a2c45cbecea0ab2182f75efdaae6e3a295c0d7079", 0x73}], 0x8, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) 11:09:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x80000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40000, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fdatasync(r0) sendfile(r3, r4, 0x0, 0x5) 11:09:08 executing program 3: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8000a0ffffffff, 0x0, 0x0) shutdown(r0, 0x1) 11:09:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600054000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000200)={0x16, @local, 0x4e23, 0x2, 'nq\x00', 0x1, 0xff, 0x7d}, 0x2c) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xc8, "1bb20987a9a4b9333d3ced86fc6dd5cf3e8e980d287aee577300dbd709a70b3b57e637a7502bfac6576a5398985112db23526980d34fbdcb39beb5bd3ef81ecdaabe94b4710e2ab59918560b2bd2f7529fa0168eb86011963eed45499721b06460c408b0305ae93b4da5f60a8808354522f5267c8b97bdae836d9187a91184a7976b0bb642162630cc850f60b2c03122da02e4b0b85ec203c4c5fec20c099dab5a29c95fdabfd031d5ce312aa669b94326f8585067c8e8acbd08b75b5e25aecd0e7705d2d0155a1d"}, &(0x7f0000000000)=0xec) 11:09:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x1, 0xffff, 0x1, 0x10001, 0x0, 0xffffffff00000001, 0x2000, 0x4, 0x8001, 0x80000001, 0x0, 0x4, 0xffffffffffff0001, 0x1, 0x10001, 0xfbb, 0xfffffffffffff801, 0x3, 0x0, 0x9, 0x0, 0xffffffffffffea63, 0x3, 0x4, 0x20, 0x7, 0x9, 0x9, 0x9, 0x9, 0xfff, 0x37d9, 0x0, 0x1, 0x57, 0xcb42, 0x0, 0x800000000, 0x7, @perf_config_ext={0xcf00000000000000, 0x3f}, 0x14, 0xf43, 0x3, 0xf, 0x5, 0x8, 0xb5b}, 0xffffffffffffffff, 0xe, r2, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000100)=0x7fffffff) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x81) sendfile(r3, r3, 0x0, 0x3) 11:09:09 executing program 3: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8001a0ffffffff, 0x0, 0x0) shutdown(r0, 0x1) 11:09:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:09 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600062000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:09 executing program 3: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:09 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4004700e, 0x4) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r2, &(0x7f00000009c0), 0x1000) write(r4, &(0x7f00000001c0), 0xfffffef3) read(r3, &(0x7f0000000200)=""/250, 0x50c7e3e3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(r2, &(0x7f00000003c0)="ef8d47ea7d0bd049078d51cf2541c7d5269f3c6bdd66527947d033f6bb2195a66de2f7b087b2e7153874f5e1b224e623c5c3c591b7d147fb0d8ec8426643e218937462f5d588df99ed0c59090aba5918661a7d9daa91447f1bf9d8fd1bb1ef134df24eb07473433b1c235ab2838c028d91db342c71bf0063a5263c831c53fb6e3101c8096d28b8c529d36753407ef083b7b3ec2551bfafe101c9f9d9b8d2d04c3b2bc0d511c2a5cf3bc4cf2a2d280b6d9a5e322256a25e5c92e6ad0ef926d9ef03c6fceb30ffa1e0ef3e3f33a0cc96", 0xcf, 0x8010, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000380)='\x00', 0x0) ftruncate(r6, 0x1000000) sendfile(r5, r6, 0x0, 0xfffffdef) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000500)=0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000940)={{0xff, @rand_addr=0x20, 0x4e23, 0x3, 'nq\x00', 0x2, 0x20, 0x32}, {@rand_addr=0x9, 0x4e23, 0x2000, 0x7, 0xe0c, 0x1}}, 0x44) rt_tgsigqueueinfo(r7, 0x0, 0x31, &(0x7f0000000540)={0x29, 0x2, 0xc46}) getpgrp(0x0) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000180)="2647756b0e6843e2692a0d672563f30aa38c3484b9ddd0de38c967393f41e3d45f06c51764d039e2f2fb2c72e5b9e4ddbdf9d556cfb9274426511481daf9b1db55f87af7e683945bd1f3279d1aec83107af001c9ec92db7773d047611afa8f2786faed6766ec8342dc457e112e7f35836e74612f3e870a4c9ac20baf69ae9ab245de78779f80ebc7b85aa7ffd459b4078ceb9dab1bd58937da3c420f79bf0434318578bb71c0b30a7848fa2e1e533a101f6eb9e5175893c6159f00fa2487eb0fb3af72778ab660b5a83b5880bd667da89f4a009be76d191ed205f25fa669595dd23c06daa5", 0xe5, 0xfffffffffffffffb) keyctl$get_security(0x11, r8, &(0x7f0000000600)=""/243, 0xf3) 11:09:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x100000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 11:09:09 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000030100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:09 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:09 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x200000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:09 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:10 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 11:09:10 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000200fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x300000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:10 executing program 5: 11:09:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) 11:09:10 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x400000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="03030000030060ffffff1f00fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:10 executing program 5: 11:09:10 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x104000000) 11:09:10 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x700000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:10 executing program 5: 11:09:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea1", 0x36, 0x0, 0x0, 0x0) 11:09:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000003f00fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x800000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 11:09:11 executing program 5: 11:09:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea1", 0x36, 0x0, 0x0, 0x0) 11:09:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x900000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600002000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:11 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:09:11 executing program 5: [ 402.834662][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 402.840501][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 402.846446][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 402.852205][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:09:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 11:09:11 executing program 5: 11:09:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea1", 0x36, 0x0, 0x0, 0x0) 11:09:11 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xa00000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:11 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) 11:09:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600004000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:11 executing program 5: 11:09:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b4", 0x51, 0x0, 0x0, 0x0) 11:09:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) 11:09:12 executing program 5: 11:09:12 executing program 5: 11:09:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe00000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) 11:09:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:09:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600008000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b4", 0x51, 0x0, 0x0, 0x0) 11:09:12 executing program 5: 11:09:12 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)) 11:09:12 executing program 5: 11:09:12 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1000000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b4", 0x51, 0x0, 0x0, 0x0) 11:09:12 executing program 3: 11:09:12 executing program 5: 11:09:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="03030000030060000a000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:12 executing program 3: [ 404.182049][T31986] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 404.212411][T31986] CPU: 1 PID: 31986 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 404.221545][T31986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.231605][T31986] Call Trace: [ 404.234905][T31986] dump_stack+0x172/0x1f0 [ 404.239260][T31986] dump_header+0x10f/0xba6 [ 404.243686][T31986] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 404.249556][T31986] ? ___ratelimit+0x60/0x595 [ 404.254150][T31986] ? do_raw_spin_unlock+0x57/0x270 [ 404.259269][T31986] oom_kill_process.cold+0x10/0x15 [ 404.264381][T31986] out_of_memory+0x79a/0x1280 [ 404.269062][T31986] ? lock_downgrade+0x880/0x880 [ 404.273912][T31986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.280157][T31986] ? oom_killer_disable+0x280/0x280 [ 404.285354][T31986] ? find_held_lock+0x35/0x130 [ 404.290129][T31986] mem_cgroup_out_of_memory+0x1ca/0x230 [ 404.295679][T31986] ? memcg_event_wake+0x230/0x230 [ 404.300715][T31986] ? do_raw_spin_unlock+0x57/0x270 [ 404.305840][T31986] ? _raw_spin_unlock+0x2d/0x50 [ 404.310694][T31986] try_charge+0x118d/0x1790 [ 404.315334][T31986] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 404.320883][T31986] ? mark_held_locks+0xa4/0xf0 [ 404.325648][T31986] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 404.331281][T31986] ? __sk_mem_raise_allocated+0x557/0x1390 [ 404.337085][T31986] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 404.342716][T31986] ? lockdep_hardirqs_on+0x418/0x5d0 [ 404.348013][T31986] ? trace_hardirqs_on+0x67/0x230 [ 404.353043][T31986] mem_cgroup_charge_skmem+0x12f/0x280 [ 404.358529][T31986] ? mem_cgroup_sk_free+0x90/0x90 [ 404.363554][T31986] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 404.369271][T31986] ? iov_iter_advance+0x295/0xfd0 [ 404.374304][T31986] __sk_mem_raise_allocated+0x557/0x1390 [ 404.379950][T31986] ? alloc_pages_current+0x10f/0x210 [ 404.385265][T31986] __sk_mem_schedule+0x6d/0xe0 [ 404.390044][T31986] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 404.396290][T31986] tcp_sendmsg_locked+0x1992/0x34b0 [ 404.401521][T31986] ? tcp_sendpage+0x60/0x60 [ 404.406029][T31986] ? trace_hardirqs_on+0x67/0x230 [ 404.411067][T31986] ? lock_sock_nested+0x9a/0x120 [ 404.416031][T31986] ? __local_bh_enable_ip+0x15a/0x270 [ 404.421423][T31986] tcp_sendmsg+0x30/0x50 [ 404.425672][T31986] inet_sendmsg+0x147/0x5d0 [ 404.430177][T31986] ? ipip_gro_receive+0x100/0x100 [ 404.435204][T31986] sock_sendmsg+0xdd/0x130 [ 404.439632][T31986] __sys_sendto+0x262/0x380 [ 404.444139][T31986] ? __ia32_sys_getpeername+0xb0/0xb0 [ 404.449556][T31986] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 404.455817][T31986] ? put_timespec64+0xda/0x140 [ 404.460606][T31986] ? nsecs_to_jiffies+0x30/0x30 [ 404.465483][T31986] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 404.471198][T31986] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 404.476642][T31986] ? do_syscall_64+0x26/0x610 [ 404.481301][T31986] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.487349][T31986] __x64_sys_sendto+0xe1/0x1a0 [ 404.492093][T31986] do_syscall_64+0x103/0x610 [ 404.496664][T31986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 404.502531][T31986] RIP: 0033:0x457e29 [ 404.506405][T31986] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 404.526370][T31986] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 404.534763][T31986] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 404.542918][T31986] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 404.550879][T31986] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 404.558843][T31986] R10: 1000000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 404.566794][T31986] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 404.578815][T31986] memory: usage 307192kB, limit 307200kB, failcnt 23 [ 404.588419][T31986] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 404.595963][T31986] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 404.602809][T31986] Memory cgroup stats for /syz2: cache:120KB rss:17524KB rss_huge:16384KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:17484KB inactive_file:12KB active_file:0KB unevictable:0KB 11:09:13 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 11:09:13 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e70000000000000000000000", 0x5f, 0x0, 0x0, 0x0) 11:09:13 executing program 3: 11:09:13 executing program 5: [ 404.624541][T31986] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=7932,uid=0 [ 404.641071][T31986] Memory cgroup out of memory: Killed process 7932 (syz-executor.2) total-vm:72444kB, anon-rss:2200kB, file-rss:35836kB, shmem-rss:0kB 11:09:13 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600010000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:13 executing program 3: [ 404.795786][T31984] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 404.814795][T31984] CPU: 1 PID: 31984 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 404.823920][T31984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 404.834078][T31984] Call Trace: [ 404.837365][T31984] dump_stack+0x172/0x1f0 [ 404.841695][T31984] dump_header+0x10f/0xba6 [ 404.846118][T31984] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 404.851929][T31984] ? ___ratelimit+0x60/0x595 [ 404.856522][T31984] ? do_raw_spin_unlock+0x57/0x270 [ 404.861640][T31984] oom_kill_process.cold+0x10/0x15 [ 404.866849][T31984] out_of_memory+0x79a/0x1280 [ 404.871532][T31984] ? oom_killer_disable+0x280/0x280 [ 404.876716][T31984] ? find_held_lock+0x35/0x130 [ 404.881488][T31984] mem_cgroup_out_of_memory+0x1ca/0x230 [ 404.887138][T31984] ? memcg_event_wake+0x230/0x230 [ 404.892188][T31984] ? do_raw_spin_unlock+0x57/0x270 [ 404.897303][T31984] ? _raw_spin_unlock+0x2d/0x50 [ 404.902266][T31984] try_charge+0xd4d/0x1790 [ 404.906699][T31984] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 404.912335][T31984] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 404.917890][T31984] ? find_held_lock+0x35/0x130 [ 404.922633][T31984] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 404.928160][T31984] __memcg_kmem_charge_memcg+0x7c/0x130 [ 404.933711][T31984] ? memcg_kmem_put_cache+0xb0/0xb0 [ 404.939009][T31984] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 404.944549][T31984] __memcg_kmem_charge+0x136/0x300 [ 404.949646][T31984] __alloc_pages_nodemask+0x437/0x7e0 [ 404.955003][T31984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 404.961237][T31984] ? __alloc_pages_slowpath+0x2900/0x2900 [ 404.966948][T31984] ? copy_process.part.0+0x1d35/0x79e0 [ 404.972404][T31984] ? lockdep_hardirqs_on+0x418/0x5d0 [ 404.977689][T31984] ? trace_hardirqs_on+0x67/0x230 [ 404.982706][T31984] ? kasan_check_read+0x11/0x20 [ 404.987539][T31984] copy_process.part.0+0x3e0/0x79e0 [ 404.992717][T31984] ? psi_memstall_leave+0x11c/0x180 [ 404.997895][T31984] ? kvm_sched_clock_read+0x9/0x20 [ 405.002983][T31984] ? psi_memstall_leave+0x12e/0x180 [ 405.008202][T31984] ? find_held_lock+0x35/0x130 [ 405.012948][T31984] ? __lock_acquire+0x55d/0x4710 [ 405.017871][T31984] ? __cleanup_sighand+0x60/0x60 [ 405.022789][T31984] ? mark_held_locks+0xf0/0xf0 [ 405.027533][T31984] ? rcu_read_lock_sched_held+0x110/0x130 [ 405.033227][T31984] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 405.039457][T31984] ? try_to_free_mem_cgroup_pages+0x3b6/0xa30 [ 405.045502][T31984] _do_fork+0x257/0xfd0 [ 405.049637][T31984] ? fork_idle+0x1d0/0x1d0 [ 405.054030][T31984] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 405.060074][T31984] ? lock_downgrade+0x880/0x880 [ 405.064918][T31984] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.071141][T31984] ? blkcg_exit_queue+0x30/0x30 [ 405.075972][T31984] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 405.081407][T31984] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 405.086846][T31984] ? do_syscall_64+0x26/0x610 [ 405.091505][T31984] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.097549][T31984] ? do_syscall_64+0x26/0x610 [ 405.102299][T31984] __x64_sys_clone+0xbf/0x150 [ 405.106972][T31984] do_syscall_64+0x103/0x610 [ 405.111545][T31984] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.117429][T31984] RIP: 0033:0x45a7f9 [ 405.121305][T31984] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 405.140885][T31984] RSP: 002b:00007ffd23a15dd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 405.149273][T31984] RAX: ffffffffffffffda RBX: 00007f4861130700 RCX: 000000000045a7f9 [ 405.157220][T31984] RDX: 00007f48611309d0 RSI: 00007f486112fdb0 RDI: 00000000003d0f00 [ 405.165182][T31984] RBP: 00007ffd23a15fe0 R08: 00007f4861130700 R09: 00007f4861130700 [ 405.173132][T31984] R10: 00007f48611309d0 R11: 0000000000000202 R12: 0000000000000000 [ 405.181083][T31984] R13: 00007ffd23a15e8f R14: 00007f48611309c0 R15: 000000000073bfac [ 405.193387][T31984] memory: usage 306496kB, limit 307200kB, failcnt 23 [ 405.200185][T31984] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 405.207995][T31984] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 405.215181][T31984] Memory cgroup stats for /syz2: cache:120KB rss:15332KB rss_huge:14336KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:15324KB inactive_file:8KB active_file:4KB unevictable:0KB 11:09:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1100000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:14 executing program 5: 11:09:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e70000000000000000000000", 0x5f, 0x0, 0x0, 0x0) 11:09:14 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x125f) 11:09:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 405.237297][T31984] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21614,uid=0 [ 405.254094][T31984] Memory cgroup out of memory: Killed process 21614 (syz-executor.2) total-vm:72708kB, anon-rss:2216kB, file-rss:35792kB, shmem-rss:0kB [ 405.270281][ T1045] oom_reaper: reaped process 21614 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 11:09:14 executing program 5: r0 = socket$kcm(0x2, 0x10000000000001, 0x84) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x0, @loopback=0xa1414aa}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000740)="f2", 0x1}], 0x1}, 0x40) close(r0) 11:09:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600011000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000440), 0x4) 11:09:14 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x4}, 0xffffffffffffff98) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086607, 0x20000001) 11:09:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e70000000000000000000000", 0x5f, 0x0, 0x0, 0x0) 11:09:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1700000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:14 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="743d7d516f5b0e95d39148531a93", 0x0}, 0x28) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 11:09:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000", 0x66, 0x0, 0x0, 0x0) [ 405.619400][T32126] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 405.650958][T32126] CPU: 1 PID: 32126 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 405.660173][T32126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.670213][T32126] Call Trace: [ 405.673489][T32126] dump_stack+0x172/0x1f0 [ 405.677813][T32126] dump_header+0x10f/0xba6 [ 405.682218][T32126] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 405.688009][T32126] ? ___ratelimit+0x60/0x595 [ 405.692587][T32126] ? do_raw_spin_unlock+0x57/0x270 [ 405.697697][T32126] oom_kill_process.cold+0x10/0x15 [ 405.702884][T32126] out_of_memory+0x79a/0x1280 [ 405.708549][T32126] ? lock_downgrade+0x880/0x880 [ 405.714777][T32126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 405.721006][T32126] ? oom_killer_disable+0x280/0x280 [ 405.728901][T32126] ? find_held_lock+0x35/0x130 [ 405.733762][T32126] mem_cgroup_out_of_memory+0x1ca/0x230 [ 405.739378][T32126] ? memcg_event_wake+0x230/0x230 [ 405.744395][T32126] ? do_raw_spin_unlock+0x57/0x270 [ 405.749493][T32126] ? _raw_spin_unlock+0x2d/0x50 [ 405.754347][T32126] try_charge+0x118d/0x1790 [ 405.758843][T32126] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 405.764390][T32126] ? mark_held_locks+0xa4/0xf0 [ 405.769149][T32126] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 405.774765][T32126] ? __sk_mem_raise_allocated+0x557/0x1390 [ 405.780564][T32126] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 405.786184][T32126] ? lockdep_hardirqs_on+0x418/0x5d0 [ 405.791531][T32126] ? trace_hardirqs_on+0x67/0x230 [ 405.796547][T32126] mem_cgroup_charge_skmem+0x12f/0x280 [ 405.801991][T32126] ? mem_cgroup_sk_free+0x90/0x90 [ 405.807001][T32126] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 405.812719][T32126] ? iov_iter_advance+0x295/0xfd0 [ 405.817737][T32126] __sk_mem_raise_allocated+0x557/0x1390 [ 405.823364][T32126] ? alloc_pages_current+0x10f/0x210 [ 405.828644][T32126] __sk_mem_schedule+0x6d/0xe0 [ 405.833389][T32126] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 405.839633][T32126] tcp_sendmsg_locked+0x1992/0x34b0 [ 405.844848][T32126] ? tcp_sendpage+0x60/0x60 [ 405.849338][T32126] ? trace_hardirqs_on+0x67/0x230 [ 405.854375][T32126] ? lock_sock_nested+0x9a/0x120 [ 405.859302][T32126] ? __local_bh_enable_ip+0x15a/0x270 [ 405.864667][T32126] tcp_sendmsg+0x30/0x50 [ 405.868899][T32126] inet_sendmsg+0x147/0x5d0 [ 405.873386][T32126] ? ipip_gro_receive+0x100/0x100 [ 405.878397][T32126] sock_sendmsg+0xdd/0x130 [ 405.882803][T32126] __sys_sendto+0x262/0x380 [ 405.887294][T32126] ? __ia32_sys_getpeername+0xb0/0xb0 [ 405.892789][T32126] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 405.899015][T32126] ? put_timespec64+0xda/0x140 [ 405.903777][T32126] ? nsecs_to_jiffies+0x30/0x30 [ 405.908630][T32126] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 405.914086][T32126] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 405.919533][T32126] ? do_syscall_64+0x26/0x610 [ 405.924296][T32126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.930350][T32126] __x64_sys_sendto+0xe1/0x1a0 [ 405.935107][T32126] do_syscall_64+0x103/0x610 [ 405.939685][T32126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 405.945561][T32126] RIP: 0033:0x457e29 [ 405.949448][T32126] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 405.969132][T32126] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 405.977525][T32126] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 405.985494][T32126] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 405.993449][T32126] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 406.001408][T32126] R10: 1700000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 406.009363][T32126] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff 11:09:14 executing program 5: bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x10, 0x3}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x10000000}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000440)='syzkaller\x00', 0x5, 0x401, &(0x7f0000000200)=""/144}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="743d7d516f5b0e95d39148531a93", 0x0}, 0x28) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) 11:09:14 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000440), 0x4) 11:09:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600030000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:14 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086607, 0x20000001) 11:09:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(0x0, 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000", 0x66, 0x0, 0x0, 0x0) [ 406.159474][T32126] memory: usage 307184kB, limit 307200kB, failcnt 43 [ 406.173797][T32126] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 406.183011][T32126] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:15 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0xb, &(0x7f0000000200)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 11:09:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000440), 0x4) [ 406.193624][T32126] Memory cgroup stats for /syz2: cache:120KB rss:13244KB rss_huge:12288KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:13156KB inactive_file:0KB active_file:0KB unevictable:0KB [ 406.224441][T32126] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=7915,uid=0 [ 406.328025][T32126] Memory cgroup out of memory: Killed process 7915 (syz-executor.2) total-vm:72444kB, anon-rss:2200kB, file-rss:35804kB, shmem-rss:0kB [ 406.356373][ T1045] oom_reaper: reaped process 7915 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 406.375407][T32126] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 406.402044][T32126] CPU: 1 PID: 32126 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 406.411255][T32126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 406.421308][T32126] Call Trace: [ 406.424601][T32126] dump_stack+0x172/0x1f0 [ 406.428938][T32126] dump_header+0x10f/0xba6 [ 406.433357][T32126] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 406.439171][T32126] ? ___ratelimit+0x60/0x595 [ 406.443764][T32126] ? do_raw_spin_unlock+0x57/0x270 [ 406.448881][T32126] oom_kill_process.cold+0x10/0x15 [ 406.454009][T32126] out_of_memory+0x79a/0x1280 [ 406.458691][T32126] ? lock_downgrade+0x880/0x880 [ 406.463540][T32126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 406.469808][T32126] ? oom_killer_disable+0x280/0x280 [ 406.475006][T32126] ? find_held_lock+0x35/0x130 [ 406.479777][T32126] mem_cgroup_out_of_memory+0x1ca/0x230 [ 406.485318][T32126] ? memcg_event_wake+0x230/0x230 [ 406.490351][T32126] ? do_raw_spin_unlock+0x57/0x270 [ 406.495472][T32126] ? _raw_spin_unlock+0x2d/0x50 [ 406.500331][T32126] try_charge+0x118d/0x1790 [ 406.504845][T32126] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 406.510394][T32126] ? mark_held_locks+0xa4/0xf0 [ 406.515154][T32126] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 406.520765][T32126] ? __sk_mem_raise_allocated+0x557/0x1390 [ 406.526554][T32126] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 406.532162][T32126] ? lockdep_hardirqs_on+0x418/0x5d0 [ 406.537424][T32126] ? trace_hardirqs_on+0x67/0x230 [ 406.542692][T32126] mem_cgroup_charge_skmem+0x12f/0x280 [ 406.548145][T32126] ? mem_cgroup_sk_free+0x90/0x90 [ 406.553158][T32126] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 406.558951][T32126] ? iov_iter_advance+0x295/0xfd0 [ 406.564079][T32126] __sk_mem_raise_allocated+0x557/0x1390 [ 406.569692][T32126] ? alloc_pages_current+0x10f/0x210 [ 406.574957][T32126] __sk_mem_schedule+0x6d/0xe0 [ 406.579710][T32126] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 406.585936][T32126] tcp_sendmsg_locked+0x1992/0x34b0 [ 406.591135][T32126] ? tcp_sendpage+0x60/0x60 [ 406.595618][T32126] ? trace_hardirqs_on+0x67/0x230 [ 406.600618][T32126] ? lock_sock_nested+0x9a/0x120 [ 406.605539][T32126] ? __local_bh_enable_ip+0x15a/0x270 [ 406.610891][T32126] tcp_sendmsg+0x30/0x50 [ 406.615111][T32126] inet_sendmsg+0x147/0x5d0 [ 406.619593][T32126] ? ipip_gro_receive+0x100/0x100 [ 406.624596][T32126] sock_sendmsg+0xdd/0x130 [ 406.628991][T32126] __sys_sendto+0x262/0x380 [ 406.633472][T32126] ? __ia32_sys_getpeername+0xb0/0xb0 [ 406.638831][T32126] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 406.645056][T32126] ? put_timespec64+0xda/0x140 [ 406.649816][T32126] ? nsecs_to_jiffies+0x30/0x30 [ 406.654654][T32126] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 406.660098][T32126] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 406.665542][T32126] ? do_syscall_64+0x26/0x610 [ 406.670214][T32126] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.676278][T32126] __x64_sys_sendto+0xe1/0x1a0 [ 406.681021][T32126] do_syscall_64+0x103/0x610 [ 406.685691][T32126] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.691558][T32126] RIP: 0033:0x457e29 [ 406.695431][T32126] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.715012][T32126] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 406.723401][T32126] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 406.731354][T32126] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 406.739313][T32126] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 406.747271][T32126] R10: 1700000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 406.755245][T32126] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 406.792625][T32126] memory: usage 307152kB, limit 307200kB, failcnt 60 [ 406.801466][T32126] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 406.810024][T32126] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 406.818281][T32126] Memory cgroup stats for /syz2: cache:120KB rss:10992KB rss_huge:10240KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:10996KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3f00000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000", 0x66, 0x0, 0x0, 0x0) 11:09:15 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000440), 0x4) 11:09:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600054000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:15 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x401870c8) [ 406.840002][T32126] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=15215,uid=0 [ 406.856367][T32126] Memory cgroup out of memory: Killed process 15215 (syz-executor.2) total-vm:72576kB, anon-rss:2208kB, file-rss:35796kB, shmem-rss:0kB 11:09:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:15 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x1267) 11:09:15 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000", 0x69, 0x0, 0x0, 0x0) [ 407.005983][T32209] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 407.023153][T32209] CPU: 0 PID: 32209 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 407.032360][T32209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.042439][T32209] Call Trace: [ 407.045732][T32209] dump_stack+0x172/0x1f0 [ 407.050072][T32209] dump_header+0x10f/0xba6 [ 407.054513][T32209] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 407.060319][T32209] ? ___ratelimit+0x60/0x595 [ 407.060337][T32209] ? do_raw_spin_unlock+0x57/0x270 [ 407.060354][T32209] oom_kill_process.cold+0x10/0x15 [ 407.060371][T32209] out_of_memory+0x79a/0x1280 [ 407.079795][T32209] ? lock_downgrade+0x880/0x880 [ 407.084646][T32209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.090894][T32209] ? oom_killer_disable+0x280/0x280 [ 407.096092][T32209] ? find_held_lock+0x35/0x130 [ 407.100858][T32209] mem_cgroup_out_of_memory+0x1ca/0x230 [ 407.106389][T32209] ? memcg_event_wake+0x230/0x230 [ 407.111402][T32209] ? do_raw_spin_unlock+0x57/0x270 [ 407.116508][T32209] ? _raw_spin_unlock+0x2d/0x50 [ 407.121360][T32209] try_charge+0x118d/0x1790 [ 407.125853][T32209] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 407.131381][T32209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.137619][T32209] ? kasan_check_read+0x11/0x20 [ 407.142452][T32209] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 407.147993][T32209] mem_cgroup_try_charge+0x24d/0x5e0 [ 407.153265][T32209] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 407.158885][T32209] __handle_mm_fault+0x1e1f/0x3ec0 [ 407.163980][T32209] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 407.169518][T32209] ? find_held_lock+0x35/0x130 [ 407.174279][T32209] ? handle_mm_fault+0x322/0xb30 [ 407.179203][T32209] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.185425][T32209] ? kasan_check_read+0x11/0x20 [ 407.190259][T32209] handle_mm_fault+0x43f/0xb30 [ 407.195011][T32209] __do_page_fault+0x5ef/0xda0 [ 407.199776][T32209] do_page_fault+0x71/0x581 [ 407.204264][T32209] ? page_fault+0x8/0x30 [ 407.208499][T32209] page_fault+0x1e/0x30 [ 407.212634][T32209] RIP: 0033:0x45a7dd [ 407.216520][T32209] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8e fb ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 407.236103][T32209] RSP: 002b:00007ffd23a15dd8 EFLAGS: 00010202 [ 407.242148][T32209] RAX: ffffffffffffffea RBX: 00007f4861130700 RCX: 00007f4861130700 11:09:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 407.250100][T32209] RDX: 00000000003d0f00 RSI: 00007f486112fdb0 RDI: 000000000040ed80 [ 407.258161][T32209] RBP: 00007ffd23a15fe0 R08: 00007f48611309d0 R09: 00007f4861130700 [ 407.266111][T32209] R10: 00007f486112fdc0 R11: 0000000000000246 R12: 0000000000000000 [ 407.274062][T32209] R13: 00007ffd23a15e8f R14: 00007f48611309c0 R15: 000000000073bfac [ 407.295388][T32209] memory: usage 307200kB, limit 307200kB, failcnt 293 11:09:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000100)) 11:09:16 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x1e, 0x0, &(0x7f0000000540)="e4600100000609070055380088ca193d09d268c217d39f6c9544f97abd80", 0x0, 0x2987}, 0x28) [ 407.302593][T32209] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 407.310661][T32209] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 407.319139][T32209] Memory cgroup stats for /syz2: cache:120KB rss:6784KB rss_huge:6144KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:6776KB inactive_file:0KB active_file:0KB unevictable:0KB [ 407.361287][T32209] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=14414,uid=0 [ 407.447895][T32209] Memory cgroup out of memory: Killed process 14414 (syz-executor.2) total-vm:72576kB, anon-rss:2208kB, file-rss:35788kB, shmem-rss:0kB [ 407.501959][T32211] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 407.523370][T32211] CPU: 1 PID: 32211 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 407.532516][T32211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.542723][T32211] Call Trace: [ 407.545997][T32211] dump_stack+0x172/0x1f0 [ 407.550307][T32211] dump_header+0x10f/0xba6 [ 407.554701][T32211] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 407.560485][T32211] ? ___ratelimit+0x60/0x595 [ 407.565068][T32211] ? do_raw_spin_unlock+0x57/0x270 [ 407.570156][T32211] oom_kill_process.cold+0x10/0x15 [ 407.575253][T32211] out_of_memory+0x79a/0x1280 [ 407.579929][T32211] ? oom_killer_disable+0x280/0x280 [ 407.585116][T32211] ? find_held_lock+0x35/0x130 [ 407.589864][T32211] mem_cgroup_out_of_memory+0x1ca/0x230 [ 407.595388][T32211] ? memcg_event_wake+0x230/0x230 [ 407.600411][T32211] ? do_raw_spin_unlock+0x57/0x270 [ 407.605503][T32211] ? _raw_spin_unlock+0x2d/0x50 [ 407.610329][T32211] try_charge+0xd4d/0x1790 [ 407.614726][T32211] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 407.620251][T32211] ? mark_held_locks+0xa4/0xf0 [ 407.625013][T32211] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 407.630622][T32211] ? __sk_mem_raise_allocated+0x557/0x1390 [ 407.636402][T32211] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 407.642009][T32211] ? lockdep_hardirqs_on+0x418/0x5d0 [ 407.647270][T32211] ? trace_hardirqs_on+0x67/0x230 [ 407.652272][T32211] mem_cgroup_charge_skmem+0x12f/0x280 [ 407.657717][T32211] ? mem_cgroup_sk_free+0x90/0x90 [ 407.662717][T32211] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 407.668415][T32211] ? iov_iter_advance+0x295/0xfd0 [ 407.673419][T32211] __sk_mem_raise_allocated+0x557/0x1390 [ 407.679026][T32211] ? alloc_pages_current+0x10f/0x210 [ 407.684308][T32211] __sk_mem_schedule+0x6d/0xe0 [ 407.689046][T32211] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 407.695266][T32211] tcp_sendmsg_locked+0x1992/0x34b0 [ 407.700459][T32211] ? tcp_sendpage+0x60/0x60 [ 407.704940][T32211] ? trace_hardirqs_on+0x67/0x230 [ 407.710296][T32211] ? lock_sock_nested+0x9a/0x120 [ 407.715212][T32211] ? __local_bh_enable_ip+0x15a/0x270 [ 407.720567][T32211] tcp_sendmsg+0x30/0x50 [ 407.724791][T32211] inet_sendmsg+0x147/0x5d0 [ 407.729268][T32211] ? ipip_gro_receive+0x100/0x100 [ 407.734282][T32211] sock_sendmsg+0xdd/0x130 [ 407.738679][T32211] __sys_sendto+0x262/0x380 [ 407.743162][T32211] ? __ia32_sys_getpeername+0xb0/0xb0 [ 407.748522][T32211] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 407.754738][T32211] ? put_timespec64+0xda/0x140 [ 407.759528][T32211] ? nsecs_to_jiffies+0x30/0x30 [ 407.764388][T32211] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 407.769824][T32211] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 407.775259][T32211] ? do_syscall_64+0x26/0x610 [ 407.779913][T32211] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.785961][T32211] __x64_sys_sendto+0xe1/0x1a0 [ 407.790728][T32211] do_syscall_64+0x103/0x610 [ 407.795301][T32211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.801168][T32211] RIP: 0033:0x457e29 [ 407.805042][T32211] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 407.824622][T32211] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 407.833008][T32211] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 407.840963][T32211] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 407.848917][T32211] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 407.856870][T32211] R10: 3f00000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 407.864839][T32211] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 407.877383][T32211] memory: usage 304972kB, limit 307200kB, failcnt 293 [ 407.884170][T32211] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 407.891974][T32211] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 407.898968][T32211] Memory cgroup stats for /syz2: cache:120KB rss:4608KB rss_huge:4096KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4588KB inactive_file:0KB active_file:0KB unevictable:0KB [ 407.920347][T32211] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=19876,uid=0 [ 407.936775][T32211] Memory cgroup out of memory: Killed process 19876 (syz-executor.2) total-vm:72576kB, anon-rss:2208kB, file-rss:35784kB, shmem-rss:0kB [ 407.952672][ T1045] oom_reaper: reaped process 19876 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 11:09:16 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000", 0x69, 0x0, 0x0, 0x0) 11:09:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600062000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:16 executing program 5: syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@check_relaxed='check=relaxed'}]}) 11:09:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x4000000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:16 executing program 5: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 11:09:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 408.122151][T32255] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 408.144484][T32255] CPU: 1 PID: 32255 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 408.153707][T32255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.163760][T32255] Call Trace: [ 408.167140][T32255] dump_stack+0x172/0x1f0 [ 408.171493][T32255] dump_header+0x10f/0xba6 [ 408.175948][T32255] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 408.181762][T32255] ? ___ratelimit+0x60/0x595 [ 408.186357][T32255] ? do_raw_spin_unlock+0x57/0x270 [ 408.191478][T32255] oom_kill_process.cold+0x10/0x15 [ 408.196595][T32255] out_of_memory+0x79a/0x1280 [ 408.201281][T32255] ? lock_downgrade+0x880/0x880 [ 408.206135][T32255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.212380][T32255] ? oom_killer_disable+0x280/0x280 [ 408.217590][T32255] ? find_held_lock+0x35/0x130 11:09:17 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="002268e2000000000025"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000010000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11:09:17 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x80140912) 11:09:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000", 0x69, 0x0, 0x0, 0x0) 11:09:17 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x1261) [ 408.222369][T32255] mem_cgroup_out_of_memory+0x1ca/0x230 [ 408.227928][T32255] ? memcg_event_wake+0x230/0x230 [ 408.232964][T32255] ? do_raw_spin_unlock+0x57/0x270 [ 408.238082][T32255] ? _raw_spin_unlock+0x2d/0x50 [ 408.242944][T32255] try_charge+0x118d/0x1790 [ 408.247462][T32255] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 408.253016][T32255] ? mark_held_locks+0xa4/0xf0 [ 408.257785][T32255] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 408.263432][T32255] ? __sk_mem_raise_allocated+0x557/0x1390 [ 408.269250][T32255] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 408.274863][T32255] ? lockdep_hardirqs_on+0x418/0x5d0 [ 408.280129][T32255] ? trace_hardirqs_on+0x67/0x230 [ 408.285134][T32255] mem_cgroup_charge_skmem+0x12f/0x280 [ 408.290571][T32255] ? mem_cgroup_sk_free+0x90/0x90 [ 408.295574][T32255] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 408.301269][T32255] ? iov_iter_advance+0x295/0xfd0 [ 408.306275][T32255] __sk_mem_raise_allocated+0x557/0x1390 [ 408.311885][T32255] ? alloc_pages_current+0x10f/0x210 [ 408.317154][T32255] __sk_mem_schedule+0x6d/0xe0 [ 408.321929][T32255] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 408.328161][T32255] tcp_sendmsg_locked+0x1992/0x34b0 [ 408.333358][T32255] ? tcp_sendpage+0x60/0x60 [ 408.337856][T32255] ? trace_hardirqs_on+0x67/0x230 [ 408.342859][T32255] ? lock_sock_nested+0x9a/0x120 [ 408.347782][T32255] ? __local_bh_enable_ip+0x15a/0x270 [ 408.353136][T32255] tcp_sendmsg+0x30/0x50 [ 408.357360][T32255] inet_sendmsg+0x147/0x5d0 [ 408.361843][T32255] ? ipip_gro_receive+0x100/0x100 [ 408.366848][T32255] sock_sendmsg+0xdd/0x130 [ 408.371245][T32255] __sys_sendto+0x262/0x380 [ 408.375731][T32255] ? __ia32_sys_getpeername+0xb0/0xb0 [ 408.381102][T32255] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 408.387334][T32255] ? put_timespec64+0xda/0x140 [ 408.392080][T32255] ? nsecs_to_jiffies+0x30/0x30 [ 408.396919][T32255] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 408.402358][T32255] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 408.407794][T32255] ? do_syscall_64+0x26/0x610 [ 408.412451][T32255] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.418496][T32255] __x64_sys_sendto+0xe1/0x1a0 [ 408.423239][T32255] do_syscall_64+0x103/0x610 [ 408.427824][T32255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.433701][T32255] RIP: 0033:0x457e29 [ 408.437575][T32255] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.457286][T32255] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 408.465677][T32255] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 408.473626][T32255] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 408.481594][T32255] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 408.489547][T32255] R10: 4000000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 408.497514][T32255] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 408.508442][T32255] memory: usage 307200kB, limit 307200kB, failcnt 312 [ 408.541983][T32255] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 408.565263][T32255] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="0303000003006000000a0100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:17 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in=@local}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000002c80)=0xe8) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002e80)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002cc0)={@mcast2, 0x20, r2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x155777ae) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="0500db44931853f5bf7ce676b3000700007b543a5cc8ae5a644f0308000000b41c0000ffff08ff2d020000000000e556b35eb80065040400001e01b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x0) fadvise64(r1, 0xe4ffffff00000000, 0xffff, 0x2) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r10 = dup3(r6, r9, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 11:09:17 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xa) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 408.591287][T32255] Memory cgroup stats for /syz2: cache:120KB rss:4488KB rss_huge:4096KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:4464KB inactive_file:0KB active_file:0KB unevictable:0KB [ 408.618902][T32255] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21795,uid=0 [ 408.660460][T32255] Memory cgroup out of memory: Killed process 21795 (syz-executor.2) total-vm:72444kB, anon-rss:2200kB, file-rss:35780kB, shmem-rss:0kB [ 408.685209][ T1045] oom_reaper: reaped process 21795 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB [ 408.687163][T32254] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 408.715864][T32254] CPU: 0 PID: 32254 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 408.724984][T32254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.735037][T32254] Call Trace: [ 408.738334][T32254] dump_stack+0x172/0x1f0 [ 408.740072][T32282] bridge0: port 3(gretap0) entered blocking state [ 408.742680][T32254] dump_header+0x10f/0xba6 [ 408.742702][T32254] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 408.759274][T32254] ? ___ratelimit+0x60/0x595 [ 408.763878][T32254] ? do_raw_spin_unlock+0x57/0x270 [ 408.768994][T32254] oom_kill_process.cold+0x10/0x15 [ 408.774104][T32254] out_of_memory+0x79a/0x1280 [ 408.774127][T32254] ? oom_killer_disable+0x280/0x280 [ 408.779610][T32282] bridge0: port 3(gretap0) entered disabled state [ 408.783962][T32254] ? find_held_lock+0x35/0x130 [ 408.783987][T32254] mem_cgroup_out_of_memory+0x1ca/0x230 [ 408.784000][T32254] ? memcg_event_wake+0x230/0x230 [ 408.784028][T32254] ? do_raw_spin_unlock+0x57/0x270 [ 408.795165][T32254] ? _raw_spin_unlock+0x2d/0x50 [ 408.795184][T32254] try_charge+0xd4d/0x1790 [ 408.795211][T32254] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 408.810953][T32254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.810971][T32254] ? kasan_check_read+0x11/0x20 [ 408.810991][T32254] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 408.842377][T32254] mem_cgroup_try_charge+0x24d/0x5e0 [ 408.847669][T32254] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 408.853308][T32254] __handle_mm_fault+0x1e1f/0x3ec0 [ 408.858427][T32254] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 408.864064][T32254] ? find_held_lock+0x35/0x130 [ 408.865922][T32282] device gretap0 entered promiscuous mode [ 408.868823][T32254] ? handle_mm_fault+0x322/0xb30 [ 408.868847][T32254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.868872][T32254] ? kasan_check_read+0x11/0x20 [ 408.885510][T32282] bridge0: port 3(gretap0) entered blocking state [ 408.885712][T32254] handle_mm_fault+0x43f/0xb30 [ 408.885739][T32254] __do_page_fault+0x5ef/0xda0 [ 408.890919][T32282] bridge0: port 3(gretap0) entered forwarding state [ 408.896968][T32254] do_page_fault+0x71/0x581 [ 408.896981][T32254] ? page_fault+0x8/0x30 [ 408.896996][T32254] page_fault+0x1e/0x30 [ 408.897005][T32254] RIP: 0033:0x45a7dd [ 408.897023][T32254] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8e fb ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 408.949471][T32254] RSP: 002b:00007ffd23a15dd8 EFLAGS: 00010202 [ 408.949484][T32254] RAX: ffffffffffffffea RBX: 00007f4861130700 RCX: 00007f4861130700 [ 408.949493][T32254] RDX: 00000000003d0f00 RSI: 00007f486112fdb0 RDI: 000000000040ed80 [ 408.949502][T32254] RBP: 00007ffd23a15fe0 R08: 00007f48611309d0 R09: 00007f4861130700 [ 408.949510][T32254] R10: 00007f486112fdc0 R11: 0000000000000246 R12: 0000000000000000 [ 408.949519][T32254] R13: 00007ffd23a15e8f R14: 00007f48611309c0 R15: 000000000073bfac [ 409.007603][T32254] memory: usage 305392kB, limit 307200kB, failcnt 321 [ 409.030819][T32254] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 409.078621][T32254] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 409.089691][T32254] Memory cgroup stats for /syz2: cache:120KB rss:2316KB rss_huge:2048KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2300KB inactive_file:0KB active_file:0KB unevictable:0KB [ 409.112476][T32254] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32254,uid=0 11:09:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x4002000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e70000000000000000000000000000000000000000000000", 0x6b, 0x0, 0x0, 0x0) 11:09:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000110100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:18 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in=@local}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000002c80)=0xe8) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002e80)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002cc0)={@mcast2, 0x20, r2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x155777ae) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="0500db44931853f5bf7ce676b3000700007b543a5cc8ae5a644f0308000000b41c0000ffff08ff2d020000000000e556b35eb80065040400001e01b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x0) fadvise64(r1, 0xe4ffffff00000000, 0xffff, 0x2) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r10 = dup3(r6, r9, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) [ 409.130121][T32254] Memory cgroup out of memory: Killed process 32254 (syz-executor.2) total-vm:72576kB, anon-rss:2156kB, file-rss:34816kB, shmem-rss:0kB [ 409.146785][ T1045] oom_reaper: reaped process 32254 (syz-executor.2), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 11:09:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e70000000000000000000000000000000000000000000000", 0x6b, 0x0, 0x0, 0x0) 11:09:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 409.307524][T32315] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 409.354195][T32315] CPU: 1 PID: 32315 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 409.363342][T32315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 409.373376][T32315] Call Trace: [ 409.376650][T32315] dump_stack+0x172/0x1f0 [ 409.380974][T32315] dump_header+0x10f/0xba6 [ 409.385403][T32315] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 409.391218][T32315] ? ___ratelimit+0x60/0x595 [ 409.395789][T32315] ? do_raw_spin_unlock+0x57/0x270 [ 409.400889][T32315] oom_kill_process.cold+0x10/0x15 [ 409.405984][T32315] out_of_memory+0x79a/0x1280 [ 409.410653][T32315] ? lock_downgrade+0x880/0x880 [ 409.415492][T32315] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 409.421898][T32315] ? oom_killer_disable+0x280/0x280 [ 409.427086][T32315] ? find_held_lock+0x35/0x130 [ 409.431838][T32315] mem_cgroup_out_of_memory+0x1ca/0x230 [ 409.437365][T32315] ? memcg_event_wake+0x230/0x230 [ 409.442389][T32315] ? do_raw_spin_unlock+0x57/0x270 [ 409.447494][T32315] ? _raw_spin_unlock+0x2d/0x50 [ 409.452339][T32315] try_charge+0x118d/0x1790 [ 409.456829][T32315] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 409.462354][T32315] ? mark_held_locks+0xa4/0xf0 [ 409.467095][T32315] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 409.472705][T32315] ? __sk_mem_raise_allocated+0x557/0x1390 [ 409.478496][T32315] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 409.484106][T32315] ? lockdep_hardirqs_on+0x418/0x5d0 [ 409.489372][T32315] ? trace_hardirqs_on+0x67/0x230 [ 409.494379][T32315] mem_cgroup_charge_skmem+0x12f/0x280 [ 409.499835][T32315] ? mem_cgroup_sk_free+0x90/0x90 [ 409.504853][T32315] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 409.510554][T32315] ? iov_iter_advance+0x295/0xfd0 [ 409.515564][T32315] __sk_mem_raise_allocated+0x557/0x1390 [ 409.521174][T32315] ? alloc_pages_current+0x10f/0x210 [ 409.526462][T32315] __sk_mem_schedule+0x6d/0xe0 [ 409.531214][T32315] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 409.537451][T32315] tcp_sendmsg_locked+0x1992/0x34b0 [ 409.542659][T32315] ? tcp_sendpage+0x60/0x60 [ 409.547153][T32315] ? trace_hardirqs_on+0x67/0x230 [ 409.552157][T32315] ? lock_sock_nested+0x9a/0x120 [ 409.557074][T32315] ? __local_bh_enable_ip+0x15a/0x270 [ 409.562450][T32315] tcp_sendmsg+0x30/0x50 [ 409.566675][T32315] inet_sendmsg+0x147/0x5d0 [ 409.571156][T32315] ? ipip_gro_receive+0x100/0x100 [ 409.576163][T32315] sock_sendmsg+0xdd/0x130 [ 409.580584][T32315] __sys_sendto+0x262/0x380 [ 409.585093][T32315] ? __ia32_sys_getpeername+0xb0/0xb0 [ 409.590466][T32315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 409.596685][T32315] ? put_timespec64+0xda/0x140 [ 409.601439][T32315] ? nsecs_to_jiffies+0x30/0x30 [ 409.606297][T32315] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 409.611743][T32315] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 409.617192][T32315] ? do_syscall_64+0x26/0x610 [ 409.621859][T32315] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.627920][T32315] __x64_sys_sendto+0xe1/0x1a0 [ 409.632670][T32315] do_syscall_64+0x103/0x610 [ 409.637250][T32315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 409.643118][T32315] RIP: 0033:0x457e29 [ 409.646991][T32315] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 409.666574][T32315] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 409.674973][T32315] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 409.682929][T32315] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 409.690899][T32315] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 11:09:18 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in=@local}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000002c80)=0xe8) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002e80)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002cc0)={@mcast2, 0x20, r2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x155777ae) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="0500db44931853f5bf7ce676b3000700007b543a5cc8ae5a644f0308000000b41c0000ffff08ff2d020000000000e556b35eb80065040400001e01b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x0) fadvise64(r1, 0xe4ffffff00000000, 0xffff, 0x2) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r10 = dup3(r6, r9, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) [ 409.698859][T32315] R10: 4002000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 409.706812][T32315] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 409.720931][T32315] memory: usage 307200kB, limit 307200kB, failcnt 346 [ 409.733029][T32315] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 409.740736][T32315] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000300100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 409.761128][T32315] Memory cgroup stats for /syz2: cache:120KB rss:2316KB rss_huge:2048KB shmem:216KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2300KB inactive_file:0KB active_file:0KB unevictable:0KB [ 409.783776][T32315] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32314,uid=0 [ 409.802213][T32315] Memory cgroup out of memory: Killed process 32314 (syz-executor.2) total-vm:72576kB, anon-rss:2156kB, file-rss:34816kB, shmem-rss:0kB [ 409.817799][ T1045] oom_reaper: reaped process 32314 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 11:09:18 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, 0x0, 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x6000000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030400000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e70000000000000000000000000000000000000000000000", 0x6b, 0x0, 0x0, 0x0) 11:09:18 executing program 5: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002b80)={{{@in=@broadcast, @in=@local}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000002c80)=0xe8) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000002e80)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000002cc0)={@mcast2, 0x20, r2}) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x155777ae) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="0500db44931853f5bf7ce676b3000700007b543a5cc8ae5a644f0308000000b41c0000ffff08ff2d020000000000e556b35eb80065040400001e01b700e4140000000000000000000000000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xa}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x0) fadvise64(r1, 0xe4ffffff00000000, 0xffff, 0x2) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r5) r10 = dup3(r6, r9, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 11:09:18 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:18 executing program 0: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$NBD_CLEAR_QUE(r0, 0x90000915) 11:09:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000540100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 410.093578][T32342] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 410.147308][T32342] CPU: 0 PID: 32342 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 410.156451][T32342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.166503][T32342] Call Trace: [ 410.169801][T32342] dump_stack+0x172/0x1f0 [ 410.174141][T32342] dump_header+0x10f/0xba6 [ 410.178571][T32342] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 410.184380][T32342] ? ___ratelimit+0x60/0x595 [ 410.188972][T32342] ? do_raw_spin_unlock+0x57/0x270 [ 410.194093][T32342] oom_kill_process.cold+0x10/0x15 [ 410.199214][T32342] out_of_memory+0x79a/0x1280 [ 410.203922][T32342] ? oom_killer_disable+0x280/0x280 [ 410.209137][T32342] mem_cgroup_out_of_memory+0x1ca/0x230 [ 410.214683][T32342] ? memcg_event_wake+0x230/0x230 [ 410.219720][T32342] ? _raw_spin_unlock+0x41/0x50 [ 410.224577][T32342] try_charge+0x118d/0x1790 [ 410.229091][T32342] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 410.234640][T32342] ? mark_held_locks+0xa4/0xf0 [ 410.239410][T32342] ? mem_cgroup_charge_skmem+0x11a/0x280 11:09:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$eventfd(r1, &(0x7f0000000100), 0x8) 11:09:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) [ 410.245048][T32342] ? __sk_mem_raise_allocated+0x557/0x1390 [ 410.250856][T32342] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 410.256493][T32342] ? lockdep_hardirqs_on+0x418/0x5d0 [ 410.261782][T32342] ? trace_hardirqs_on+0x67/0x230 [ 410.266811][T32342] mem_cgroup_charge_skmem+0x12f/0x280 [ 410.272285][T32342] ? mem_cgroup_sk_free+0x90/0x90 [ 410.277319][T32342] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 410.283047][T32342] ? iov_iter_advance+0x295/0xfd0 [ 410.288085][T32342] __sk_mem_raise_allocated+0x557/0x1390 11:09:19 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080), 0x1c) sendto$inet6(r0, 0x0, 0xffffffffffffffc9, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="88", 0x1, 0x0, 0x0, 0x0) 11:09:19 executing program 0: syz_open_pts(0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x0, 0x64}], 0x1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) [ 410.293740][T32342] ? alloc_pages_current+0x10f/0x210 [ 410.299027][T32342] __sk_mem_schedule+0x6d/0xe0 [ 410.303788][T32342] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 410.310031][T32342] tcp_sendmsg_locked+0x1992/0x34b0 [ 410.315260][T32342] ? tcp_sendpage+0x60/0x60 [ 410.319770][T32342] ? trace_hardirqs_on+0x67/0x230 [ 410.324793][T32342] ? lock_sock_nested+0x9a/0x120 [ 410.329732][T32342] ? __local_bh_enable_ip+0x15a/0x270 [ 410.335109][T32342] tcp_sendmsg+0x30/0x50 [ 410.339375][T32342] inet_sendmsg+0x147/0x5d0 11:09:19 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x5, 0x5, 0x16) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x4) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xbb5, 0x105082) r4 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0xa, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r7, &(0x7f0000000580)='envh&on\x00\x82Y\xd49\xa7\x9e\xa6\x9e1\xc8(N\xa0\x83\xc4\xb2\xee{\xeb\xe22x\x17\xbbEr\xc8\x94\xb91\xb4\x9aw\xb1w\xe3w\x98\xb3\x14\x94\xd4\xa0l\xec\x82i\x1c}\t\x96\xebH`\x825\x00\x00G\xa6\xbfK\fa\x92\\\x95\xe77\x83\xb9\xee\xe0j\xf9\x81?\xae\xab\x152\xf6bqC\xc2\x8f\x1f> \xb5^>\x11\x99\x8f\xdd\x152\xf3\xe0\x8f\xa9\xf1\x15\xd705\xd3\xce\xb4\v L\xde\xf5\x1dWs\xc9;\xb0c\x92\xfb\xd3\xef\xb6\xae\x90>O\x95F\xd9\x9d\x1b\xbbc\x8a#\xc2\xfd\x812D\xd2\xbf\xe6\xa8\xdb\xcdQ\x04\x00\xce\xabqom\xd2\xff\x94\x8b\x82\xbf\xd7\xb8a\x81\xf7U\x94w\xfc\xac\xcb\xb8\xdd\xb1\xd2\xcb\xb2\x06r\xc59m a\xf0\x1e\xc9\xc2\xe9s\xdd\xd7\xd1,\x903B\xe7\xc8\x05Q\x7fD\a@\x97\xa3\x10\\\x0e\xc0\xfe\xf1 \xe7]#],\x8e\xcf\x93F\xc2\xf2\x8a\xf8\x7f@\xcb\xe83\xe9\x15\x9b\xfc\aY\xa9\xdbk\xfch\xc6\x05') [ 410.343888][T32342] ? ipip_gro_receive+0x100/0x100 [ 410.348919][T32342] sock_sendmsg+0xdd/0x130 [ 410.353341][T32342] __sys_sendto+0x262/0x380 [ 410.357848][T32342] ? __ia32_sys_getpeername+0xb0/0xb0 [ 410.363259][T32342] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 410.369502][T32342] ? put_timespec64+0xda/0x140 [ 410.374270][T32342] ? nsecs_to_jiffies+0x30/0x30 [ 410.379132][T32342] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 410.384593][T32342] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 410.390055][T32342] ? do_syscall_64+0x26/0x610 [ 410.394742][T32342] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.400820][T32342] __x64_sys_sendto+0xe1/0x1a0 [ 410.405594][T32342] do_syscall_64+0x103/0x610 [ 410.410189][T32342] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 410.416087][T32342] RIP: 0033:0x457e29 [ 410.419980][T32342] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 410.439582][T32342] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 410.447987][T32342] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 410.447998][T32342] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 410.448007][T32342] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 410.448017][T32342] R10: 6000000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 410.448025][T32342] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 410.465660][T32342] memory: usage 307196kB, limit 307200kB, failcnt 400 [ 410.488542][T32342] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 410.502096][T32378] print_req_error: I/O error, dev loop7, sector 0 flags 80700 [ 410.503343][T32342] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 410.532523][T32342] Memory cgroup stats for /syz2: cache:120KB rss:200KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:264KB inactive_file:0KB active_file:0KB unevictable:0KB [ 410.557257][T32342] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32340,uid=0 [ 410.573273][T32342] Memory cgroup out of memory: Killed process 32340 (syz-executor.2) total-vm:72576kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB [ 410.592666][ T1045] oom_reaper: reaped process 32340 (syz-executor.2), now anon-rss:0kB, file-rss:34704kB, shmem-rss:0kB 11:09:19 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x707a000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:19 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="e96e652fc3825ab288997ef638f7d464", 0x10, 0x0) 11:09:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000620100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:19 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:19 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40286608, 0x20000001) 11:09:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 410.778922][T32398] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 410.804147][T32398] CPU: 0 PID: 32398 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 410.813289][T32398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 410.823362][T32398] Call Trace: 11:09:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000000907031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db", 0x43}], 0x1}, 0x0) [ 410.826658][T32398] dump_stack+0x172/0x1f0 [ 410.830995][T32398] dump_header+0x10f/0xba6 [ 410.835415][T32398] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 410.841228][T32398] ? ___ratelimit+0x60/0x595 [ 410.845821][T32398] ? do_raw_spin_unlock+0x57/0x270 [ 410.850938][T32398] oom_kill_process.cold+0x10/0x15 [ 410.856053][T32398] out_of_memory+0x79a/0x1280 [ 410.860726][T32398] ? lock_downgrade+0x880/0x880 [ 410.865566][T32398] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 410.871810][T32398] ? oom_killer_disable+0x280/0x280 11:09:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000180), 0x85, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003a40)=[{{&(0x7f0000002500)=@hci, 0x80, &(0x7f0000003700)=[{&(0x7f00000002c0)=""/225, 0xe1}], 0x1, &(0x7f0000003780)=""/232, 0xe8}}, {{&(0x7f0000003880)=@xdp, 0x80, &(0x7f0000000040), 0x8a, &(0x7f00000039c0)=""/111, 0x6f}}], 0x8000078, 0x2, &(0x7f0000003bc0)={0x0, r1+30000000}) [ 410.877008][T32398] ? find_held_lock+0x35/0x130 [ 410.881788][T32398] mem_cgroup_out_of_memory+0x1ca/0x230 [ 410.887336][T32398] ? memcg_event_wake+0x230/0x230 [ 410.892375][T32398] ? do_raw_spin_unlock+0x57/0x270 [ 410.897520][T32398] ? _raw_spin_unlock+0x2d/0x50 [ 410.902381][T32398] try_charge+0x118d/0x1790 [ 410.906888][T32398] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 410.912423][T32398] ? mark_held_locks+0xa4/0xf0 [ 410.917174][T32398] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 410.922806][T32398] ? __sk_mem_raise_allocated+0x557/0x1390 [ 410.928593][T32398] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 410.934215][T32398] ? lockdep_hardirqs_on+0x418/0x5d0 [ 410.939483][T32398] ? trace_hardirqs_on+0x67/0x230 [ 410.944502][T32398] mem_cgroup_charge_skmem+0x12f/0x280 [ 410.949944][T32398] ? mem_cgroup_sk_free+0x90/0x90 [ 410.954950][T32398] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 410.960650][T32398] ? iov_iter_advance+0x295/0xfd0 [ 410.965662][T32398] __sk_mem_raise_allocated+0x557/0x1390 [ 410.971275][T32398] ? alloc_pages_current+0x10f/0x210 [ 410.976561][T32398] __sk_mem_schedule+0x6d/0xe0 [ 410.981309][T32398] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 410.987538][T32398] tcp_sendmsg_locked+0x1992/0x34b0 [ 410.992733][T32398] ? tcp_sendpage+0x60/0x60 [ 410.997220][T32398] ? trace_hardirqs_on+0x67/0x230 [ 411.002225][T32398] ? lock_sock_nested+0x9a/0x120 [ 411.007147][T32398] ? __local_bh_enable_ip+0x15a/0x270 [ 411.012512][T32398] tcp_sendmsg+0x30/0x50 [ 411.016740][T32398] inet_sendmsg+0x147/0x5d0 [ 411.021226][T32398] ? ipip_gro_receive+0x100/0x100 [ 411.026233][T32398] sock_sendmsg+0xdd/0x130 [ 411.030636][T32398] __sys_sendto+0x262/0x380 [ 411.035124][T32398] ? __ia32_sys_getpeername+0xb0/0xb0 [ 411.040490][T32398] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.046714][T32398] ? put_timespec64+0xda/0x140 [ 411.051467][T32398] ? nsecs_to_jiffies+0x30/0x30 [ 411.056308][T32398] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.061748][T32398] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.067199][T32398] ? do_syscall_64+0x26/0x610 [ 411.071860][T32398] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.077912][T32398] __x64_sys_sendto+0xe1/0x1a0 [ 411.082661][T32398] do_syscall_64+0x103/0x610 [ 411.087243][T32398] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.093115][T32398] RIP: 0033:0x457e29 [ 411.096995][T32398] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.116578][T32398] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 411.124974][T32398] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 411.132924][T32398] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 411.140888][T32398] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 411.148842][T32398] R10: 707a000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 411.156795][T32398] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 411.189495][T32398] memory: usage 307148kB, limit 307200kB, failcnt 425 11:09:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[], 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000004fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 411.233568][T32398] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 411.243611][T32398] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 411.251019][T32398] Memory cgroup stats for /syz2: cache:120KB rss:200KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000880)="d6a758d87881ee4ac9938e438707c7eeba83d49e697bc5491658c26fbbf0e70b740eddcb7a981f842a682c2fe970a3b65571e0e15d31985c8113d9419816fada032277657938bc45c22430311f9fdb04327827c796e480ad63ef996ade99ea14fd2d83febfa3f216c192011a0e37e25ce0c63f34494834df78d3ad0fbdc56eee1f7d74a5328708f2010b5f2dfa11ed68153f4445f7ab1638a45a7d9bde8f7872599d6712a7671914774b578b40545c1b13188c6ed53a5901f6bd3e1f11544a205547491badb855", 0xc7}], 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40046607, &(0x7f0000000300)=0xfffffffffffffffe) listen(r0, 0x7f) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r1) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x5, 0x5, 0x16) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x141042, 0x4) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0xbb5, 0x105082) r4 = memfd_create(&(0x7f0000000140)='}#*nodevem0\xb7,\x00', 0x0) pwritev(r4, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) socketpair$unix(0x1, 0xa, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) fcntl$setstatus(r2, 0x4, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) read(r5, &(0x7f0000000200)=""/250, 0x50c7e3e3) sendfile(r3, r4, 0x0, 0x80005) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) syz_open_procfs(r7, &(0x7f0000000580)='envh&on\x00\x82Y\xd49\xa7\x9e\xa6\x9e1\xc8(N\xa0\x83\xc4\xb2\xee{\xeb\xe22x\x17\xbbEr\xc8\x94\xb91\xb4\x9aw\xb1w\xe3w\x98\xb3\x14\x94\xd4\xa0l\xec\x82i\x1c}\t\x96\xebH`\x825\x00\x00G\xa6\xbfK\fa\x92\\\x95\xe77\x83\xb9\xee\xe0j\xf9\x81?\xae\xab\x152\xf6bqC\xc2\x8f\x1f> \xb5^>\x11\x99\x8f\xdd\x152\xf3\xe0\x8f\xa9\xf1\x15\xd705\xd3\xce\xb4\v L\xde\xf5\x1dWs\xc9;\xb0c\x92\xfb\xd3\xef\xb6\xae\x90>O\x95F\xd9\x9d\x1b\xbbc\x8a#\xc2\xfd\x812D\xd2\xbf\xe6\xa8\xdb\xcdQ\x04\x00\xce\xabqom\xd2\xff\x94\x8b\x82\xbf\xd7\xb8a\x81\xf7U\x94w\xfc\xac\xcb\xb8\xdd\xb1\xd2\xcb\xb2\x06r\xc59m a\xf0\x1e\xc9\xc2\xe9s\xdd\xd7\xd1,\x903B\xe7\xc8\x05Q\x7fD\a@\x97\xa3\x10\\\x0e\xc0\xfe\xf1 \xe7]#],\x8e\xcf\x93F\xc2\xf2\x8a\xf8\x7f@\xcb\xe83\xe9\x15\x9b\xfc\aY\xa9\xdbk\xfch\xc6\x05') 11:09:20 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8000000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0xe) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:20 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x44}}, &(0x7f0000000080)='GPL\x04\x9c5\x14\xbfw-\xa0z\xe8.vY\n6\xf6I>\xc1\xab\x91\xb3\x97\xe4*\xbf\x1e\xa6\xcd\x8c\xd7t\'\xfc\x9a\x9e+qe\xf5+A\a\xbf\bP\xd8\x99\xdcR\xd0\x13\x17]\xdb\x1b/F <*\x05\xb7\"\xe3>Uo\xb2\xe3\xf3\x9a<\xde\x1f\xcaSd\x037\xec\x95aF\xbd\xbf\xcb\x11Pp\x19V1\xde]!\xa5\xea\x9ec\x8c+\xdbx\xa5\x01\xcaKn\xa3\x13\xd8%h\xf98,,?o\xab\xa6\xb4\xeeTy;N\xd2m\xae>R\"P)\xbb*\xc0\x00\x7fwuL?#\xce\xda\x98\t\xb9\xa9hJ\x94\n\xbc\xaa\x8c\xfc\xc7\x13>\xc4\"\xe9\xc88\x881\x8dA\xe9\xa4\x93\xf0\x19_\xe2Y\x96Q\xb8\x95\x04\xf5\xdb\xa1F%\xce#f\xf3=\x95\xdb\xa9/\x86ry\xca\xbfJ\xce\xdd\xc8Z\x8a\xf7\xa0\xfah\xd7g\xceQ6\xb9\xd0\xd1\x96lI\x9c\xb6\xbf4\xc2\x98\x86f\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000]}, 0x48) [ 411.272844][T32398] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32396,uid=0 [ 411.290229][T32398] Memory cgroup out of memory: Killed process 32396 (syz-executor.2) total-vm:72576kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB [ 411.310675][ T1045] oom_reaper: reaped process 32396 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 11:09:20 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 11:09:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:20 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x400000000000302, 0x4008800) [ 411.503945][T32440] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 411.561874][T32440] CPU: 0 PID: 32440 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 411.571022][T32440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.581081][T32440] Call Trace: [ 411.584414][T32440] dump_stack+0x172/0x1f0 [ 411.588760][T32440] dump_header+0x10f/0xba6 [ 411.593192][T32440] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 411.599010][T32440] ? ___ratelimit+0x60/0x595 [ 411.603611][T32440] ? do_raw_spin_unlock+0x57/0x270 [ 411.608733][T32440] oom_kill_process.cold+0x10/0x15 [ 411.613865][T32440] out_of_memory+0x79a/0x1280 [ 411.618554][T32440] ? lock_downgrade+0x880/0x880 [ 411.623409][T32440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 411.629658][T32440] ? oom_killer_disable+0x280/0x280 [ 411.634860][T32440] ? find_held_lock+0x35/0x130 [ 411.639639][T32440] mem_cgroup_out_of_memory+0x1ca/0x230 [ 411.645191][T32440] ? memcg_event_wake+0x230/0x230 [ 411.650228][T32440] ? do_raw_spin_unlock+0x57/0x270 [ 411.655354][T32440] ? _raw_spin_unlock+0x2d/0x50 [ 411.660219][T32440] try_charge+0x118d/0x1790 [ 411.664748][T32440] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 411.670323][T32440] ? mark_held_locks+0xa4/0xf0 [ 411.675094][T32440] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 411.680748][T32440] ? __sk_mem_raise_allocated+0x557/0x1390 [ 411.686557][T32440] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 411.692198][T32440] ? lockdep_hardirqs_on+0x418/0x5d0 [ 411.697503][T32440] ? trace_hardirqs_on+0x67/0x230 [ 411.702540][T32440] mem_cgroup_charge_skmem+0x12f/0x280 11:09:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000040000fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 411.708224][T32440] ? mem_cgroup_sk_free+0x90/0x90 [ 411.713255][T32440] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 411.718978][T32440] ? iov_iter_advance+0x295/0xfd0 [ 411.724018][T32440] __sk_mem_raise_allocated+0x557/0x1390 [ 411.729660][T32440] ? alloc_pages_current+0x10f/0x210 [ 411.734963][T32440] __sk_mem_schedule+0x6d/0xe0 [ 411.739728][T32440] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 411.745976][T32440] tcp_sendmsg_locked+0x1992/0x34b0 [ 411.751201][T32440] ? tcp_sendpage+0x60/0x60 [ 411.755712][T32440] ? trace_hardirqs_on+0x67/0x230 [ 411.760742][T32440] ? lock_sock_nested+0x9a/0x120 [ 411.765690][T32440] ? __local_bh_enable_ip+0x15a/0x270 [ 411.771073][T32440] tcp_sendmsg+0x30/0x50 [ 411.775341][T32440] inet_sendmsg+0x147/0x5d0 [ 411.779847][T32440] ? ipip_gro_receive+0x100/0x100 [ 411.784901][T32440] sock_sendmsg+0xdd/0x130 [ 411.789403][T32440] __sys_sendto+0x262/0x380 [ 411.793916][T32440] ? __ia32_sys_getpeername+0xb0/0xb0 [ 411.799313][T32440] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 411.805555][T32440] ? put_timespec64+0xda/0x140 11:09:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43) [ 411.810321][T32440] ? nsecs_to_jiffies+0x30/0x30 [ 411.815191][T32440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.820648][T32440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 411.826128][T32440] ? do_syscall_64+0x26/0x610 [ 411.830809][T32440] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.836886][T32440] __x64_sys_sendto+0xe1/0x1a0 [ 411.841668][T32440] do_syscall_64+0x103/0x610 [ 411.846270][T32440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.852165][T32440] RIP: 0033:0x457e29 [ 411.856061][T32440] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.875690][T32440] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 411.884104][T32440] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 411.892062][T32440] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 411.900018][T32440] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 11:09:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) gettid() recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) close(r1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000c40)={0x0}, 0x10) 11:09:20 executing program 5: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="2e0000003200812de45ae087185082cf0300b0eba06e004003000000005106000000000000000000081f401fe091", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 411.907977][T32440] R10: 8000000000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 411.915967][T32440] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 411.924863][T32440] memory: usage 307192kB, limit 307200kB, failcnt 461 [ 411.937033][T32440] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:20 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 411.994353][T32440] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 412.001279][T32440] Memory cgroup stats for /syz2: cache:120KB rss:200KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:260KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:20 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 412.059961][T32570] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.5'. [ 412.083764][T32570] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 412.105617][T32440] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32430,uid=0 [ 412.113928][T32570] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.5'. [ 412.134146][T32440] Memory cgroup out of memory: Killed process 32430 (syz-executor.2) total-vm:72576kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB [ 412.151339][ T1045] oom_reaper: reaped process 32430 (syz-executor.2), now anon-rss:0kB, file-rss:34704kB, shmem-rss:0kB [ 412.153511][T32570] openvswitch: netlink: Flow get message rejected, Key attribute missing. 11:09:21 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x8004020000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000020100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002700)=[{0x0, 0xfffffed9}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x2, &(0x7f0000002d80)=""/199, 0xc7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005440)="2e000000120081aee4050cecdb4cb9040a485e510befccd77f3e9cf0758ef9000600b0eba06ac400040000000000", 0x2e}], 0x1}, 0x0) 11:09:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000000, 0x20, 0x0, &(0x7f0000000000)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d17", 0x0, 0x100}, 0x28) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x10) 11:09:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:21 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x7, 0x1, 0x18}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0xfb, &(0x7f0000002880)=""/251}, 0x48) [ 412.331808][T32599] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. [ 412.369982][T32590] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 412.399022][T32590] CPU: 0 PID: 32590 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 412.408257][T32590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 412.418303][T32590] Call Trace: [ 412.421582][T32590] dump_stack+0x172/0x1f0 [ 412.425903][T32590] dump_header+0x10f/0xba6 [ 412.430304][T32590] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 412.436110][T32590] ? ___ratelimit+0x60/0x595 [ 412.440684][T32590] ? do_raw_spin_unlock+0x57/0x270 [ 412.445778][T32590] oom_kill_process.cold+0x10/0x15 [ 412.450886][T32590] out_of_memory+0x79a/0x1280 [ 412.455556][T32590] ? lock_downgrade+0x880/0x880 [ 412.460391][T32590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.466616][T32590] ? oom_killer_disable+0x280/0x280 [ 412.471802][T32590] ? find_held_lock+0x35/0x130 [ 412.476554][T32590] mem_cgroup_out_of_memory+0x1ca/0x230 [ 412.482087][T32590] ? memcg_event_wake+0x230/0x230 [ 412.487110][T32590] ? do_raw_spin_unlock+0x57/0x270 [ 412.492205][T32590] ? _raw_spin_unlock+0x2d/0x50 [ 412.497042][T32590] try_charge+0x118d/0x1790 [ 412.501542][T32590] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 412.507078][T32590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.513315][T32590] ? kasan_check_read+0x11/0x20 [ 412.518152][T32590] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 412.523682][T32590] mem_cgroup_try_charge+0x24d/0x5e0 [ 412.528954][T32590] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 412.534570][T32590] wp_page_copy+0x408/0x1740 [ 412.539144][T32590] ? find_held_lock+0x35/0x130 [ 412.544386][T32590] ? pmd_pfn+0x1d0/0x1d0 [ 412.548724][T32590] ? lock_downgrade+0x880/0x880 [ 412.553567][T32590] ? __pte_alloc_kernel+0x220/0x220 [ 412.558934][T32590] ? kasan_check_read+0x11/0x20 [ 412.563777][T32590] ? do_raw_spin_unlock+0x57/0x270 [ 412.568870][T32590] do_wp_page+0x5d8/0x16c0 [ 412.573269][T32590] ? do_raw_spin_lock+0x12a/0x2e0 [ 412.578275][T32590] ? rwlock_bug.part.0+0x90/0x90 [ 412.583192][T32590] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 412.588542][T32590] ? add_mm_counter_fast.part.0+0x40/0x40 [ 412.594336][T32590] __handle_mm_fault+0x22e8/0x3ec0 [ 412.599434][T32590] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 412.604973][T32590] ? find_held_lock+0x35/0x130 [ 412.609720][T32590] ? handle_mm_fault+0x322/0xb30 [ 412.614645][T32590] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 412.620866][T32590] ? kasan_check_read+0x11/0x20 [ 412.625699][T32590] handle_mm_fault+0x43f/0xb30 [ 412.630450][T32590] __do_page_fault+0x5ef/0xda0 [ 412.635297][T32590] do_page_fault+0x71/0x581 [ 412.639780][T32590] ? page_fault+0x8/0x30 [ 412.644013][T32590] page_fault+0x1e/0x30 [ 412.648159][T32590] RIP: 0033:0x40d1e8 [ 412.652041][T32590] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf bf d4 4b 00 31 c0 e8 43 47 ff ff 31 ff e8 8c 43 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 32 64 00 [ 412.671630][T32590] RSP: 002b:00007ffd23a15e40 EFLAGS: 00010246 [ 412.677686][T32590] RAX: 0000000058b88972 RBX: 00000000901a54bf RCX: 0000001b31720000 [ 412.685639][T32590] RDX: 0000000000000000 RSI: 0000000000000972 RDI: ffffffff58b88972 11:09:21 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002700)=[{0x0, 0xfffffed9}, {&(0x7f0000005480)=""/4096, 0x1000}], 0x2, &(0x7f0000002d80)=""/199, 0xc7}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005440)="2e000000120081aee4050cecdb4cb9040a485e510befccd77f3e9cf0758ef9000600b0eba06ac400040000000000", 0x2e}], 0x1}, 0x0) [ 412.693590][T32590] RBP: 0000000000000014 R08: 0000000058b88972 R09: 0000000058b88976 [ 412.701542][T32590] R10: 00007ffd23a15fd0 R11: 0000000000000246 R12: 000000000073bf88 [ 412.709495][T32590] R13: 0000000080000000 R14: 00007f4863152008 R15: 0000000000000014 [ 412.737812][T32590] memory: usage 307204kB, limit 307200kB, failcnt 496 11:09:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 412.750315][T32590] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 412.774198][T32590] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 412.781844][T32590] Memory cgroup stats for /syz2: cache:120KB rss:200KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:244KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000030100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 412.816521][T32590] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=8031,uid=0 [ 412.819502][T32612] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.5'. 11:09:21 executing program 0: r0 = socket$inet6(0xa, 0x20000000080002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x0, 0x2}, 0x20) [ 412.900776][T32590] Memory cgroup out of memory: Killed process 8031 (syz-executor.2) total-vm:72444kB, anon-rss:120kB, file-rss:34816kB, shmem-rss:0kB [ 413.037460][T32602] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 413.048240][T32602] CPU: 0 PID: 32602 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 413.057371][T32602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.067418][T32602] Call Trace: [ 413.067441][T32602] dump_stack+0x172/0x1f0 [ 413.067468][T32602] dump_header+0x10f/0xba6 [ 413.075061][T32602] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 413.075076][T32602] ? ___ratelimit+0x60/0x595 [ 413.075091][T32602] ? do_raw_spin_unlock+0x57/0x270 [ 413.075107][T32602] oom_kill_process.cold+0x10/0x15 [ 413.075121][T32602] out_of_memory+0x79a/0x1280 [ 413.075136][T32602] ? lock_downgrade+0x880/0x880 [ 413.075149][T32602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.075163][T32602] ? oom_killer_disable+0x280/0x280 [ 413.075173][T32602] ? find_held_lock+0x35/0x130 [ 413.075194][T32602] mem_cgroup_out_of_memory+0x1ca/0x230 [ 413.075207][T32602] ? memcg_event_wake+0x230/0x230 [ 413.075225][T32602] ? do_raw_spin_unlock+0x57/0x270 [ 413.075242][T32602] ? _raw_spin_unlock+0x2d/0x50 [ 413.075260][T32602] try_charge+0x118d/0x1790 [ 413.075279][T32602] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 413.075298][T32602] ? mark_held_locks+0xa4/0xf0 [ 413.075313][T32602] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 413.075329][T32602] ? __sk_mem_raise_allocated+0x557/0x1390 [ 413.075342][T32602] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 413.075356][T32602] ? lockdep_hardirqs_on+0x418/0x5d0 [ 413.075371][T32602] ? trace_hardirqs_on+0x67/0x230 [ 413.075390][T32602] mem_cgroup_charge_skmem+0x12f/0x280 [ 413.075406][T32602] ? mem_cgroup_sk_free+0x90/0x90 [ 413.075420][T32602] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 413.075435][T32602] ? iov_iter_advance+0x295/0xfd0 [ 413.075461][T32602] __sk_mem_raise_allocated+0x557/0x1390 [ 413.075472][T32602] ? alloc_pages_current+0x10f/0x210 [ 413.075496][T32602] __sk_mem_schedule+0x6d/0xe0 [ 413.225437][T32602] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 413.231690][T32602] tcp_sendmsg_locked+0x1992/0x34b0 [ 413.236915][T32602] ? tcp_sendpage+0x60/0x60 [ 413.241428][T32602] ? trace_hardirqs_on+0x67/0x230 [ 413.246459][T32602] ? lock_sock_nested+0x9a/0x120 [ 413.251402][T32602] ? __local_bh_enable_ip+0x15a/0x270 [ 413.256789][T32602] tcp_sendmsg+0x30/0x50 [ 413.261063][T32602] inet_sendmsg+0x147/0x5d0 [ 413.265574][T32602] ? ipip_gro_receive+0x100/0x100 [ 413.270604][T32602] sock_sendmsg+0xdd/0x130 [ 413.275036][T32602] __sys_sendto+0x262/0x380 [ 413.279546][T32602] ? __ia32_sys_getpeername+0xb0/0xb0 [ 413.284965][T32602] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 413.291218][T32602] ? put_timespec64+0xda/0x140 [ 413.296001][T32602] ? nsecs_to_jiffies+0x30/0x30 [ 413.300868][T32602] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 413.306331][T32602] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 413.311792][T32602] ? do_syscall_64+0x26/0x610 [ 413.316477][T32602] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.322554][T32602] __x64_sys_sendto+0xe1/0x1a0 [ 413.327331][T32602] do_syscall_64+0x103/0x610 [ 413.331930][T32602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.337830][T32602] RIP: 0033:0x457e29 [ 413.341729][T32602] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 413.361337][T32602] RSP: 002b:00007f4861150c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.369751][T32602] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 413.377836][T32602] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 413.385806][T32602] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 413.393777][T32602] R10: 8004020000000000 R11: 0000000000000246 R12: 00007f48611516d4 [ 413.401752][T32602] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 413.421741][T32602] memory: usage 307188kB, limit 307200kB, failcnt 509 [ 413.429019][T32602] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 413.436909][T32602] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 413.443848][T32602] Memory cgroup stats for /syz2: cache:120KB rss:196KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:160KB inactive_file:0KB active_file:0KB unevictable:0KB [ 413.464921][T32602] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32590,uid=0 11:09:22 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xe803000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:22 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:22 executing program 5: ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x4202}, {0xffffffffffffffff, 0x2000}, {0xffffffffffffffff, 0x8000}, {}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0)={0x3}, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000540)='/dev/zero\x00', 0x24000, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(0x0) r0 = socket$inet6(0xa, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) rmdir(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000980)={@mcast2, @remote, @mcast2, 0x2, 0xfffffffffffffffe, 0x7fffffff, 0x100000000000400, 0x84, 0x200}) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x100800, 0x0, 0xff, 0x1, 0x1, 0x2, 0x10000}, 0x20) 11:09:22 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000075130a00459d0e05431b2ec600"], 0x0, 0x19}, 0x20) 11:09:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000040100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 413.480669][T32602] Memory cgroup out of memory: Killed process 32590 (syz-executor.2) total-vm:72576kB, anon-rss:108kB, file-rss:34816kB, shmem-rss:0kB [ 413.495588][ T1045] oom_reaper: reaped process 32590 (syz-executor.2), now anon-rss:0kB, file-rss:34704kB, shmem-rss:0kB [ 413.580061][ T7372] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 413.605579][ T7372] CPU: 1 PID: 7372 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 413.614619][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 413.624659][ T7372] Call Trace: [ 413.624715][ T7372] dump_stack+0x172/0x1f0 [ 413.624738][ T7372] dump_header+0x10f/0xba6 [ 413.624753][ T7372] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 413.624764][ T7372] ? ___ratelimit+0x60/0x595 [ 413.624778][ T7372] ? do_raw_spin_unlock+0x57/0x270 [ 413.636885][ T7372] oom_kill_process.cold+0x10/0x15 [ 413.636903][ T7372] out_of_memory+0x79a/0x1280 [ 413.636920][ T7372] ? lock_downgrade+0x880/0x880 [ 413.636933][ T7372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 413.636947][ T7372] ? oom_killer_disable+0x280/0x280 [ 413.636975][ T7372] ? find_held_lock+0x35/0x130 [ 413.647337][ T7372] mem_cgroup_out_of_memory+0x1ca/0x230 [ 413.657533][ T7372] ? memcg_event_wake+0x230/0x230 [ 413.657554][ T7372] ? do_raw_spin_unlock+0x57/0x270 [ 413.657573][ T7372] ? _raw_spin_unlock+0x2d/0x50 [ 413.673285][ T7372] try_charge+0x118d/0x1790 [ 413.673305][ T7372] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 413.673322][ T7372] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 413.703696][ T7372] ? find_held_lock+0x35/0x130 [ 413.703714][ T7372] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 413.703745][ T7372] __memcg_kmem_charge_memcg+0x7c/0x130 [ 413.713992][ T7372] ? memcg_kmem_put_cache+0xb0/0xb0 [ 413.714012][ T7372] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 413.714031][ T7372] __memcg_kmem_charge+0x136/0x300 [ 413.714053][ T7372] __alloc_pages_nodemask+0x437/0x7e0 [ 413.740163][ T7372] ? find_held_lock+0x35/0x130 [ 413.740185][ T7372] ? __alloc_pages_slowpath+0x2900/0x2900 [ 413.740202][ T7372] ? kasan_check_write+0x14/0x20 11:09:22 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) 11:09:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000080100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 413.740223][ T7372] ? lock_downgrade+0x880/0x880 [ 413.752482][ T7372] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 413.752502][ T7372] alloc_pages_current+0x107/0x210 [ 413.752522][ T7372] pte_alloc_one+0x1b/0x1a0 [ 413.752537][ T7372] __pte_alloc+0x20/0x310 [ 413.752555][ T7372] copy_page_range+0x1529/0x1f90 [ 413.762996][ T7372] ? mark_held_locks+0xf0/0xf0 [ 413.763023][ T7372] ? copy_process.part.0+0x314e/0x79e0 [ 413.763049][ T7372] ? pmd_alloc+0x180/0x180 [ 413.763068][ T7372] ? vma_compute_subtree_gap+0x158/0x230 [ 413.789694][ T7372] ? validate_mm_rb+0xa3/0xc0 [ 413.789712][ T7372] ? __vma_link_rb+0x279/0x370 [ 413.789734][ T7372] copy_process.part.0+0x5acb/0x79e0 [ 413.789774][ T7372] ? __cleanup_sighand+0x60/0x60 [ 413.789803][ T7372] _do_fork+0x257/0xfd0 [ 413.799376][ T7372] ? fork_idle+0x1d0/0x1d0 [ 413.799403][ T7372] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 413.799418][ T7372] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 413.799433][ T7372] ? do_syscall_64+0x26/0x610 [ 413.799447][ T7372] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.799465][ T7372] ? do_syscall_64+0x26/0x610 [ 413.808687][ T7372] __x64_sys_clone+0xbf/0x150 [ 413.808706][ T7372] do_syscall_64+0x103/0x610 [ 413.808727][ T7372] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 413.808738][ T7372] RIP: 0033:0x4563fa [ 413.808752][ T7372] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 413.808760][ T7372] RSP: 002b:00007ffd23a16060 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 11:09:22 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:22 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="24000000020907031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e28000000110affffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 11:09:22 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 413.808777][ T7372] RAX: ffffffffffffffda RBX: 00007ffd23a16060 RCX: 00000000004563fa [ 413.818949][ T7372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 413.818958][ T7372] RBP: 00007ffd23a160a0 R08: 0000000000000001 R09: 00000000014c7940 [ 413.818967][ T7372] R10: 00000000014c7c10 R11: 0000000000000246 R12: 0000000000000001 [ 413.818975][ T7372] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 413.850501][ T7372] memory: usage 307204kB, limit 307200kB, failcnt 555 [ 413.906996][ T7372] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 413.943382][ T7372] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="0303000003006000000a0100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 414.016082][ T7372] Memory cgroup stats for /syz2: cache:120KB rss:196KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:68KB inactive_file:0KB active_file:0KB unevictable:0KB [ 414.039439][ T7372] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=7372,uid=0 [ 414.055947][T32664] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.5'. [ 414.067117][ T7372] Memory cgroup out of memory: Killed process 7372 (syz-executor.2) total-vm:72312kB, anon-rss:108kB, file-rss:35712kB, shmem-rss:0kB 11:09:22 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 414.097297][T32664] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 11:09:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xf401000000000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:23 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000740)='bcsf0\x00') 11:09:23 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000100100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:23 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:23 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xfdffffff00000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000110100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:23 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000740)='bcsf0\x00') 11:09:23 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x5) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:23 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:24 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000740)='bcsf0\x00') 11:09:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000300100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:24 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:24 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:24 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000540100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 417.334998][T32748] IPVS: ftp: loaded support on port[0] = 21 [ 417.388637][T32748] chnl_net:caif_netlink_parms(): no params data found [ 417.415172][T32748] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.422272][T32748] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.430325][T32748] device bridge_slave_0 entered promiscuous mode [ 417.438072][T32748] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.445208][T32748] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.452735][T32748] device bridge_slave_1 entered promiscuous mode [ 417.469558][T32748] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 417.479213][T32748] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 417.493875][T32748] team0: Port device team_slave_0 added [ 417.500645][T32748] team0: Port device team_slave_1 added [ 417.557710][T32748] device hsr_slave_0 entered promiscuous mode [ 417.594649][T32748] device hsr_slave_1 entered promiscuous mode [ 417.670246][T32748] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.677448][T32748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.684803][T32748] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.691848][T32748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.721959][T32748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.733233][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 417.741947][ T7418] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.749720][ T7418] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.758155][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 417.769154][T32748] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.781056][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 417.789586][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.796690][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.815646][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 417.823908][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.831001][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.839195][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 417.847972][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 417.856844][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 417.870504][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 417.879645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 417.889373][T32748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 417.906224][T32748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.967856][T32756] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 417.978189][T32756] CPU: 0 PID: 32756 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 417.987285][T32756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.997340][T32756] Call Trace: [ 418.000628][T32756] dump_stack+0x172/0x1f0 [ 418.004943][T32756] dump_header+0x10f/0xba6 [ 418.009342][T32756] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 418.015136][T32756] ? ___ratelimit+0x60/0x595 [ 418.019723][T32756] ? do_raw_spin_unlock+0x57/0x270 [ 418.024838][T32756] oom_kill_process.cold+0x10/0x15 [ 418.029932][T32756] out_of_memory+0x79a/0x1280 [ 418.034618][T32756] ? lock_downgrade+0x880/0x880 [ 418.039468][T32756] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.045702][T32756] ? oom_killer_disable+0x280/0x280 [ 418.050880][T32756] ? find_held_lock+0x35/0x130 [ 418.055650][T32756] mem_cgroup_out_of_memory+0x1ca/0x230 [ 418.061184][T32756] ? memcg_event_wake+0x230/0x230 [ 418.066211][T32756] ? do_raw_spin_unlock+0x57/0x270 [ 418.071304][T32756] ? _raw_spin_unlock+0x2d/0x50 [ 418.076147][T32756] try_charge+0x118d/0x1790 [ 418.080659][T32756] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 418.086199][T32756] ? mark_held_locks+0xa4/0xf0 [ 418.090953][T32756] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 418.096575][T32756] ? __sk_mem_raise_allocated+0x557/0x1390 [ 418.102385][T32756] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 418.108000][T32756] ? lockdep_hardirqs_on+0x418/0x5d0 [ 418.113352][T32756] ? trace_hardirqs_on+0x67/0x230 [ 418.118373][T32756] mem_cgroup_charge_skmem+0x12f/0x280 [ 418.123823][T32756] ? mem_cgroup_sk_free+0x90/0x90 [ 418.128838][T32756] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 418.134558][T32756] ? iov_iter_advance+0x295/0xfd0 [ 418.139616][T32756] __sk_mem_raise_allocated+0x557/0x1390 [ 418.145236][T32756] ? alloc_pages_current+0x10f/0x210 [ 418.150528][T32756] __sk_mem_schedule+0x6d/0xe0 [ 418.155293][T32756] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 418.161528][T32756] tcp_sendmsg_locked+0x1992/0x34b0 [ 418.166734][T32756] ? tcp_sendpage+0x60/0x60 [ 418.171217][T32756] ? trace_hardirqs_on+0x67/0x230 [ 418.176226][T32756] ? lock_sock_nested+0x9a/0x120 [ 418.181153][T32756] ? __local_bh_enable_ip+0x15a/0x270 [ 418.186508][T32756] tcp_sendmsg+0x30/0x50 [ 418.190731][T32756] inet_sendmsg+0x147/0x5d0 [ 418.195224][T32756] ? ipip_gro_receive+0x100/0x100 [ 418.200241][T32756] sock_sendmsg+0xdd/0x130 [ 418.204636][T32756] __sys_sendto+0x262/0x380 [ 418.209120][T32756] ? __ia32_sys_getpeername+0xb0/0xb0 [ 418.214501][T32756] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 418.220738][T32756] ? put_timespec64+0xda/0x140 [ 418.225481][T32756] ? nsecs_to_jiffies+0x30/0x30 [ 418.230332][T32756] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 418.235782][T32756] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 418.241256][T32756] ? do_syscall_64+0x26/0x610 [ 418.245914][T32756] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.251962][T32756] __x64_sys_sendto+0xe1/0x1a0 [ 418.256723][T32756] do_syscall_64+0x103/0x610 [ 418.261304][T32756] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.267171][T32756] RIP: 0033:0x457e29 [ 418.271045][T32756] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 418.290642][T32756] RSP: 002b:00007f439cf9cc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 418.299044][T32756] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 418.307116][T32756] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 418.315089][T32756] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 418.323052][T32756] R10: fdffffff00000000 R11: 0000000000000246 R12: 00007f439cf9d6d4 [ 418.331018][T32756] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff [ 418.345440][T32756] memory: usage 307200kB, limit 307200kB, failcnt 583 [ 418.352213][T32756] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 418.363422][T32756] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 418.370664][T32756] Memory cgroup stats for /syz2: cache:120KB rss:52KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:116KB inactive_file:0KB active_file:0KB unevictable:0KB [ 418.393171][T32756] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32754,uid=0 11:09:27 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xfeffffff00000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:27 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000740)='bcsf0\x00') 11:09:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000620100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:27 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:27 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 418.408602][T32756] Memory cgroup out of memory: Killed process 32754 (syz-executor.2) total-vm:72580kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB [ 418.423872][ T1045] oom_reaper: reaped process 32754 (syz-executor.2), now anon-rss:0kB, file-rss:34708kB, shmem-rss:0kB [ 418.495016][T32748] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=0 [ 418.549377][T32748] CPU: 1 PID: 32748 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 418.558605][T32748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.568688][T32748] Call Trace: [ 418.572019][T32748] dump_stack+0x172/0x1f0 [ 418.576365][T32748] dump_header+0x10f/0xba6 [ 418.580789][T32748] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 418.586598][T32748] ? ___ratelimit+0x60/0x595 [ 418.591193][T32748] ? do_raw_spin_unlock+0x57/0x270 [ 418.596317][T32748] oom_kill_process.cold+0x10/0x15 [ 418.601432][T32748] out_of_memory+0x79a/0x1280 [ 418.606114][T32748] ? lock_downgrade+0x880/0x880 [ 418.610969][T32748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.617212][T32748] ? oom_killer_disable+0x280/0x280 [ 418.622411][T32748] ? find_held_lock+0x35/0x130 [ 418.627189][T32748] mem_cgroup_out_of_memory+0x1ca/0x230 [ 418.632742][T32748] ? memcg_event_wake+0x230/0x230 [ 418.637776][T32748] ? do_raw_spin_unlock+0x57/0x270 [ 418.642894][T32748] ? _raw_spin_unlock+0x2d/0x50 [ 418.647754][T32748] try_charge+0x118d/0x1790 [ 418.652270][T32748] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 418.657854][T32748] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 418.663401][T32748] ? find_held_lock+0x35/0x130 [ 418.668194][T32748] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 418.673759][T32748] __memcg_kmem_charge_memcg+0x7c/0x130 [ 418.679306][T32748] ? memcg_kmem_put_cache+0xb0/0xb0 [ 418.684510][T32748] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 418.690076][T32748] __memcg_kmem_charge+0x136/0x300 [ 418.695201][T32748] __alloc_pages_nodemask+0x437/0x7e0 [ 418.700578][T32748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 418.707309][T32748] ? __alloc_pages_slowpath+0x2900/0x2900 [ 418.713038][T32748] ? copy_process.part.0+0x1d35/0x79e0 [ 418.718510][T32748] ? lockdep_hardirqs_on+0x418/0x5d0 [ 418.723811][T32748] ? trace_hardirqs_on+0x67/0x230 [ 418.728841][T32748] ? kasan_check_read+0x11/0x20 [ 418.733700][T32748] copy_process.part.0+0x3e0/0x79e0 [ 418.738907][T32748] ? mark_held_locks+0xf0/0xf0 [ 418.746814][T32748] ? _raw_spin_unlock+0x2d/0x50 [ 418.751678][T32748] ? __might_fault+0x12b/0x1e0 [ 418.756455][T32748] ? __cleanup_sighand+0x60/0x60 [ 418.762459][T32748] ? lock_downgrade+0x880/0x880 [ 418.767323][T32748] _do_fork+0x257/0xfd0 [ 418.771487][T32748] ? fork_idle+0x1d0/0x1d0 [ 418.775915][T32748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 418.781379][T32748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 418.786840][T32748] ? do_syscall_64+0x26/0x610 [ 418.791519][T32748] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.797681][T32748] ? do_syscall_64+0x26/0x610 [ 418.802363][T32748] __x64_sys_clone+0xbf/0x150 [ 418.807051][T32748] do_syscall_64+0x103/0x610 [ 418.811652][T32748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 418.817551][T32748] RIP: 0033:0x4563fa [ 418.821445][T32748] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 418.841091][T32748] RSP: 002b:00007fff5ab67ca0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 418.849594][T32748] RAX: ffffffffffffffda RBX: 00007fff5ab67ca0 RCX: 00000000004563fa [ 418.857568][T32748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 418.865546][T32748] RBP: 00007fff5ab67ce0 R08: 0000000000000001 R09: 0000000001c87940 [ 418.873518][T32748] R10: 0000000001c87c10 R11: 0000000000000246 R12: 0000000000000001 [ 418.881498][T32748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 11:09:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 418.913619][T32748] memory: usage 307260kB, limit 307200kB, failcnt 635 11:09:27 executing program 3: socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 418.960326][T32748] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 418.973818][T32748] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:27 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000003f00fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 419.024437][T32748] Memory cgroup stats for /syz2: cache:120KB rss:52KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:40KB inactive_file:0KB active_file:0KB unevictable:0KB [ 419.086794][T32748] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=32748,uid=0 [ 419.129998][T32748] Memory cgroup out of memory: Killed process 32748 (syz-executor.2) total-vm:72312kB, anon-rss:92kB, file-rss:35712kB, shmem-rss:0kB [ 419.158364][T32767] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 419.172890][T32767] FAT-fs (loop4): Filesystem has been set read-only 11:09:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 419.181645][T32767] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) 11:09:28 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000200fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffff00000000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000103fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:28 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:28 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffa0008000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:28 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000102fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000104fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:29 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x6) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:29 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:29 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:29 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000108fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 421.996813][ T399] IPVS: ftp: loaded support on port[0] = 21 [ 422.051010][ T399] chnl_net:caif_netlink_parms(): no params data found [ 422.077208][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.084429][ T399] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.091946][ T399] device bridge_slave_0 entered promiscuous mode [ 422.099880][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.107370][ T399] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.118505][ T399] device bridge_slave_1 entered promiscuous mode [ 422.133677][ T399] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 422.143500][ T399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 422.159126][ T399] team0: Port device team_slave_0 added [ 422.165904][ T399] team0: Port device team_slave_1 added [ 422.226754][ T399] device hsr_slave_0 entered promiscuous mode [ 422.284734][ T399] device hsr_slave_1 entered promiscuous mode [ 422.330645][ T399] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.337750][ T399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.345096][ T399] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.352247][ T399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.383184][ T399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.396171][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 422.404005][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.412023][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.420058][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 422.432302][ T399] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.442202][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 422.450896][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.458074][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.470356][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 422.478727][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.485909][ T7418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.506213][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 422.515405][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.523632][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.532050][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.541673][ T399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 422.549499][ T2982] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.568712][ T399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.623786][ T399] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 422.640291][ T399] CPU: 1 PID: 399 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 422.650017][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.660049][ T399] Call Trace: [ 422.663321][ T399] dump_stack+0x172/0x1f0 [ 422.667634][ T399] dump_header+0x10f/0xba6 [ 422.672029][ T399] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 422.677812][ T399] ? ___ratelimit+0x60/0x595 [ 422.682381][ T399] ? do_raw_spin_unlock+0x57/0x270 [ 422.687474][ T399] oom_kill_process.cold+0x10/0x15 [ 422.692563][ T399] out_of_memory+0x79a/0x1280 [ 422.697227][ T399] ? lock_downgrade+0x880/0x880 [ 422.702054][ T399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.708273][ T399] ? oom_killer_disable+0x280/0x280 [ 422.713449][ T399] ? find_held_lock+0x35/0x130 [ 422.718195][ T399] mem_cgroup_out_of_memory+0x1ca/0x230 [ 422.723773][ T399] ? memcg_event_wake+0x230/0x230 [ 422.728778][ T399] ? do_raw_spin_unlock+0x57/0x270 [ 422.733868][ T399] ? _raw_spin_unlock+0x2d/0x50 [ 422.738901][ T399] try_charge+0x118d/0x1790 [ 422.743393][ T399] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 422.748950][ T399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.755179][ T399] ? kasan_check_read+0x11/0x20 [ 422.760018][ T399] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 422.765572][ T399] mem_cgroup_try_charge+0x24d/0x5e0 [ 422.770838][ T399] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 422.776450][ T399] wp_page_copy+0x408/0x1740 [ 422.781028][ T399] ? find_held_lock+0x35/0x130 [ 422.785772][ T399] ? pmd_pfn+0x1d0/0x1d0 [ 422.790017][ T399] ? lock_downgrade+0x880/0x880 [ 422.794846][ T399] ? swp_swapcount+0x540/0x540 [ 422.799589][ T399] ? kasan_check_read+0x11/0x20 [ 422.804441][ T399] ? do_raw_spin_unlock+0x57/0x270 [ 422.809541][ T399] do_wp_page+0x5d8/0x16c0 [ 422.813938][ T399] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 422.819298][ T399] __handle_mm_fault+0x22e8/0x3ec0 [ 422.824389][ T399] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 422.829909][ T399] ? find_held_lock+0x35/0x130 [ 422.834652][ T399] ? handle_mm_fault+0x322/0xb30 [ 422.839568][ T399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 422.845907][ T399] ? kasan_check_read+0x11/0x20 [ 422.850735][ T399] handle_mm_fault+0x43f/0xb30 [ 422.855481][ T399] __do_page_fault+0x5ef/0xda0 [ 422.860231][ T399] do_page_fault+0x71/0x581 [ 422.864715][ T399] ? page_fault+0x8/0x30 [ 422.868934][ T399] page_fault+0x1e/0x30 [ 422.873064][ T399] RIP: 0033:0x40c0b8 [ 422.876940][ T399] Code: 3d bc bf 32 00 00 0f 85 8e 04 00 00 e8 81 a2 04 00 85 c0 89 c5 0f 88 cd 03 00 00 0f 84 7c 02 00 00 89 c6 bf 56 d6 4b 00 31 c0 63 58 ff ff c7 44 24 30 00 00 00 00 e8 26 5c ff ff 49 89 c5 48 [ 422.896631][ T399] RSP: 002b:00007ffcbdbed930 EFLAGS: 00010246 [ 422.902674][ T399] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00000000004563fa [ 422.910624][ T399] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00000000004bd656 [ 422.918571][ T399] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000001520940 [ 422.926533][ T399] R10: 0000000001520c10 R11: 0000000000000246 R12: 0000000000000000 [ 422.934480][ T399] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000002 [ 422.947134][ T399] memory: usage 307140kB, limit 307200kB, failcnt 690 [ 422.954021][ T399] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 422.961637][ T399] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 422.968545][ T399] Memory cgroup stats for /syz2: cache:120KB rss:52KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:32KB inactive_file:0KB active_file:0KB unevictable:0KB [ 422.989377][ T399] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=406,uid=0 [ 423.005640][ T399] Memory cgroup out of memory: Killed process 406 (syz-executor.2) total-vm:72316kB, anon-rss:84kB, file-rss:34816kB, shmem-rss:0kB 11:09:31 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffa0018000, 0x0, 0x0) shutdown(r0, 0x1) 11:09:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="03030000030060000000010afff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:31 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:31 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:31 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 423.019540][ T1045] oom_reaper: reaped process 406 (syz-executor.2), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB [ 423.110330][ T418] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 423.131058][ T418] CPU: 1 PID: 418 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 423.140220][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.150274][ T418] Call Trace: [ 423.153572][ T418] dump_stack+0x172/0x1f0 [ 423.157915][ T418] dump_header+0x10f/0xba6 [ 423.162344][ T418] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.168153][ T418] ? ___ratelimit+0x60/0x595 [ 423.172753][ T418] ? do_raw_spin_unlock+0x57/0x270 [ 423.177869][ T418] oom_kill_process.cold+0x10/0x15 [ 423.182982][ T418] out_of_memory+0x79a/0x1280 [ 423.187668][ T418] ? lock_downgrade+0x880/0x880 [ 423.192552][ T418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.198806][ T418] ? oom_killer_disable+0x280/0x280 [ 423.204088][ T418] ? find_held_lock+0x35/0x130 [ 423.208861][ T418] mem_cgroup_out_of_memory+0x1ca/0x230 [ 423.214407][ T418] ? memcg_event_wake+0x230/0x230 [ 423.219441][ T418] ? do_raw_spin_unlock+0x57/0x270 [ 423.224558][ T418] ? _raw_spin_unlock+0x2d/0x50 [ 423.229419][ T418] try_charge+0x118d/0x1790 [ 423.233937][ T418] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 423.239489][ T418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.245735][ T418] ? kasan_check_read+0x11/0x20 [ 423.250593][ T418] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 423.256258][ T418] mem_cgroup_try_charge+0x24d/0x5e0 [ 423.261556][ T418] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 423.267204][ T418] __handle_mm_fault+0x1e1f/0x3ec0 [ 423.272328][ T418] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 423.277909][ T418] ? find_held_lock+0x35/0x130 [ 423.282686][ T418] ? handle_mm_fault+0x322/0xb30 [ 423.287640][ T418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.293915][ T418] ? kasan_check_read+0x11/0x20 [ 423.298772][ T418] handle_mm_fault+0x43f/0xb30 [ 423.303546][ T418] __do_page_fault+0x5ef/0xda0 [ 423.308328][ T418] do_page_fault+0x71/0x581 [ 423.312833][ T418] ? page_fault+0x8/0x30 [ 423.317083][ T418] page_fault+0x1e/0x30 [ 423.321241][ T418] RIP: 0033:0x40f98f [ 423.325140][ T418] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 423.344755][ T418] RSP: 002b:00007ffcbdbed6a0 EFLAGS: 00010206 [ 423.350823][ T418] RAX: 00007fe3aeb8f000 RBX: 0000000000020000 RCX: 0000000000457e7a [ 423.358795][ T418] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 423.366769][ T418] RBP: 00007ffcbdbed780 R08: ffffffffffffffff R09: 0000000000000000 [ 423.374740][ T418] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbdbed860 [ 423.382732][ T418] R13: 00007fe3aebaf700 R14: 0000000000000003 R15: 000000000073bf0c 11:09:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000110fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 423.496288][ T418] memory: usage 307192kB, limit 307200kB, failcnt 725 [ 423.503260][ T418] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.540380][ T418] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 423.563856][ T418] Memory cgroup stats for /syz2: cache:120KB rss:52KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:80KB inactive_file:0KB active_file:0KB unevictable:0KB [ 423.594388][ T418] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=418,uid=0 11:09:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 423.669234][ T418] Memory cgroup out of memory: Killed process 418 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB 11:09:32 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x1) [ 423.716446][ T1045] oom_reaper: reaped process 418 (syz-executor.2), now anon-rss:0kB, file-rss:34048kB, shmem-rss:0kB 11:09:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:32 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000111fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 423.845538][ T439] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 423.885212][ T439] CPU: 0 PID: 439 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 423.894185][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.904239][ T439] Call Trace: [ 423.907542][ T439] dump_stack+0x172/0x1f0 [ 423.911882][ T439] dump_header+0x10f/0xba6 [ 423.916308][ T439] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 423.922134][ T439] ? ___ratelimit+0x60/0x595 [ 423.926824][ T439] ? do_raw_spin_unlock+0x57/0x270 [ 423.931940][ T439] oom_kill_process.cold+0x10/0x15 [ 423.937055][ T439] out_of_memory+0x79a/0x1280 [ 423.941738][ T439] ? lock_downgrade+0x880/0x880 [ 423.946588][ T439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.952829][ T439] ? oom_killer_disable+0x280/0x280 [ 423.958025][ T439] ? find_held_lock+0x35/0x130 [ 423.962801][ T439] mem_cgroup_out_of_memory+0x1ca/0x230 [ 423.968349][ T439] ? memcg_event_wake+0x230/0x230 [ 423.973383][ T439] ? do_raw_spin_unlock+0x57/0x270 [ 423.978499][ T439] ? _raw_spin_unlock+0x2d/0x50 [ 423.983358][ T439] try_charge+0x118d/0x1790 [ 423.987870][ T439] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 11:09:32 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:32 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:32 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 423.993426][ T439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 423.999680][ T439] ? kasan_check_read+0x11/0x20 [ 424.004539][ T439] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 424.004561][ T439] mem_cgroup_try_charge+0x24d/0x5e0 [ 424.004584][ T439] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 424.004602][ T439] __handle_mm_fault+0x1e1f/0x3ec0 [ 424.004625][ T439] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 424.015417][ T439] ? find_held_lock+0x35/0x130 [ 424.015435][ T439] ? handle_mm_fault+0x322/0xb30 [ 424.015461][ T439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.015481][ T439] ? kasan_check_read+0x11/0x20 [ 424.015501][ T439] handle_mm_fault+0x43f/0xb30 [ 424.057266][ T439] __do_page_fault+0x5ef/0xda0 [ 424.062066][ T439] do_page_fault+0x71/0x581 [ 424.066594][ T439] ? page_fault+0x8/0x30 [ 424.070843][ T439] page_fault+0x1e/0x30 [ 424.074997][ T439] RIP: 0033:0x45a7dd [ 424.078904][ T439] Code: 5b 5d f3 c3 66 0f 1f 84 00 00 00 00 00 48 c7 c0 ea ff ff ff 48 85 ff 0f 84 e0 8e fb ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 <48> 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 [ 424.098510][ T439] RSP: 002b:00007ffcbdbed658 EFLAGS: 00010202 [ 424.105276][ T439] RAX: ffffffffffffffea RBX: 00007fe3aebaf700 RCX: 00007fe3aebaf700 [ 424.113261][ T439] RDX: 00000000003d0f00 RSI: 00007fe3aebaedb0 RDI: 000000000040ed80 [ 424.121250][ T439] RBP: 00007ffcbdbed860 R08: 00007fe3aebaf9d0 R09: 00007fe3aebaf700 [ 424.129237][ T439] R10: 00007fe3aebaedc0 R11: 0000000000000246 R12: 0000000000000000 [ 424.137219][ T439] R13: 00007ffcbdbed70f R14: 00007fe3aebaf9c0 R15: 000000000073bf0c [ 424.151242][ T439] memory: usage 307140kB, limit 307200kB, failcnt 751 [ 424.158443][ T439] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.166370][ T439] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.173469][ T439] Memory cgroup stats for /syz2: cache:120KB rss:52KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:88KB inactive_file:0KB active_file:0KB unevictable:0KB [ 424.196101][ T439] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=439,uid=0 [ 424.234831][ T439] Memory cgroup out of memory: Killed process 439 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB 11:09:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x2) shutdown(r0, 0x1) 11:09:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000130fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 424.436307][ T562] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 424.455111][ T562] CPU: 1 PID: 562 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 424.464080][ T562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.474126][ T562] Call Trace: [ 424.477420][ T562] dump_stack+0x172/0x1f0 [ 424.481866][ T562] dump_header+0x10f/0xba6 [ 424.486292][ T562] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 424.492111][ T562] ? ___ratelimit+0x60/0x595 [ 424.496704][ T562] ? do_raw_spin_unlock+0x57/0x270 [ 424.501821][ T562] oom_kill_process.cold+0x10/0x15 [ 424.506939][ T562] out_of_memory+0x79a/0x1280 [ 424.511625][ T562] ? lock_downgrade+0x880/0x880 [ 424.516480][ T562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.522721][ T562] ? oom_killer_disable+0x280/0x280 [ 424.527920][ T562] ? find_held_lock+0x35/0x130 [ 424.532697][ T562] mem_cgroup_out_of_memory+0x1ca/0x230 [ 424.538248][ T562] ? memcg_event_wake+0x230/0x230 [ 424.543455][ T562] ? do_raw_spin_unlock+0x57/0x270 [ 424.548575][ T562] ? _raw_spin_unlock+0x2d/0x50 [ 424.553433][ T562] try_charge+0x118d/0x1790 [ 424.557949][ T562] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 424.563498][ T562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.569749][ T562] ? kasan_check_read+0x11/0x20 [ 424.574606][ T562] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 424.580158][ T562] mem_cgroup_try_charge+0x24d/0x5e0 [ 424.585452][ T562] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 424.591101][ T562] wp_page_copy+0x408/0x1740 [ 424.595693][ T562] ? find_held_lock+0x35/0x130 [ 424.600486][ T562] ? pmd_pfn+0x1d0/0x1d0 [ 424.604738][ T562] ? lock_downgrade+0x880/0x880 [ 424.609599][ T562] ? __pte_alloc_kernel+0x220/0x220 [ 424.614825][ T562] ? kasan_check_read+0x11/0x20 [ 424.619676][ T562] ? do_raw_spin_unlock+0x57/0x270 [ 424.624791][ T562] do_wp_page+0x5d8/0x16c0 [ 424.629215][ T562] ? do_raw_spin_lock+0x12a/0x2e0 [ 424.634246][ T562] ? rwlock_bug.part.0+0x90/0x90 [ 424.639187][ T562] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 424.644568][ T562] ? add_mm_counter_fast.part.0+0x40/0x40 [ 424.650299][ T562] __handle_mm_fault+0x22e8/0x3ec0 [ 424.655418][ T562] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 424.660967][ T562] ? find_held_lock+0x35/0x130 [ 424.665737][ T562] ? handle_mm_fault+0x322/0xb30 [ 424.670681][ T562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 424.676928][ T562] ? kasan_check_read+0x11/0x20 [ 424.681789][ T562] handle_mm_fault+0x43f/0xb30 [ 424.686593][ T562] __do_page_fault+0x5ef/0xda0 [ 424.691375][ T562] do_page_fault+0x71/0x581 [ 424.695899][ T562] ? page_fault+0x8/0x30 [ 424.700152][ T562] page_fault+0x1e/0x30 [ 424.704306][ T562] RIP: 0033:0x40d1e8 [ 424.708204][ T562] Code: 8b 34 c6 4a 8d 04 2e 48 3d ff ff ff 7e 0f 86 77 ff ff ff bf bf d4 4b 00 31 c0 e8 43 47 ff ff 31 ff e8 8c 43 ff ff 0f 1f 40 00 <89> 3c b5 00 00 73 00 eb b6 31 ed 0f 1f 44 00 00 80 3d 7e 32 64 00 [ 424.727807][ T562] RSP: 002b:00007ffcbdbed6c0 EFLAGS: 00010246 [ 424.733872][ T562] RAX: 00000000233c35f0 RBX: 00000000bad4422f RCX: 0000001b2da20000 [ 424.741845][ T562] RDX: 0000000000000000 RSI: 00000000000015f0 RDI: ffffffff233c35f0 [ 424.753903][ T562] RBP: 0000000000000004 R08: 00000000233c35f0 R09: 00000000233c35f4 [ 424.761964][ T562] R10: 00007ffcbdbed850 R11: 0000000000000246 R12: 000000000073bf88 [ 424.769937][ T562] R13: 0000000080000000 R14: 00007fe3b0bb0008 R15: 0000000000000004 11:09:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:33 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) [ 424.782653][ T562] memory: usage 307200kB, limit 307200kB, failcnt 781 [ 424.789466][ T562] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.804684][ T562] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 424.811663][ T562] Memory cgroup stats for /syz2: cache:120KB rss:52KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:112KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:33 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000154fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 424.900541][ T562] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=562,uid=0 [ 424.934446][ T562] Memory cgroup out of memory: Killed process 562 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB 11:09:33 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x3) shutdown(r0, 0x1) [ 424.973843][ T1045] oom_reaper: reaped process 562 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 11:09:33 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:33 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000162fff55b4202938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:33 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x7) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 425.109277][ T584] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 425.140656][ T584] CPU: 1 PID: 584 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 425.149617][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 11:09:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 425.159667][ T584] Call Trace: [ 425.162959][ T584] dump_stack+0x172/0x1f0 [ 425.167283][ T584] dump_header+0x10f/0xba6 [ 425.171689][ T584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 425.177477][ T584] ? ___ratelimit+0x60/0x595 [ 425.182052][ T584] ? do_raw_spin_unlock+0x57/0x270 [ 425.187175][ T584] oom_kill_process.cold+0x10/0x15 [ 425.192276][ T584] out_of_memory+0x79a/0x1280 [ 425.196971][ T584] ? lock_downgrade+0x880/0x880 [ 425.201833][ T584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.208057][ T584] ? oom_killer_disable+0x280/0x280 [ 425.213243][ T584] ? find_held_lock+0x35/0x130 [ 425.218016][ T584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 425.223542][ T584] ? memcg_event_wake+0x230/0x230 [ 425.228558][ T584] ? do_raw_spin_unlock+0x57/0x270 [ 425.233652][ T584] ? _raw_spin_unlock+0x2d/0x50 [ 425.238488][ T584] try_charge+0x118d/0x1790 [ 425.242977][ T584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 425.248513][ T584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.254732][ T584] ? kasan_check_read+0x11/0x20 [ 425.259572][ T584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 425.265099][ T584] mem_cgroup_try_charge+0x24d/0x5e0 [ 425.270378][ T584] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 425.276014][ T584] __handle_mm_fault+0x1e1f/0x3ec0 [ 425.281119][ T584] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 425.286655][ T584] ? find_held_lock+0x35/0x130 [ 425.291417][ T584] ? handle_mm_fault+0x322/0xb30 [ 425.296340][ T584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.302562][ T584] ? kasan_check_read+0x11/0x20 [ 425.307393][ T584] handle_mm_fault+0x43f/0xb30 [ 425.312150][ T584] __do_page_fault+0x5ef/0xda0 [ 425.316910][ T584] do_page_fault+0x71/0x581 [ 425.321393][ T584] ? page_fault+0x8/0x30 [ 425.325623][ T584] page_fault+0x1e/0x30 [ 425.329767][ T584] RIP: 0033:0x40050c [ 425.333650][ T584] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 e9 4b 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 425.353231][ T584] RSP: 002b:00007ffcbdbed750 EFLAGS: 00010206 [ 425.359275][ T584] RAX: 0000000000000002 RBX: 000000000073c900 RCX: 0000000020000080 [ 425.367224][ T584] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 425.375171][ T584] RBP: 000000000073c900 R08: 0000000000000000 R09: 0000000000000000 [ 425.383207][ T584] R10: 00007ffcbdbed850 R11: 0000000000000246 R12: fffffffffffffffe [ 425.391164][ T584] R13: 0000000000067e7d R14: 00000000000003e8 R15: 000000000073bf0c [ 425.402287][ T584] memory: usage 307200kB, limit 307200kB, failcnt 817 [ 425.409167][ T584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 425.444659][ T584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 425.451555][ T584] Memory cgroup stats for /syz2: cache:120KB rss:52KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB [ 425.504385][ T584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=584,uid=0 [ 425.529899][ T584] Memory cgroup out of memory: Killed process 584 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB 11:09:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:34 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4207938207d9fb0380398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 425.544815][ T1045] oom_reaper: reaped process 584 (syz-executor.2), now anon-rss:0kB, file-rss:34692kB, shmem-rss:0kB 11:09:34 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x4) shutdown(r0, 0x1) 11:09:34 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 425.691043][ T608] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 425.701443][ T608] CPU: 1 PID: 608 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 425.710875][ T608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 425.720951][ T608] Call Trace: [ 425.724258][ T608] dump_stack+0x172/0x1f0 [ 425.728595][ T608] dump_header+0x10f/0xba6 [ 425.733022][ T608] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 425.738831][ T608] ? ___ratelimit+0x60/0x595 [ 425.745971][ T608] ? do_raw_spin_unlock+0x57/0x270 [ 425.752693][ T608] oom_kill_process.cold+0x10/0x15 [ 425.758103][ T608] out_of_memory+0x79a/0x1280 [ 425.762783][ T608] ? lock_downgrade+0x880/0x880 [ 425.767638][ T608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.773878][ T608] ? oom_killer_disable+0x280/0x280 [ 425.779063][ T608] ? find_held_lock+0x35/0x130 [ 425.783823][ T608] mem_cgroup_out_of_memory+0x1ca/0x230 [ 425.789356][ T608] ? memcg_event_wake+0x230/0x230 [ 425.794372][ T608] ? do_raw_spin_unlock+0x57/0x270 [ 425.799488][ T608] ? _raw_spin_unlock+0x2d/0x50 [ 425.804328][ T608] try_charge+0x118d/0x1790 [ 425.808827][ T608] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 425.814358][ T608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.820586][ T608] ? kasan_check_read+0x11/0x20 [ 425.825425][ T608] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 425.830970][ T608] mem_cgroup_try_charge+0x24d/0x5e0 [ 425.836249][ T608] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 425.841870][ T608] __handle_mm_fault+0x1e1f/0x3ec0 [ 425.846979][ T608] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 425.852520][ T608] ? find_held_lock+0x35/0x130 [ 425.857270][ T608] ? handle_mm_fault+0x322/0xb30 [ 425.862202][ T608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.868430][ T608] ? kasan_check_read+0x11/0x20 [ 425.873272][ T608] handle_mm_fault+0x43f/0xb30 [ 425.878030][ T608] __do_page_fault+0x5ef/0xda0 [ 425.882788][ T608] do_page_fault+0x71/0x581 [ 425.887274][ T608] ? page_fault+0x8/0x30 [ 425.891502][ T608] page_fault+0x1e/0x30 [ 425.895655][ T608] RIP: 0033:0x40050c [ 425.899535][ T608] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 e9 4b 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 425.919135][ T608] RSP: 002b:00007ffcbdbed750 EFLAGS: 00010206 [ 425.925184][ T608] RAX: 0000000000000002 RBX: 000000000073c900 RCX: 0000000020000080 [ 425.933138][ T608] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 425.941094][ T608] RBP: 000000000073c900 R08: 0000000000000000 R09: 0000000000000000 [ 425.949061][ T608] R10: 00007ffcbdbed850 R11: 0000000000000246 R12: fffffffffffffffe [ 425.957017][ T608] R13: 00000000000680d4 R14: 00000000000003e8 R15: 000000000073bf0c [ 425.975375][ T608] memory: usage 307196kB, limit 307200kB, failcnt 834 11:09:34 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) 11:09:34 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 425.999650][ T608] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 426.025649][ T608] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 426.054606][ T608] Memory cgroup stats for /syz2: cache:120KB rss:184KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB [ 426.112418][ T608] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=608,uid=0 [ 426.143003][ T608] Memory cgroup out of memory: Killed process 608 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB 11:09:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0280398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 426.175502][ T1045] oom_reaper: reaped process 608 (syz-executor.2), now anon-rss:0kB, file-rss:34692kB, shmem-rss:0kB 11:09:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x7) shutdown(r0, 0x1) 11:09:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(0x0, &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 426.310454][ T658] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 426.335037][ T658] CPU: 1 PID: 658 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 426.344106][ T658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.354157][ T658] Call Trace: [ 426.357465][ T658] dump_stack+0x172/0x1f0 [ 426.361793][ T658] dump_header+0x10f/0xba6 [ 426.366194][ T658] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 426.371982][ T658] ? ___ratelimit+0x60/0x595 [ 426.376550][ T658] ? do_raw_spin_unlock+0x57/0x270 [ 426.381641][ T658] oom_kill_process.cold+0x10/0x15 [ 426.386744][ T658] out_of_memory+0x79a/0x1280 [ 426.391424][ T658] ? lock_downgrade+0x880/0x880 [ 426.396264][ T658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.402508][ T658] ? oom_killer_disable+0x280/0x280 [ 426.407695][ T658] ? find_held_lock+0x35/0x130 [ 426.412459][ T658] mem_cgroup_out_of_memory+0x1ca/0x230 [ 426.417994][ T658] ? memcg_event_wake+0x230/0x230 [ 426.423115][ T658] ? do_raw_spin_unlock+0x57/0x270 [ 426.428207][ T658] ? _raw_spin_unlock+0x2d/0x50 [ 426.433039][ T658] try_charge+0x118d/0x1790 [ 426.437539][ T658] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 426.443082][ T658] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 426.448627][ T658] ? find_held_lock+0x35/0x130 [ 426.453464][ T658] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 426.458995][ T658] __memcg_kmem_charge_memcg+0x7c/0x130 [ 426.464523][ T658] ? memcg_kmem_put_cache+0xb0/0xb0 [ 426.469704][ T658] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 426.475355][ T658] __memcg_kmem_charge+0x136/0x300 [ 426.480462][ T658] __alloc_pages_nodemask+0x437/0x7e0 [ 426.485935][ T658] ? free_transhuge_page+0x230/0x310 [ 426.491211][ T658] ? __alloc_pages_slowpath+0x2900/0x2900 [ 426.496920][ T658] ? __put_compound_page+0x96/0xe0 [ 426.502014][ T658] ? put_page+0xe7/0x130 [ 426.506239][ T658] ? do_huge_pmd_anonymous_page+0x420/0x1730 [ 426.512208][ T658] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 426.518435][ T658] alloc_pages_current+0x107/0x210 [ 426.523529][ T658] pte_alloc_one+0x1b/0x1a0 [ 426.528013][ T658] __pte_alloc+0x20/0x310 [ 426.532332][ T658] __handle_mm_fault+0x3391/0x3ec0 [ 426.537523][ T658] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 426.543246][ T658] ? find_held_lock+0x35/0x130 [ 426.548004][ T658] ? handle_mm_fault+0x322/0xb30 [ 426.552940][ T658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 426.559171][ T658] ? kasan_check_read+0x11/0x20 [ 426.564015][ T658] handle_mm_fault+0x43f/0xb30 [ 426.568772][ T658] __do_page_fault+0x5ef/0xda0 [ 426.573533][ T658] do_page_fault+0x71/0x581 [ 426.578043][ T658] ? page_fault+0x8/0x30 [ 426.582266][ T658] page_fault+0x1e/0x30 [ 426.586405][ T658] RIP: 0033:0x40050c [ 426.590289][ T658] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 e9 4b 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 426.609895][ T658] RSP: 002b:00007ffcbdbed750 EFLAGS: 00010206 [ 426.615950][ T658] RAX: 0000000000000002 RBX: 000000000073c900 RCX: 0000000020000080 [ 426.623906][ T658] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 426.631860][ T658] RBP: 000000000073c900 R08: 0000000000000000 R09: 0000000000000000 [ 426.639828][ T658] R10: 00007ffcbdbed850 R11: 0000000000000246 R12: fffffffffffffffe [ 426.647780][ T658] R13: 0000000000068335 R14: 00000000000003e8 R15: 000000000073bf0c [ 426.657781][ T658] memory: usage 307200kB, limit 307200kB, failcnt 850 [ 426.664694][ T658] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 426.672271][ T658] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 426.679287][ T658] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0480398d5375000031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 426.700473][ T658] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=658,uid=0 [ 426.735362][ T658] Memory cgroup out of memory: Killed process 658 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB [ 426.765789][ T1045] oom_reaper: reaped process 658 (syz-executor.2), now anon-rss:0kB, file-rss:34824kB, shmem-rss:0kB 11:09:35 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x8) shutdown(r0, 0x1) [ 426.834948][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.840871][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:09:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375020031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:35 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) [ 426.954752][ T743] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 11:09:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='lp\x00S\xd4\xa4}4\x1a:z\xa3\xc8\x80\xce\xfe_w\x9a\xb2\xa3{Y\x16\x80\xb7\xa9\xfe&\\y\xae\xa8\x83\xc1d\xd5\\\x05\x9cMm\xd4\x94\x89U\x11\n`\xae\x7f5\xe4\bAC\xcb\x1d\x8fU&\x84U\fk\xba\xca~b\xc8\xe2\xeb\xb4\xb8\xd3\x91Rfm\b\xb4\xe0\xe6\x1a\x87\x89g\xa7\xce\x1a\xb8\xc3\xf0\xbf\xa3\x98\x04Hm\x98k\xd6w\x11\xaa}\xb0\x87\t\xdc]\'m\x8e\v%4F\xa4n\x16l\xfa\x7f\x86\xf0@\xd3\x84\x81v\xff\xbc\x13\xfb\x89\xe1fx\xfco\x8bI\xf6\xb9F\x00\xda=/\x03B\x9f0#\n{\xb7B\xf3\xc6\xd1L\xb9X#\xf6\x81\x81p\xbd\x05\x17\x019L\x98\xf9\xa5T', 0xb4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 427.000140][ T743] CPU: 1 PID: 743 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 427.009180][ T743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.009186][ T743] Call Trace: [ 427.009205][ T743] dump_stack+0x172/0x1f0 [ 427.009224][ T743] dump_header+0x10f/0xba6 [ 427.009242][ T743] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 427.009256][ T743] ? ___ratelimit+0x60/0x595 [ 427.009270][ T743] ? do_raw_spin_unlock+0x57/0x270 [ 427.009286][ T743] oom_kill_process.cold+0x10/0x15 [ 427.009303][ T743] out_of_memory+0x79a/0x1280 [ 427.056560][ T743] ? lock_downgrade+0x880/0x880 [ 427.061413][ T743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.067656][ T743] ? oom_killer_disable+0x280/0x280 [ 427.072871][ T743] ? find_held_lock+0x35/0x130 [ 427.077640][ T743] mem_cgroup_out_of_memory+0x1ca/0x230 [ 427.083179][ T743] ? memcg_event_wake+0x230/0x230 [ 427.088200][ T743] ? do_raw_spin_unlock+0x57/0x270 [ 427.093299][ T743] ? _raw_spin_unlock+0x2d/0x50 [ 427.098139][ T743] try_charge+0x118d/0x1790 [ 427.102637][ T743] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 427.108168][ T743] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 427.113698][ T743] ? find_held_lock+0x35/0x130 [ 427.118447][ T743] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 427.123990][ T743] __memcg_kmem_charge_memcg+0x7c/0x130 [ 427.129532][ T743] ? memcg_kmem_put_cache+0xb0/0xb0 [ 427.134732][ T743] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 427.140268][ T743] __memcg_kmem_charge+0x136/0x300 [ 427.145468][ T743] __alloc_pages_nodemask+0x437/0x7e0 [ 427.150824][ T743] ? free_transhuge_page+0x230/0x310 [ 427.156105][ T743] ? __alloc_pages_slowpath+0x2900/0x2900 [ 427.161808][ T743] ? __put_compound_page+0x96/0xe0 [ 427.166923][ T743] ? put_page+0xe7/0x130 [ 427.171153][ T743] ? do_huge_pmd_anonymous_page+0x420/0x1730 [ 427.177118][ T743] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 427.183352][ T743] alloc_pages_current+0x107/0x210 [ 427.188456][ T743] pte_alloc_one+0x1b/0x1a0 [ 427.192945][ T743] __pte_alloc+0x20/0x310 [ 427.197263][ T743] __handle_mm_fault+0x3391/0x3ec0 [ 427.202368][ T743] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 427.207912][ T743] ? find_held_lock+0x35/0x130 [ 427.212660][ T743] ? handle_mm_fault+0x322/0xb30 [ 427.217591][ T743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.223821][ T743] ? kasan_check_read+0x11/0x20 [ 427.228671][ T743] handle_mm_fault+0x43f/0xb30 [ 427.233426][ T743] __do_page_fault+0x5ef/0xda0 [ 427.238186][ T743] do_page_fault+0x71/0x581 [ 427.242673][ T743] ? page_fault+0x8/0x30 [ 427.246903][ T743] page_fault+0x1e/0x30 [ 427.251039][ T743] RIP: 0033:0x40050c [ 427.254920][ T743] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 e9 4b 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 427.274611][ T743] RSP: 002b:00007ffcbdbed750 EFLAGS: 00010206 [ 427.280671][ T743] RAX: 0000000000000002 RBX: 000000000073c900 RCX: 0000000020000080 [ 427.288626][ T743] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 427.296679][ T743] RBP: 000000000073c900 R08: 0000000000000000 R09: 0000000000000000 [ 427.304634][ T743] R10: 00007ffcbdbed850 R11: 0000000000000246 R12: fffffffffffffffe [ 427.312591][ T743] R13: 00000000000685a0 R14: 00000000000003e8 R15: 000000000073bf0c [ 427.403157][ T743] memory: usage 307200kB, limit 307200kB, failcnt 876 [ 427.415072][ T743] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 427.422798][ T743] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375040031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 427.442760][ T743] Memory cgroup stats for /syz2: cache:120KB rss:176KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB [ 427.482445][ T743] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=743,uid=0 11:09:36 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9) shutdown(r0, 0x1) [ 427.530947][ T743] Memory cgroup out of memory: Killed process 743 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB [ 427.559308][ T1045] oom_reaper: reaped process 743 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 11:09:36 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(0x0, &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 427.659526][ T841] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 427.685614][ T841] CPU: 1 PID: 841 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 427.694573][ T841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.704631][ T841] Call Trace: [ 427.708369][ T841] dump_stack+0x172/0x1f0 [ 427.712691][ T841] dump_header+0x10f/0xba6 [ 427.717096][ T841] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 427.722886][ T841] ? ___ratelimit+0x60/0x595 [ 427.727464][ T841] ? do_raw_spin_unlock+0x57/0x270 [ 427.732561][ T841] oom_kill_process.cold+0x10/0x15 [ 427.737670][ T841] out_of_memory+0x79a/0x1280 [ 427.742343][ T841] ? lock_downgrade+0x880/0x880 [ 427.751413][ T841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.757644][ T841] ? oom_killer_disable+0x280/0x280 [ 427.762825][ T841] ? find_held_lock+0x35/0x130 [ 427.767582][ T841] mem_cgroup_out_of_memory+0x1ca/0x230 [ 427.773113][ T841] ? memcg_event_wake+0x230/0x230 [ 427.778127][ T841] ? do_raw_spin_unlock+0x57/0x270 [ 427.783223][ T841] ? _raw_spin_unlock+0x2d/0x50 [ 427.788064][ T841] try_charge+0x118d/0x1790 [ 427.792559][ T841] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 427.798099][ T841] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 427.803630][ T841] ? find_held_lock+0x35/0x130 [ 427.808380][ T841] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 427.813932][ T841] __memcg_kmem_charge_memcg+0x7c/0x130 [ 427.819459][ T841] ? memcg_kmem_put_cache+0xb0/0xb0 [ 427.824645][ T841] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 427.830178][ T841] __memcg_kmem_charge+0x136/0x300 [ 427.835280][ T841] __alloc_pages_nodemask+0x437/0x7e0 [ 427.840640][ T841] ? free_transhuge_page+0x230/0x310 [ 427.845913][ T841] ? __alloc_pages_slowpath+0x2900/0x2900 [ 427.851615][ T841] ? __put_compound_page+0x96/0xe0 [ 427.856712][ T841] ? put_page+0xe7/0x130 [ 427.860941][ T841] ? do_huge_pmd_anonymous_page+0x420/0x1730 [ 427.866914][ T841] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 427.873153][ T841] alloc_pages_current+0x107/0x210 [ 427.878254][ T841] pte_alloc_one+0x1b/0x1a0 [ 427.882744][ T841] __pte_alloc+0x20/0x310 [ 427.887062][ T841] __handle_mm_fault+0x3391/0x3ec0 [ 427.892162][ T841] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 427.897692][ T841] ? find_held_lock+0x35/0x130 [ 427.902442][ T841] ? handle_mm_fault+0x322/0xb30 [ 427.907375][ T841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 427.913603][ T841] ? kasan_check_read+0x11/0x20 [ 427.918445][ T841] handle_mm_fault+0x43f/0xb30 [ 427.923200][ T841] __do_page_fault+0x5ef/0xda0 [ 427.927962][ T841] do_page_fault+0x71/0x581 [ 427.932458][ T841] ? page_fault+0x8/0x30 [ 427.936686][ T841] page_fault+0x1e/0x30 [ 427.940827][ T841] RIP: 0033:0x40050c [ 427.944707][ T841] Code: 01 e9 cd 01 00 00 48 8b 44 24 10 48 0b 44 24 28 75 20 48 8b 14 24 48 8b 7c 24 20 be 02 00 00 00 e8 e9 4b 00 00 48 8b 4c 24 08 <66> 89 01 e9 a1 01 00 00 48 8b 44 24 08 48 8b 14 24 be 02 00 00 00 [ 427.964297][ T841] RSP: 002b:00007ffcbdbed750 EFLAGS: 00010206 [ 427.970358][ T841] RAX: 0000000000000002 RBX: 000000000073c900 RCX: 0000000020000080 [ 427.978315][ T841] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 427.986286][ T841] RBP: 000000000073c900 R08: 0000000000000000 R09: 0000000000000000 [ 427.994257][ T841] R10: 00007ffcbdbed850 R11: 0000000000000246 R12: fffffffffffffffe [ 428.002221][ T841] R13: 0000000000068881 R14: 00000000000003e8 R15: 000000000073bf0c 11:09:36 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375080031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 428.022474][ T841] memory: usage 307188kB, limit 307200kB, failcnt 892 [ 428.039210][ T841] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:36 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 428.067714][ T841] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 428.077738][ T841] Memory cgroup stats for /syz2: cache:120KB rss:176KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:132KB inactive_file:0KB active_file:0KB unevictable:0KB [ 428.099028][ T841] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=841,uid=0 11:09:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 428.134991][ T841] Memory cgroup out of memory: Killed process 841 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB [ 428.173954][ T1045] oom_reaper: reaped process 841 (syz-executor.2), now anon-rss:0kB, file-rss:34820kB, shmem-rss:0kB 11:09:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:37 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xa) shutdown(r0, 0x1) 11:09:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d53750a0031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 428.450978][ T891] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 428.509206][ T891] CPU: 1 PID: 891 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 428.518175][ T891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.528248][ T891] Call Trace: [ 428.531547][ T891] dump_stack+0x172/0x1f0 [ 428.535905][ T891] dump_header+0x10f/0xba6 [ 428.540898][ T891] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 428.546704][ T891] ? ___ratelimit+0x60/0x595 [ 428.546727][ T891] ? do_raw_spin_unlock+0x57/0x270 [ 428.546747][ T891] oom_kill_process.cold+0x10/0x15 [ 428.546763][ T891] out_of_memory+0x79a/0x1280 [ 428.546781][ T891] ? lock_downgrade+0x880/0x880 [ 428.546795][ T891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.546812][ T891] ? oom_killer_disable+0x280/0x280 [ 428.546824][ T891] ? find_held_lock+0x35/0x130 [ 428.546848][ T891] mem_cgroup_out_of_memory+0x1ca/0x230 [ 428.546860][ T891] ? memcg_event_wake+0x230/0x230 [ 428.546877][ T891] ? do_raw_spin_unlock+0x57/0x270 [ 428.546896][ T891] ? _raw_spin_unlock+0x2d/0x50 [ 428.607787][ T891] try_charge+0x118d/0x1790 [ 428.612290][ T891] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 428.617831][ T891] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 428.623381][ T891] ? find_held_lock+0x35/0x130 [ 428.628158][ T891] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 428.633733][ T891] __memcg_kmem_charge_memcg+0x7c/0x130 [ 428.639281][ T891] ? memcg_kmem_put_cache+0xb0/0xb0 [ 428.644489][ T891] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 428.650041][ T891] __memcg_kmem_charge+0x136/0x300 11:09:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 428.655169][ T891] __alloc_pages_nodemask+0x437/0x7e0 [ 428.660545][ T891] ? is_bpf_text_address+0xac/0x170 [ 428.665758][ T891] ? __alloc_pages_slowpath+0x2900/0x2900 [ 428.671491][ T891] ? lock_downgrade+0x880/0x880 [ 428.676342][ T891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.682599][ T891] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 428.688935][ T891] alloc_pages_current+0x107/0x210 [ 428.694060][ T891] pte_alloc_one+0x1b/0x1a0 [ 428.698571][ T891] do_huge_pmd_anonymous_page+0x9f6/0x1730 [ 428.704384][ T891] ? __lock_acquire+0x55d/0x4710 [ 428.709329][ T891] ? __thp_get_unmapped_area+0x190/0x190 [ 428.714960][ T891] ? pmd_val+0x100/0x100 [ 428.719201][ T891] __handle_mm_fault+0x2d5e/0x3ec0 [ 428.724320][ T891] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 428.729860][ T891] ? find_held_lock+0x35/0x130 [ 428.734633][ T891] ? handle_mm_fault+0x322/0xb30 [ 428.739678][ T891] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.746927][ T891] ? kasan_check_read+0x11/0x20 [ 428.753285][ T891] handle_mm_fault+0x43f/0xb30 [ 428.760923][ T891] __do_page_fault+0x5ef/0xda0 [ 428.765688][ T891] do_page_fault+0x71/0x581 [ 428.770188][ T891] page_fault+0x1e/0x30 [ 428.774440][ T891] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20 [ 428.781121][ T891] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 1f 00 c3 0f 1f 80 00 00 00 00 0f 1f 00 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 1f 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 [ 428.800725][ T891] RSP: 0018:ffff88801c8f7a00 EFLAGS: 00010206 [ 428.806774][ T891] RAX: 0000000000000000 RBX: 0000000000000590 RCX: 0000000000000590 [ 428.814732][ T891] RDX: 0000000000000590 RSI: 0000000020d7cfcb RDI: ffff888054866230 [ 428.822689][ T891] RBP: ffff88801c8f7a38 R08: ffffed100a90ccf8 R09: 0000000000000000 [ 428.830651][ T891] R10: ffffed100a90ccf7 R11: ffff8880548667bf R12: 0000000020d7cfcb [ 428.838606][ T891] R13: ffff888054866230 R14: 0000000020d7d55b R15: 00007ffffffff000 [ 428.846588][ T891] ? copyin+0xe2/0x100 [ 428.850648][ T891] _copy_from_iter_full+0x20f/0x930 [ 428.855833][ T891] ? __phys_addr_symbol+0x30/0x70 [ 428.860844][ T891] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 428.866548][ T891] ? __check_object_size+0x3d/0x42f [ 428.871739][ T891] tcp_sendmsg_locked+0x1b24/0x34b0 [ 428.876922][ T891] ? lock_sock_nested+0xac/0x120 [ 428.881862][ T891] ? tcp_sendpage+0x60/0x60 [ 428.886353][ T891] ? trace_hardirqs_on+0x67/0x230 [ 428.891449][ T891] ? lock_sock_nested+0x9a/0x120 [ 428.896376][ T891] ? __local_bh_enable_ip+0x15a/0x270 [ 428.901741][ T891] tcp_sendmsg+0x30/0x50 [ 428.906004][ T891] inet_sendmsg+0x147/0x5d0 [ 428.910494][ T891] ? ipip_gro_receive+0x100/0x100 [ 428.915504][ T891] sock_sendmsg+0xdd/0x130 [ 428.919907][ T891] __sys_sendto+0x262/0x380 [ 428.924486][ T891] ? __ia32_sys_getpeername+0xb0/0xb0 [ 428.929873][ T891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 428.936102][ T891] ? put_timespec64+0xda/0x140 [ 428.940851][ T891] ? nsecs_to_jiffies+0x30/0x30 [ 428.945716][ T891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 428.951160][ T891] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 428.956605][ T891] ? do_syscall_64+0x26/0x610 [ 428.961267][ T891] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.967320][ T891] __x64_sys_sendto+0xe1/0x1a0 [ 428.972072][ T891] do_syscall_64+0x103/0x610 [ 428.976650][ T891] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.982525][ T891] RIP: 0033:0x457e29 [ 428.986407][ T891] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 11:09:37 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 429.005996][ T891] RSP: 002b:00007fe3aebaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 429.014388][ T891] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 429.022343][ T891] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 429.030308][ T891] RBP: 000000000073bf00 R08: 0000000000000000 R09: 000000000000000a [ 429.038263][ T891] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3aebaf6d4 [ 429.046231][ T891] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff 11:09:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(0x0, &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375100031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 429.153313][ T891] memory: usage 307168kB, limit 307200kB, failcnt 924 [ 429.165187][ T891] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 429.223001][ T891] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 429.248726][ T891] Memory cgroup stats for /syz2: cache:120KB rss:176KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:136KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 429.311159][ T891] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=883,uid=0 [ 429.337748][ T891] Memory cgroup out of memory: Killed process 883 (syz-executor.2) total-vm:72444kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB [ 429.355308][ T1045] oom_reaper: reaped process 883 (syz-executor.2), now anon-rss:0kB, file-rss:34708kB, shmem-rss:0kB 11:09:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xe) shutdown(r0, 0x1) 11:09:38 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) 11:09:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375110031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 429.612271][ T1041] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 11:09:38 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:38 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) [ 429.691208][ T1041] CPU: 1 PID: 1041 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 429.700278][ T1041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 429.710813][ T1041] Call Trace: [ 429.714109][ T1041] dump_stack+0x172/0x1f0 [ 429.718455][ T1041] dump_header+0x10f/0xba6 [ 429.722882][ T1041] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 429.728726][ T1041] ? ___ratelimit+0x60/0x595 [ 429.733323][ T1041] ? do_raw_spin_unlock+0x57/0x270 11:09:38 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 429.738447][ T1041] oom_kill_process.cold+0x10/0x15 [ 429.747178][ T1041] out_of_memory+0x79a/0x1280 [ 429.752308][ T1041] ? lock_downgrade+0x880/0x880 [ 429.757167][ T1041] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 429.763887][ T1041] ? oom_killer_disable+0x280/0x280 [ 429.769088][ T1041] ? find_held_lock+0x35/0x130 [ 429.773868][ T1041] mem_cgroup_out_of_memory+0x1ca/0x230 [ 429.779415][ T1041] ? memcg_event_wake+0x230/0x230 [ 429.779438][ T1041] ? do_raw_spin_unlock+0x57/0x270 [ 429.779459][ T1041] ? _raw_spin_unlock+0x2d/0x50 [ 429.794401][ T1041] try_charge+0x118d/0x1790 [ 429.798919][ T1041] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 429.804465][ T1041] ? mark_held_locks+0xa4/0xf0 [ 429.804483][ T1041] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 429.804500][ T1041] ? __sk_mem_raise_allocated+0x557/0x1390 [ 429.804513][ T1041] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 429.804528][ T1041] ? lockdep_hardirqs_on+0x418/0x5d0 [ 429.804544][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 429.804562][ T1041] mem_cgroup_charge_skmem+0x12f/0x280 [ 429.804576][ T1041] ? mem_cgroup_sk_free+0x90/0x90 [ 429.804590][ T1041] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 429.804603][ T1041] ? iov_iter_advance+0x295/0xfd0 [ 429.804632][ T1041] __sk_mem_raise_allocated+0x557/0x1390 [ 429.804644][ T1041] ? alloc_pages_current+0x10f/0x210 [ 429.804665][ T1041] __sk_mem_schedule+0x6d/0xe0 [ 429.804677][ T1041] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 429.804697][ T1041] tcp_sendmsg_locked+0x1992/0x34b0 [ 429.804726][ T1041] ? tcp_sendpage+0x60/0x60 [ 429.804742][ T1041] ? trace_hardirqs_on+0x67/0x230 [ 429.804753][ T1041] ? lock_sock_nested+0x9a/0x120 [ 429.804772][ T1041] ? __local_bh_enable_ip+0x15a/0x270 [ 429.904885][ T1041] tcp_sendmsg+0x30/0x50 [ 429.909124][ T1041] inet_sendmsg+0x147/0x5d0 [ 429.913622][ T1041] ? ipip_gro_receive+0x100/0x100 [ 429.918641][ T1041] sock_sendmsg+0xdd/0x130 [ 429.923058][ T1041] __sys_sendto+0x262/0x380 [ 429.927553][ T1041] ? __ia32_sys_getpeername+0xb0/0xb0 [ 429.932928][ T1041] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 429.939240][ T1041] ? put_timespec64+0xda/0x140 [ 429.943990][ T1041] ? nsecs_to_jiffies+0x30/0x30 [ 429.948837][ T1041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.954284][ T1041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 429.959734][ T1041] ? do_syscall_64+0x26/0x610 [ 429.964398][ T1041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.970453][ T1041] __x64_sys_sendto+0xe1/0x1a0 [ 429.975210][ T1041] do_syscall_64+0x103/0x610 [ 429.979792][ T1041] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 429.985671][ T1041] RIP: 0033:0x457e29 [ 429.989550][ T1041] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 430.009139][ T1041] RSP: 002b:00007fe3aebaec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 430.017545][ T1041] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 430.025500][ T1041] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 430.033455][ T1041] RBP: 000000000073bf00 R08: 0000000000000000 R09: 000000000000000e [ 430.041413][ T1041] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe3aebaf6d4 [ 430.049370][ T1041] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff 11:09:38 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375300031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:39 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 430.238493][ T1041] memory: usage 307200kB, limit 307200kB, failcnt 974 [ 430.246724][ T1041] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 430.254768][ T1041] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 430.262014][ T1041] Memory cgroup stats for /syz2: cache:120KB rss:176KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:144KB inactive_file:0KB active_file:0KB unevictable:0KB [ 430.346737][ T1041] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1028,uid=0 [ 430.372901][ T1041] Memory cgroup out of memory: Killed process 1028 (syz-executor.2) total-vm:72576kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB 11:09:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x10) shutdown(r0, 0x1) 11:09:39 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:39 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:39 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375540031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 430.395001][ T1045] oom_reaper: reaped process 1028 (syz-executor.2), now anon-rss:0kB, file-rss:33856kB, shmem-rss:0kB 11:09:39 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:39 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) [ 430.624046][ T1197] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 11:09:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375620031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:39 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 430.690272][ T1197] CPU: 1 PID: 1197 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 430.699320][ T1197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 430.709379][ T1197] Call Trace: [ 430.712675][ T1197] dump_stack+0x172/0x1f0 [ 430.717013][ T1197] dump_header+0x10f/0xba6 [ 430.721440][ T1197] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 430.727247][ T1197] ? ___ratelimit+0x60/0x595 [ 430.731832][ T1197] ? do_raw_spin_unlock+0x57/0x270 [ 430.736941][ T1197] oom_kill_process.cold+0x10/0x15 [ 430.736959][ T1197] out_of_memory+0x79a/0x1280 [ 430.736976][ T1197] ? lock_downgrade+0x880/0x880 [ 430.736990][ T1197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.737009][ T1197] ? oom_killer_disable+0x280/0x280 [ 430.756044][ T1197] ? find_held_lock+0x35/0x130 [ 430.756078][ T1197] mem_cgroup_out_of_memory+0x1ca/0x230 [ 430.756092][ T1197] ? memcg_event_wake+0x230/0x230 [ 430.756114][ T1197] ? do_raw_spin_unlock+0x57/0x270 [ 430.756132][ T1197] ? _raw_spin_unlock+0x2d/0x50 [ 430.756151][ T1197] try_charge+0x118d/0x1790 [ 430.756172][ T1197] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 430.756189][ T1197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.756208][ T1197] ? kasan_check_read+0x11/0x20 [ 430.756229][ T1197] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 430.756250][ T1197] mem_cgroup_try_charge+0x24d/0x5e0 [ 430.788077][ T1197] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 430.788098][ T1197] __handle_mm_fault+0x1e1f/0x3ec0 [ 430.788124][ T1197] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 430.841386][ T1197] ? find_held_lock+0x35/0x130 [ 430.846160][ T1197] ? handle_mm_fault+0x322/0xb30 [ 430.851116][ T1197] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 430.857360][ T1197] ? kasan_check_read+0x11/0x20 [ 430.862204][ T1197] handle_mm_fault+0x43f/0xb30 [ 430.866974][ T1197] __do_page_fault+0x5ef/0xda0 [ 430.871734][ T1197] do_page_fault+0x71/0x581 [ 430.876223][ T1197] ? page_fault+0x8/0x30 [ 430.880452][ T1197] page_fault+0x1e/0x30 [ 430.884595][ T1197] RIP: 0033:0x40f98f [ 430.888474][ T1197] Code: 0f 84 c8 02 00 00 48 83 bd 78 ff ff ff 00 0f 84 f9 04 00 00 48 8b 95 68 ff ff ff 44 89 95 38 ff ff ff 4c 8d ac 10 00 f7 ff ff <49> 89 85 90 06 00 00 49 8d 85 10 03 00 00 49 89 95 98 06 00 00 41 [ 430.908183][ T1197] RSP: 002b:00007ffcbdbed6a0 EFLAGS: 00010206 [ 430.914232][ T1197] RAX: 00007fe3aeb6e000 RBX: 0000000000020000 RCX: 0000000000457e7a [ 430.922193][ T1197] RDX: 0000000000021000 RSI: 0000000000021000 RDI: 0000000000000000 [ 430.930150][ T1197] RBP: 00007ffcbdbed780 R08: ffffffffffffffff R09: 0000000000000000 11:09:39 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 430.938106][ T1197] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcbdbed860 [ 430.946064][ T1197] R13: 00007fe3aeb8e700 R14: 0000000000000002 R15: 000000000073bfac 11:09:39 executing program 0: bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 430.994583][ T1197] memory: usage 307204kB, limit 307200kB, failcnt 1017 [ 431.002278][ T1197] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 431.010436][ T1197] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 431.034405][ T1197] Memory cgroup stats for /syz2: cache:120KB rss:176KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:136KB inactive_file:0KB active_file:0KB unevictable:0KB [ 431.092934][ T1197] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1197,uid=0 [ 431.110186][ T1197] Memory cgroup out of memory: Killed process 1197 (syz-executor.2) total-vm:72576kB, anon-rss:88kB, file-rss:34816kB, shmem-rss:0kB [ 431.130814][ T1045] oom_reaper: reaped process 1197 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 11:09:40 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x11) shutdown(r0, 0x1) 11:09:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) 11:09:40 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 431.200826][ T399] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 431.220028][ T399] CPU: 1 PID: 399 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 431.229066][ T399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 431.239118][ T399] Call Trace: [ 431.242403][ T399] dump_stack+0x172/0x1f0 [ 431.246728][ T399] dump_header+0x10f/0xba6 [ 431.251136][ T399] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 431.256930][ T399] ? ___ratelimit+0x60/0x595 [ 431.261514][ T399] ? do_raw_spin_unlock+0x57/0x270 [ 431.266614][ T399] oom_kill_process.cold+0x10/0x15 [ 431.271716][ T399] out_of_memory+0x79a/0x1280 [ 431.276384][ T399] ? lock_downgrade+0x880/0x880 [ 431.281231][ T399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.287469][ T399] ? oom_killer_disable+0x280/0x280 [ 431.292667][ T399] ? find_held_lock+0x35/0x130 [ 431.297428][ T399] mem_cgroup_out_of_memory+0x1ca/0x230 [ 431.302956][ T399] ? memcg_event_wake+0x230/0x230 [ 431.307973][ T399] ? do_raw_spin_unlock+0x57/0x270 [ 431.313076][ T399] ? _raw_spin_unlock+0x2d/0x50 [ 431.318040][ T399] try_charge+0x118d/0x1790 [ 431.322537][ T399] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 431.328074][ T399] ? rcu_read_lock_sched_held+0x110/0x130 [ 431.333778][ T399] ? __alloc_pages_nodemask+0x599/0x7e0 [ 431.339306][ T399] ? _raw_spin_unlock+0x2d/0x50 [ 431.344148][ T399] __memcg_kmem_charge_memcg+0x7c/0x130 [ 431.349689][ T399] ? memcg_kmem_put_cache+0xb0/0xb0 [ 431.354870][ T399] ? cache_grow_begin+0x594/0x860 [ 431.359881][ T399] ? lockdep_hardirqs_on+0x418/0x5d0 [ 431.365152][ T399] ? trace_hardirqs_on+0x67/0x230 [ 431.370164][ T399] cache_grow_begin+0x5c0/0x860 [ 431.375005][ T399] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 431.381227][ T399] ? __cpuset_node_allowed+0x136/0x540 [ 431.386677][ T399] fallback_alloc+0x1fd/0x2d0 [ 431.391349][ T399] ____cache_alloc_node+0x1be/0x1e0 [ 431.396530][ T399] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.402759][ T399] kmem_cache_alloc+0x1e8/0x6f0 [ 431.407596][ T399] ? inet_create+0x2f4/0xe10 [ 431.412195][ T399] sk_prot_alloc+0x67/0x2e0 [ 431.416681][ T399] ? lock_downgrade+0x880/0x880 [ 431.421520][ T399] sk_alloc+0x39/0xf70 [ 431.425580][ T399] inet_create+0x36a/0xe10 [ 431.430001][ T399] __sock_create+0x3e6/0x750 [ 431.434585][ T399] __sys_socket+0x103/0x220 [ 431.439074][ T399] ? move_addr_to_kernel+0x80/0x80 [ 431.444171][ T399] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 431.449614][ T399] ? do_syscall_64+0x26/0x610 [ 431.454295][ T399] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.460346][ T399] ? do_syscall_64+0x26/0x610 [ 431.465016][ T399] __x64_sys_socket+0x73/0xb0 [ 431.469679][ T399] do_syscall_64+0x103/0x610 [ 431.474266][ T399] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 431.480148][ T399] RIP: 0033:0x45a997 [ 431.484025][ T399] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 431.503607][ T399] RSP: 002b:00007ffcbdbed248 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 431.512007][ T399] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a997 [ 431.519961][ T399] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 431.527920][ T399] RBP: 0000000000000003 R08: 0000000000000000 R09: 000000000000000a [ 431.535876][ T399] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 431.543829][ T399] R13: 00000000000693a5 R14: 000000000000000c R15: 0000000000000002 [ 431.576160][ T399] memory: usage 309436kB, limit 307200kB, failcnt 1229 [ 431.583125][ T399] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 431.600447][ T399] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:09:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 431.613123][ T399] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:44KB inactive_file:0KB active_file:0KB unevictable:0KB 11:09:40 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000a31f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:40 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 431.671174][ T399] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=399,uid=0 [ 431.708108][ T399] Memory cgroup out of memory: Killed process 399 (syz-executor.2) total-vm:72312kB, anon-rss:88kB, file-rss:35712kB, shmem-rss:0kB 11:09:40 executing program 0: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:40 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x10000000002, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x20001e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x0) [ 431.728619][ T1045] oom_reaper: reaped process 399 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 11:09:40 executing program 5: r0 = socket$inet(0x2, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375001131f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:40 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 432.425002][ T1365] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 432.433680][ T1365] FAT-fs (loop4): Filesystem has been set read-only [ 432.448658][ T1365] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) 11:09:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x17) shutdown(r0, 0x1) 11:09:41 executing program 3: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd) 11:09:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375003031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:41 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:09:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x60) shutdown(r0, 0x1) 11:09:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375005431f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 432.739457][ T1415] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:09:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 432.834737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 432.840571][ C0] protocol 88fb is buggy, dev hsr_slave_1 11:09:41 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:09:41 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:41 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375006231f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 432.995269][ T1534] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 433.154330][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 433.154335][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 433.154386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 433.160144][ C1] protocol 88fb is buggy, dev hsr_slave_1 11:09:42 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:42 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:09:42 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 433.481388][ T1553] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 434.524044][ T1584] IPVS: ftp: loaded support on port[0] = 21 [ 434.579662][ T1584] chnl_net:caif_netlink_parms(): no params data found [ 434.607579][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.614722][ T1584] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.622248][ T1584] device bridge_slave_0 entered promiscuous mode [ 434.630216][ T1584] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.637393][ T1584] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.645258][ T1584] device bridge_slave_1 entered promiscuous mode [ 434.661068][ T1584] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 434.670899][ T1584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 434.686861][ T1584] team0: Port device team_slave_0 added [ 434.693454][ T1584] team0: Port device team_slave_1 added [ 434.766752][ T1584] device hsr_slave_0 entered promiscuous mode [ 434.814529][ T1584] device hsr_slave_1 entered promiscuous mode [ 434.861068][ T1584] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.868161][ T1584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.875511][ T1584] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.882546][ T1584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.914852][ T1584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.926984][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.935987][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.943465][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.951865][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 434.962953][ T1584] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.973234][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.981988][ T7418] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.989088][ T7418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.012887][ T1584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.023448][ T1584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.038052][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 435.046381][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.053395][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.061852][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 435.070608][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 435.078906][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.087100][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.096148][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.103579][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 435.124060][ T1584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.157049][ T1584] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 435.168946][ T1584] CPU: 0 PID: 1584 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 435.177963][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.188000][ T1584] Call Trace: [ 435.191285][ T1584] dump_stack+0x172/0x1f0 [ 435.195599][ T1584] dump_header+0x10f/0xba6 [ 435.199994][ T1584] ? task_will_free_mem+0x139/0x6e0 [ 435.205199][ T1584] out_of_memory.cold+0xf/0x18a [ 435.210047][ T1584] ? cgroup_file_notify+0x140/0x1b0 [ 435.215234][ T1584] ? oom_killer_disable+0x280/0x280 [ 435.220548][ T1584] ? cgroup_file_notify+0x140/0x1b0 [ 435.225743][ T1584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 435.231278][ T1584] ? memcg_event_wake+0x230/0x230 [ 435.236285][ T1584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 435.242070][ T1584] ? cgroup_file_notify+0x140/0x1b0 [ 435.247265][ T1584] memory_max_write+0x22f/0x390 [ 435.252112][ T1584] ? mem_cgroup_write+0x360/0x360 [ 435.257119][ T1584] ? lock_acquire+0x16f/0x3f0 [ 435.261776][ T1584] ? kernfs_fop_write+0x227/0x480 [ 435.266798][ T1584] cgroup_file_write+0x245/0x7a0 [ 435.271730][ T1584] ? mem_cgroup_write+0x360/0x360 [ 435.276745][ T1584] ? kill_css+0x380/0x380 [ 435.281054][ T1584] ? kill_css+0x380/0x380 [ 435.285374][ T1584] kernfs_fop_write+0x2ba/0x480 [ 435.290229][ T1584] __vfs_write+0x8d/0x110 [ 435.294552][ T1584] ? kernfs_fop_open+0xd90/0xd90 [ 435.299501][ T1584] vfs_write+0x20c/0x580 [ 435.303723][ T1584] ksys_write+0xea/0x1f0 [ 435.307956][ T1584] ? __ia32_sys_read+0xb0/0xb0 [ 435.312709][ T1584] ? do_syscall_64+0x26/0x610 [ 435.317366][ T1584] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.323407][ T1584] ? do_syscall_64+0x26/0x610 [ 435.328078][ T1584] __x64_sys_write+0x73/0xb0 [ 435.332668][ T1584] do_syscall_64+0x103/0x610 [ 435.337243][ T1584] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 435.343284][ T1584] RIP: 0033:0x411c50 [ 435.347178][ T1584] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 46 64 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 54 1a 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 435.366776][ T1584] RSP: 002b:00007ffc19236cd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 435.375186][ T1584] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000411c50 [ 435.383152][ T1584] RDX: 0000000000000009 RSI: 00007ffc19236d00 RDI: 0000000000000003 [ 435.391117][ T1584] RBP: 00007ffc19236d00 R08: 0000000000000000 R09: 0000000000000009 [ 435.399068][ T1584] R10: 0000000000000064 R11: 0000000000000246 R12: 00007ffc19237870 [ 435.407130][ T1584] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 435.416662][ T1584] memory: usage 309036kB, limit 307200kB, failcnt 1230 [ 435.423511][ T1584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.431334][ T1584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.438238][ T1584] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 435.459231][ T1584] Out of memory and no killable processes... [ 435.468736][ T1584] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 435.479192][ T1584] CPU: 0 PID: 1584 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 435.488199][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 435.498245][ T1584] Call Trace: [ 435.501521][ T1584] dump_stack+0x172/0x1f0 [ 435.505843][ T1584] dump_header+0x10f/0xba6 [ 435.510261][ T1584] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 435.516057][ T1584] ? ___ratelimit+0x60/0x595 [ 435.520646][ T1584] ? do_raw_spin_unlock+0x57/0x270 [ 435.525771][ T1584] oom_kill_process.cold+0x10/0x15 [ 435.530881][ T1584] out_of_memory+0x79a/0x1280 [ 435.535551][ T1584] ? lock_downgrade+0x880/0x880 [ 435.540378][ T1584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.546704][ T1584] ? oom_killer_disable+0x280/0x280 [ 435.551888][ T1584] ? find_held_lock+0x35/0x130 [ 435.556637][ T1584] mem_cgroup_out_of_memory+0x1ca/0x230 [ 435.562168][ T1584] ? memcg_event_wake+0x230/0x230 [ 435.567192][ T1584] ? do_raw_spin_unlock+0x57/0x270 [ 435.572399][ T1584] ? _raw_spin_unlock+0x2d/0x50 [ 435.577231][ T1584] try_charge+0x118d/0x1790 [ 435.581724][ T1584] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 435.587260][ T1584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.593509][ T1584] ? kasan_check_read+0x11/0x20 [ 435.598343][ T1584] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 435.603867][ T1584] mem_cgroup_try_charge+0x24d/0x5e0 [ 435.609161][ T1584] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 435.614792][ T1584] wp_page_copy+0x408/0x1740 [ 435.619376][ T1584] ? find_held_lock+0x35/0x130 [ 435.624162][ T1584] ? pmd_pfn+0x1d0/0x1d0 [ 435.628397][ T1584] ? lock_downgrade+0x880/0x880 [ 435.633235][ T1584] ? swp_swapcount+0x540/0x540 [ 435.637981][ T1584] ? kasan_check_read+0x11/0x20 [ 435.642915][ T1584] ? do_raw_spin_unlock+0x57/0x270 [ 435.648020][ T1584] do_wp_page+0x5d8/0x16c0 [ 435.652428][ T1584] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 435.657783][ T1584] __handle_mm_fault+0x22e8/0x3ec0 [ 435.662875][ T1584] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 435.668411][ T1584] ? find_held_lock+0x35/0x130 [ 435.673166][ T1584] ? handle_mm_fault+0x322/0xb30 [ 435.678101][ T1584] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 435.684434][ T1584] ? kasan_check_read+0x11/0x20 [ 435.689282][ T1584] handle_mm_fault+0x43f/0xb30 [ 435.694043][ T1584] __do_page_fault+0x5ef/0xda0 [ 435.698794][ T1584] do_page_fault+0x71/0x581 [ 435.703275][ T1584] ? page_fault+0x8/0x30 [ 435.707821][ T1584] page_fault+0x1e/0x30 [ 435.711996][ T1584] RIP: 0033:0x43f121 [ 435.715874][ T1584] Code: 8d 15 c3 5e 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 435.735458][ T1584] RSP: 002b:00007ffc192371e8 EFLAGS: 00010202 [ 435.741503][ T1584] RAX: 000000000070b0e8 RBX: 000000000070b160 RCX: 0000000000000066 [ 435.749460][ T1584] RDX: 0000000000000007 RSI: 00000000004c5d45 RDI: 000000000070b0e8 [ 435.757421][ T1584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 435.765378][ T1584] R10: 0000000000000064 R11: 0000000000000297 R12: 000000000070b0e8 [ 435.773336][ T1584] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 435.782034][ T1584] memory: usage 309036kB, limit 307200kB, failcnt 1238 [ 435.789909][ T1584] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.798175][ T1584] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 435.805090][ T1584] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 435.825899][ T1584] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1584,uid=0 [ 435.841275][ T1584] Memory cgroup out of memory: Killed process 1584 (syz-executor.2) total-vm:72316kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB [ 435.855533][ T1045] oom_reaper: reaped process 1584 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 11:09:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x1f4) shutdown(r0, 0x1) 11:09:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000231f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:45 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:09:45 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000431f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:45 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:45 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:45 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000831f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 438.288406][ T1732] IPVS: ftp: loaded support on port[0] = 21 [ 438.455342][ T1732] chnl_net:caif_netlink_parms(): no params data found [ 438.479078][ T7] device bridge_slave_1 left promiscuous mode [ 438.487296][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.549070][ T7] device bridge_slave_0 left promiscuous mode [ 438.555330][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.817123][ T7] device hsr_slave_1 left promiscuous mode [ 441.847604][ T7] device hsr_slave_0 left promiscuous mode [ 441.928998][ T7] team0 (unregistering): Port device team_slave_1 removed [ 441.943403][ T7] team0 (unregistering): Port device team_slave_0 removed [ 441.956188][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 442.012103][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 442.082008][ T7] bond0 (unregistering): Released all slaves [ 442.173386][ T1732] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.180534][ T1732] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.188195][ T1732] device bridge_slave_0 entered promiscuous mode [ 442.202253][ T1732] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.209680][ T1732] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.217427][ T1732] device bridge_slave_1 entered promiscuous mode [ 442.236905][ T1732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 442.246473][ T1732] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 442.264681][ T1732] team0: Port device team_slave_0 added [ 442.271068][ T1732] team0: Port device team_slave_1 added [ 442.326865][ T1732] device hsr_slave_0 entered promiscuous mode [ 442.394550][ T1732] device hsr_slave_1 entered promiscuous mode [ 442.481970][ T1732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.493282][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 442.502612][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.511015][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.521222][ T1732] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.566134][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 442.574901][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.583175][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.590249][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.597941][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 442.607450][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.616109][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.623206][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.631717][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.649274][ T1732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 442.660760][ T1732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.673936][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.682609][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.691078][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.699850][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.709023][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.725272][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.736279][ T1732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.808984][ T1732] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 442.819260][ T1732] CPU: 1 PID: 1732 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 442.828287][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.838343][ T1732] Call Trace: [ 442.841645][ T1732] dump_stack+0x172/0x1f0 [ 442.845983][ T1732] dump_header+0x10f/0xba6 [ 442.850400][ T1732] ? task_will_free_mem+0x139/0x6e0 [ 442.855610][ T1732] out_of_memory.cold+0xf/0x18a [ 442.860464][ T1732] ? cgroup_file_notify+0x140/0x1b0 [ 442.865667][ T1732] ? oom_killer_disable+0x280/0x280 [ 442.870869][ T1732] ? cgroup_file_notify+0x140/0x1b0 [ 442.876080][ T1732] mem_cgroup_out_of_memory+0x1ca/0x230 [ 442.881633][ T1732] ? memcg_event_wake+0x230/0x230 [ 442.886693][ T1732] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 442.892503][ T1732] ? cgroup_file_notify+0x140/0x1b0 [ 442.897720][ T1732] memory_max_write+0x22f/0x390 [ 442.902589][ T1732] ? mem_cgroup_write+0x360/0x360 [ 442.908055][ T1732] ? lock_acquire+0x16f/0x3f0 [ 442.912736][ T1732] ? kernfs_fop_write+0x227/0x480 [ 442.917770][ T1732] cgroup_file_write+0x245/0x7a0 [ 442.922712][ T1732] ? mem_cgroup_write+0x360/0x360 [ 442.927740][ T1732] ? kill_css+0x380/0x380 [ 442.932081][ T1732] ? kill_css+0x380/0x380 [ 442.936413][ T1732] kernfs_fop_write+0x2ba/0x480 [ 442.941274][ T1732] __vfs_write+0x8d/0x110 [ 442.945604][ T1732] ? kernfs_fop_open+0xd90/0xd90 [ 442.950558][ T1732] vfs_write+0x20c/0x580 [ 442.954812][ T1732] ksys_write+0xea/0x1f0 [ 442.959062][ T1732] ? __ia32_sys_read+0xb0/0xb0 [ 442.963826][ T1732] ? do_syscall_64+0x26/0x610 [ 442.968568][ T1732] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.974636][ T1732] ? do_syscall_64+0x26/0x610 [ 442.979324][ T1732] __x64_sys_write+0x73/0xb0 [ 442.983922][ T1732] do_syscall_64+0x103/0x610 [ 442.988520][ T1732] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.994428][ T1732] RIP: 0033:0x411c50 [ 442.998324][ T1732] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 46 64 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 54 1a 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 443.017928][ T1732] RSP: 002b:00007ffec0b445a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 443.026338][ T1732] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000411c50 [ 443.034361][ T1732] RDX: 0000000000000009 RSI: 00007ffec0b445d0 RDI: 0000000000000003 [ 443.042332][ T1732] RBP: 00007ffec0b445d0 R08: 0000000000000000 R09: 0000000000000009 [ 443.050307][ T1732] R10: 0000000000000064 R11: 0000000000000246 R12: 00007ffec0b45140 [ 443.058277][ T1732] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 443.073914][ T1732] memory: usage 308456kB, limit 307200kB, failcnt 1239 [ 443.081019][ T1732] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.088882][ T1732] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.096567][ T1732] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 443.117721][ T1732] Out of memory and no killable processes... [ 443.126377][ T1732] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 443.137387][ T1732] CPU: 1 PID: 1732 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 443.146406][ T1732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.156457][ T1732] Call Trace: [ 443.159755][ T1732] dump_stack+0x172/0x1f0 [ 443.164093][ T1732] dump_header+0x10f/0xba6 [ 443.168527][ T1732] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 443.174334][ T1732] ? ___ratelimit+0x60/0x595 [ 443.178927][ T1732] ? do_raw_spin_unlock+0x57/0x270 [ 443.184048][ T1732] oom_kill_process.cold+0x10/0x15 [ 443.189165][ T1732] out_of_memory+0x79a/0x1280 [ 443.193849][ T1732] ? lock_downgrade+0x880/0x880 [ 443.198703][ T1732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.204947][ T1732] ? oom_killer_disable+0x280/0x280 [ 443.210144][ T1732] ? find_held_lock+0x35/0x130 [ 443.214960][ T1732] mem_cgroup_out_of_memory+0x1ca/0x230 [ 443.220506][ T1732] ? memcg_event_wake+0x230/0x230 [ 443.225563][ T1732] ? do_raw_spin_unlock+0x57/0x270 [ 443.230681][ T1732] ? _raw_spin_unlock+0x2d/0x50 [ 443.235555][ T1732] try_charge+0x118d/0x1790 [ 443.240071][ T1732] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 443.245624][ T1732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.251869][ T1732] ? kasan_check_read+0x11/0x20 [ 443.256728][ T1732] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 443.262278][ T1732] mem_cgroup_try_charge+0x24d/0x5e0 [ 443.267577][ T1732] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 443.273212][ T1732] wp_page_copy+0x408/0x1740 [ 443.277804][ T1732] ? find_held_lock+0x35/0x130 [ 443.282579][ T1732] ? pmd_pfn+0x1d0/0x1d0 [ 443.286826][ T1732] ? lock_downgrade+0x880/0x880 [ 443.291675][ T1732] ? swp_swapcount+0x540/0x540 [ 443.296444][ T1732] ? kasan_check_read+0x11/0x20 [ 443.301294][ T1732] ? do_raw_spin_unlock+0x57/0x270 [ 443.306412][ T1732] do_wp_page+0x5d8/0x16c0 [ 443.310836][ T1732] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 443.316223][ T1732] __handle_mm_fault+0x22e8/0x3ec0 [ 443.321340][ T1732] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 443.326890][ T1732] ? find_held_lock+0x35/0x130 [ 443.331656][ T1732] ? handle_mm_fault+0x322/0xb30 [ 443.336608][ T1732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.342853][ T1732] ? kasan_check_read+0x11/0x20 [ 443.347710][ T1732] handle_mm_fault+0x43f/0xb30 [ 443.352481][ T1732] __do_page_fault+0x5ef/0xda0 [ 443.357267][ T1732] do_page_fault+0x71/0x581 [ 443.361772][ T1732] ? page_fault+0x8/0x30 [ 443.366025][ T1732] page_fault+0x1e/0x30 [ 443.370180][ T1732] RIP: 0033:0x43f121 [ 443.374166][ T1732] Code: 8d 15 c3 5e 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 443.393816][ T1732] RSP: 002b:00007ffec0b44ab8 EFLAGS: 00010202 [ 443.399887][ T1732] RAX: 000000000070b0e8 RBX: 000000000070b160 RCX: 0000000000000066 [ 443.407860][ T1732] RDX: 0000000000000007 RSI: 00000000004c5d45 RDI: 000000000070b0e8 [ 443.415830][ T1732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 443.423848][ T1732] R10: 0000000000000064 R11: 0000000000000297 R12: 000000000070b0e8 [ 443.431820][ T1732] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 443.445701][ T1732] memory: usage 308428kB, limit 307200kB, failcnt 1247 [ 443.452567][ T1732] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.460370][ T1732] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 443.467778][ T1732] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 443.491325][ T1732] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1732,uid=0 [ 443.506696][ T1732] Memory cgroup out of memory: Killed process 1732 (syz-executor.2) total-vm:72316kB, anon-rss:68kB, file-rss:34816kB, shmem-rss:0kB [ 443.521028][ T1045] oom_reaper: reaped process 1732 (syz-executor.2), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 11:09:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x240) shutdown(r0, 0x1) 11:09:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:52 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000a31f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:52 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:09:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:09:52 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 444.001864][ T1749] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:09:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) 11:09:52 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:09:53 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:09:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375001031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:09:53 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 444.234891][ T1766] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 445.843209][ T1783] IPVS: ftp: loaded support on port[0] = 21 [ 446.012501][ T1783] chnl_net:caif_netlink_parms(): no params data found [ 446.155473][ T1783] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.162591][ T1783] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.170371][ T1783] device bridge_slave_0 entered promiscuous mode [ 446.178244][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.185468][ T1783] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.192978][ T1783] device bridge_slave_1 entered promiscuous mode [ 446.211399][ T1783] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 446.221613][ T1783] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 446.233829][ T7] device bridge_slave_1 left promiscuous mode [ 446.240183][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.295288][ T7] device bridge_slave_0 left promiscuous mode [ 446.301450][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.616113][ T7] device hsr_slave_1 left promiscuous mode [ 449.689594][ T7] device hsr_slave_0 left promiscuous mode [ 449.749120][ T7] team0 (unregistering): Port device team_slave_1 removed [ 449.760635][ T7] team0 (unregistering): Port device team_slave_0 removed [ 449.772895][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 449.819663][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 449.891128][ T7] bond0 (unregistering): Released all slaves [ 450.013144][ T1783] team0: Port device team_slave_0 added [ 450.020114][ T1783] team0: Port device team_slave_1 added [ 450.076386][ T1783] device hsr_slave_0 entered promiscuous mode [ 450.124736][ T1783] device hsr_slave_1 entered promiscuous mode [ 450.198637][ T1783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.212197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 450.220451][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 450.232101][ T1783] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.243468][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 450.252374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 450.260878][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.267960][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.284459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 450.292199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 450.300861][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 450.309414][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.316500][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.324897][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.333339][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.341874][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.350460][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.359276][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.408137][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.417152][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 450.432159][ T1783] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 450.443389][ T1783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.456204][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.465236][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.482716][ T1783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.491642][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.559850][ T1783] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 450.578148][ T1783] CPU: 1 PID: 1783 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 450.587185][ T1783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.597243][ T1783] Call Trace: [ 450.600544][ T1783] dump_stack+0x172/0x1f0 [ 450.604886][ T1783] dump_header+0x10f/0xba6 [ 450.609317][ T1783] ? task_will_free_mem+0x139/0x6e0 [ 450.614528][ T1783] out_of_memory.cold+0xf/0x18a [ 450.619386][ T1783] ? cgroup_file_notify+0x140/0x1b0 [ 450.624593][ T1783] ? oom_killer_disable+0x280/0x280 [ 450.629791][ T1783] ? cgroup_file_notify+0x140/0x1b0 [ 450.635006][ T1783] mem_cgroup_out_of_memory+0x1ca/0x230 [ 450.640554][ T1783] ? memcg_event_wake+0x230/0x230 [ 450.645595][ T1783] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.651414][ T1783] ? cgroup_file_notify+0x140/0x1b0 [ 450.656622][ T1783] memory_max_write+0x22f/0x390 [ 450.661480][ T1783] ? mem_cgroup_write+0x360/0x360 [ 450.666508][ T1783] ? lock_acquire+0x16f/0x3f0 [ 450.671190][ T1783] ? kernfs_fop_write+0x227/0x480 [ 450.676229][ T1783] cgroup_file_write+0x245/0x7a0 [ 450.681175][ T1783] ? mem_cgroup_write+0x360/0x360 [ 450.686205][ T1783] ? kill_css+0x380/0x380 [ 450.690545][ T1783] ? kill_css+0x380/0x380 [ 450.694882][ T1783] kernfs_fop_write+0x2ba/0x480 [ 450.699755][ T1783] __vfs_write+0x8d/0x110 [ 450.704110][ T1783] ? kernfs_fop_open+0xd90/0xd90 [ 450.709056][ T1783] vfs_write+0x20c/0x580 [ 450.713310][ T1783] ksys_write+0xea/0x1f0 [ 450.717556][ T1783] ? __ia32_sys_read+0xb0/0xb0 [ 450.722325][ T1783] ? do_syscall_64+0x26/0x610 [ 450.727004][ T1783] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.733071][ T1783] ? do_syscall_64+0x26/0x610 [ 450.737756][ T1783] __x64_sys_write+0x73/0xb0 [ 450.742352][ T1783] do_syscall_64+0x103/0x610 [ 450.746996][ T1783] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.752904][ T1783] RIP: 0033:0x411c50 [ 450.756810][ T1783] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 46 64 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 54 1a 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 450.777312][ T1783] RSP: 002b:00007ffe716de8f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 450.788058][ T1783] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000411c50 [ 450.796032][ T1783] RDX: 0000000000000009 RSI: 00007ffe716de920 RDI: 0000000000000003 [ 450.804007][ T1783] RBP: 00007ffe716de920 R08: 0000000000000000 R09: 0000000000000009 [ 450.811979][ T1783] R10: 0000000000000064 R11: 0000000000000246 R12: 00007ffe716df490 [ 450.819953][ T1783] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 450.842258][ T1783] memory: usage 307980kB, limit 307200kB, failcnt 1248 [ 450.857901][ T1783] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.870284][ T1783] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 450.881720][ T1783] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 450.910764][ T1783] Out of memory and no killable processes... [ 450.920684][ T1783] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 450.939035][ T1783] CPU: 1 PID: 1783 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 450.948100][ T1783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.958152][ T1783] Call Trace: [ 450.961446][ T1783] dump_stack+0x172/0x1f0 [ 450.965777][ T1783] dump_header+0x10f/0xba6 [ 450.970190][ T1783] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 450.975996][ T1783] ? ___ratelimit+0x60/0x595 [ 450.980580][ T1783] ? do_raw_spin_unlock+0x57/0x270 [ 450.985690][ T1783] oom_kill_process.cold+0x10/0x15 [ 450.990798][ T1783] out_of_memory+0x79a/0x1280 [ 450.995478][ T1783] ? lock_downgrade+0x880/0x880 [ 451.000322][ T1783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.006580][ T1783] ? oom_killer_disable+0x280/0x280 [ 451.011770][ T1783] ? find_held_lock+0x35/0x130 [ 451.016541][ T1783] mem_cgroup_out_of_memory+0x1ca/0x230 [ 451.022079][ T1783] ? memcg_event_wake+0x230/0x230 [ 451.027103][ T1783] ? do_raw_spin_unlock+0x57/0x270 [ 451.032210][ T1783] ? _raw_spin_unlock+0x2d/0x50 [ 451.037061][ T1783] try_charge+0x118d/0x1790 [ 451.041566][ T1783] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 451.047111][ T1783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.053357][ T1783] ? kasan_check_read+0x11/0x20 [ 451.058212][ T1783] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 451.063756][ T1783] mem_cgroup_try_charge+0x24d/0x5e0 [ 451.069042][ T1783] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 451.074670][ T1783] wp_page_copy+0x408/0x1740 [ 451.079253][ T1783] ? find_held_lock+0x35/0x130 [ 451.084017][ T1783] ? pmd_pfn+0x1d0/0x1d0 [ 451.088258][ T1783] ? lock_downgrade+0x880/0x880 [ 451.093102][ T1783] ? swp_swapcount+0x540/0x540 [ 451.097875][ T1783] ? kasan_check_read+0x11/0x20 [ 451.102721][ T1783] ? do_raw_spin_unlock+0x57/0x270 [ 451.107847][ T1783] do_wp_page+0x5d8/0x16c0 [ 451.112270][ T1783] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 451.117649][ T1783] __handle_mm_fault+0x22e8/0x3ec0 [ 451.122758][ T1783] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 451.128297][ T1783] ? find_held_lock+0x35/0x130 [ 451.133058][ T1783] ? handle_mm_fault+0x322/0xb30 [ 451.138006][ T1783] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.144243][ T1783] ? kasan_check_read+0x11/0x20 [ 451.149093][ T1783] handle_mm_fault+0x43f/0xb30 [ 451.153869][ T1783] __do_page_fault+0x5ef/0xda0 [ 451.158649][ T1783] do_page_fault+0x71/0x581 [ 451.163148][ T1783] ? page_fault+0x8/0x30 [ 451.167389][ T1783] page_fault+0x1e/0x30 [ 451.171538][ T1783] RIP: 0033:0x43f121 [ 451.175427][ T1783] Code: 8d 15 c3 5e 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 451.195022][ T1783] RSP: 002b:00007ffe716dee08 EFLAGS: 00010202 [ 451.201081][ T1783] RAX: 000000000070b0e8 RBX: 000000000070b160 RCX: 0000000000000066 [ 451.209045][ T1783] RDX: 0000000000000007 RSI: 00000000004c5d45 RDI: 000000000070b0e8 [ 451.217011][ T1783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 451.224973][ T1783] R10: 0000000000000064 R11: 0000000000000297 R12: 000000000070b0e8 [ 451.232925][ T1783] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 451.243055][ T1783] memory: usage 307980kB, limit 307200kB, failcnt 1256 [ 451.250021][ T1783] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.257545][ T1783] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 451.264434][ T1783] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 451.285232][ T1783] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1783,uid=0 [ 451.300485][ T1783] Memory cgroup out of memory: Killed process 1783 (syz-executor.2) total-vm:72316kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB [ 451.315300][ T1045] oom_reaper: reaped process 1783 (syz-executor.2), now anon-rss:0kB, file-rss:33984kB, shmem-rss:0kB 11:10:00 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x300) shutdown(r0, 0x1) 11:10:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000), 0x8080fffffffe) 11:10:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:00 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x0, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375001131f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x0, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 451.791843][ T1800] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:10:00 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 11:10:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375003031f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:00 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:00 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x0, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 452.086230][ T1824] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 453.680430][ T1837] IPVS: ftp: loaded support on port[0] = 21 [ 453.853600][ T1837] chnl_net:caif_netlink_parms(): no params data found [ 453.863171][ T7] device bridge_slave_1 left promiscuous mode [ 453.869622][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.925342][ T7] device bridge_slave_0 left promiscuous mode [ 453.931534][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.077046][ T7] device hsr_slave_1 left promiscuous mode [ 457.119323][ T7] device hsr_slave_0 left promiscuous mode [ 457.187642][ T7] team0 (unregistering): Port device team_slave_1 removed [ 457.198737][ T7] team0 (unregistering): Port device team_slave_0 removed [ 457.210751][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 457.251040][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 457.344626][ T7] bond0 (unregistering): Released all slaves [ 457.489220][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.496810][ T1837] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.504515][ T1837] device bridge_slave_0 entered promiscuous mode [ 457.512501][ T1837] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.520138][ T1837] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.527777][ T1837] device bridge_slave_1 entered promiscuous mode [ 457.546575][ T1837] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 457.556896][ T1837] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 457.578154][ T1837] team0: Port device team_slave_0 added [ 457.584917][ T1837] team0: Port device team_slave_1 added [ 457.647563][ T1837] device hsr_slave_0 entered promiscuous mode [ 457.704547][ T1837] device hsr_slave_1 entered promiscuous mode [ 457.771594][ T1837] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.778672][ T1837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.786014][ T1837] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.793052][ T1837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.828101][ T1837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.867149][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.875017][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.882974][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.891187][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 457.914909][ T1837] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.934636][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.942934][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.950023][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.977030][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.986134][ T7418] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.993176][ T7418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.002280][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.011112][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.020156][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.029955][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.040146][ T1837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.048630][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.069843][ T1837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.126328][ T1837] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 458.136948][ T1837] CPU: 1 PID: 1837 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 458.145965][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.156008][ T1837] Call Trace: [ 458.159302][ T1837] dump_stack+0x172/0x1f0 [ 458.163631][ T1837] dump_header+0x10f/0xba6 [ 458.168041][ T1837] ? task_will_free_mem+0x139/0x6e0 [ 458.173253][ T1837] out_of_memory.cold+0xf/0x18a [ 458.178107][ T1837] ? cgroup_file_notify+0x140/0x1b0 [ 458.183309][ T1837] ? oom_killer_disable+0x280/0x280 [ 458.188501][ T1837] ? cgroup_file_notify+0x140/0x1b0 [ 458.193722][ T1837] mem_cgroup_out_of_memory+0x1ca/0x230 [ 458.199263][ T1837] ? memcg_event_wake+0x230/0x230 [ 458.204308][ T1837] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 458.210108][ T1837] ? cgroup_file_notify+0x140/0x1b0 [ 458.215314][ T1837] memory_max_write+0x22f/0x390 [ 458.220167][ T1837] ? mem_cgroup_write+0x360/0x360 [ 458.225184][ T1837] ? lock_acquire+0x16f/0x3f0 [ 458.229854][ T1837] ? kernfs_fop_write+0x227/0x480 [ 458.234877][ T1837] cgroup_file_write+0x245/0x7a0 [ 458.239813][ T1837] ? mem_cgroup_write+0x360/0x360 [ 458.244833][ T1837] ? kill_css+0x380/0x380 [ 458.249163][ T1837] ? kill_css+0x380/0x380 [ 458.253486][ T1837] kernfs_fop_write+0x2ba/0x480 [ 458.258335][ T1837] __vfs_write+0x8d/0x110 [ 458.262658][ T1837] ? kernfs_fop_open+0xd90/0xd90 [ 458.267594][ T1837] vfs_write+0x20c/0x580 [ 458.271839][ T1837] ksys_write+0xea/0x1f0 [ 458.276080][ T1837] ? __ia32_sys_read+0xb0/0xb0 [ 458.280838][ T1837] ? do_syscall_64+0x26/0x610 [ 458.285511][ T1837] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.291570][ T1837] ? do_syscall_64+0x26/0x610 [ 458.296246][ T1837] __x64_sys_write+0x73/0xb0 [ 458.300842][ T1837] do_syscall_64+0x103/0x610 [ 458.305430][ T1837] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.311316][ T1837] RIP: 0033:0x411c50 [ 458.315225][ T1837] Code: b0 89 c8 f7 d8 eb ed b8 6e 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 83 3d 3d 46 64 00 00 75 14 b8 01 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 54 1a 00 00 c3 48 83 ec 08 e8 ca fc ff ff [ 458.334822][ T1837] RSP: 002b:00007ffe604f7518 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.343227][ T1837] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000000411c50 [ 458.351200][ T1837] RDX: 0000000000000009 RSI: 00007ffe604f7540 RDI: 0000000000000003 [ 458.359181][ T1837] RBP: 00007ffe604f7540 R08: 0000000000000000 R09: 0000000000000009 [ 458.367160][ T1837] R10: 0000000000000064 R11: 0000000000000246 R12: 00007ffe604f80b0 [ 458.375123][ T1837] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 458.398336][ T1837] memory: usage 307700kB, limit 307200kB, failcnt 1257 [ 458.413133][ T1837] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.421154][ T1837] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.436835][ T1837] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 458.464661][ T1837] Out of memory and no killable processes... [ 458.474866][ T1837] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 458.495033][ T1837] CPU: 1 PID: 1837 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 458.504057][ T1837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.514102][ T1837] Call Trace: [ 458.517396][ T1837] dump_stack+0x172/0x1f0 [ 458.521728][ T1837] dump_header+0x10f/0xba6 [ 458.526148][ T1837] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 458.531946][ T1837] ? ___ratelimit+0x60/0x595 [ 458.536718][ T1837] ? do_raw_spin_unlock+0x57/0x270 [ 458.541833][ T1837] oom_kill_process.cold+0x10/0x15 [ 458.546959][ T1837] out_of_memory+0x79a/0x1280 [ 458.551632][ T1837] ? lock_downgrade+0x880/0x880 [ 458.556481][ T1837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.562715][ T1837] ? oom_killer_disable+0x280/0x280 [ 458.567906][ T1837] ? find_held_lock+0x35/0x130 [ 458.572691][ T1837] mem_cgroup_out_of_memory+0x1ca/0x230 [ 458.578232][ T1837] ? memcg_event_wake+0x230/0x230 [ 458.583269][ T1837] ? do_raw_spin_unlock+0x57/0x270 [ 458.588383][ T1837] ? _raw_spin_unlock+0x2d/0x50 [ 458.593231][ T1837] try_charge+0x118d/0x1790 [ 458.597746][ T1837] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 458.603296][ T1837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.609536][ T1837] ? kasan_check_read+0x11/0x20 [ 458.614387][ T1837] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 458.619929][ T1837] mem_cgroup_try_charge+0x24d/0x5e0 [ 458.625216][ T1837] mem_cgroup_try_charge_delay+0x1f/0xa0 [ 458.630856][ T1837] wp_page_copy+0x408/0x1740 [ 458.635441][ T1837] ? find_held_lock+0x35/0x130 [ 458.640203][ T1837] ? pmd_pfn+0x1d0/0x1d0 [ 458.644453][ T1837] ? lock_downgrade+0x880/0x880 [ 458.649298][ T1837] ? swp_swapcount+0x540/0x540 [ 458.654058][ T1837] ? kasan_check_read+0x11/0x20 [ 458.658905][ T1837] ? do_raw_spin_unlock+0x57/0x270 [ 458.664016][ T1837] do_wp_page+0x5d8/0x16c0 [ 458.668437][ T1837] ? finish_mkwrite_fault+0x4f0/0x4f0 [ 458.673816][ T1837] __handle_mm_fault+0x22e8/0x3ec0 [ 458.678927][ T1837] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 458.684464][ T1837] ? find_held_lock+0x35/0x130 [ 458.689223][ T1837] ? handle_mm_fault+0x322/0xb30 [ 458.694171][ T1837] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.700428][ T1837] ? kasan_check_read+0x11/0x20 [ 458.705799][ T1837] handle_mm_fault+0x43f/0xb30 [ 458.710566][ T1837] __do_page_fault+0x5ef/0xda0 [ 458.715328][ T1837] do_page_fault+0x71/0x581 [ 458.719808][ T1837] ? page_fault+0x8/0x30 [ 458.724024][ T1837] page_fault+0x1e/0x30 [ 458.728153][ T1837] RIP: 0033:0x43f121 [ 458.732023][ T1837] Code: 8d 15 c3 5e 0a 00 8b 0c 8a 8b 04 82 29 c8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 fa 20 48 89 f8 73 77 f6 c2 01 74 0b 0f b6 0e <88> 0f 48 ff c6 48 ff c7 f6 c2 02 74 12 0f b7 0e 66 89 0f 48 83 c6 [ 458.751605][ T1837] RSP: 002b:00007ffe604f7a28 EFLAGS: 00010202 [ 458.757646][ T1837] RAX: 000000000070b0e8 RBX: 000000000070b160 RCX: 0000000000000066 [ 458.765608][ T1837] RDX: 0000000000000007 RSI: 00000000004c5d45 RDI: 000000000070b0e8 [ 458.773562][ T1837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000001 [ 458.781551][ T1837] R10: 0000000000000064 R11: 0000000000000297 R12: 000000000070b0e8 [ 458.789501][ T1837] R13: 0000000000000003 R14: 0000000000000000 R15: 0000000000000000 [ 458.804494][ T1837] memory: usage 307700kB, limit 307200kB, failcnt 1265 [ 458.811358][ T1837] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.820482][ T1837] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 458.827411][ T1837] Memory cgroup stats for /syz2: cache:120KB rss:44KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:0KB inactive_file:0KB active_file:0KB unevictable:0KB [ 458.848210][ T1837] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1837,uid=0 [ 458.863500][ T1837] Memory cgroup out of memory: Killed process 1837 (syz-executor.2) total-vm:72316kB, anon-rss:72kB, file-rss:34816kB, shmem-rss:0kB 11:10:08 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x3e8) shutdown(r0, 0x1) 11:10:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x0, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:08 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 11:10:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375005431f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x0, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 459.392779][ T1853] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:10:08 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000), 0x8080fffffffe) 11:10:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:08 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375006231f279290053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:08 executing program 3: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:08 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x0, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:08 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 459.652614][ T1876] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 461.333953][ T1893] IPVS: ftp: loaded support on port[0] = 21 [ 461.500455][ T1893] chnl_net:caif_netlink_parms(): no params data found [ 461.522875][ T7] device bridge_slave_1 left promiscuous mode [ 461.529354][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.574984][ T7] device bridge_slave_0 left promiscuous mode [ 461.581150][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.807030][ T7] device hsr_slave_1 left promiscuous mode [ 464.857970][ T7] device hsr_slave_0 left promiscuous mode [ 464.897931][ T7] team0 (unregistering): Port device team_slave_1 removed [ 464.912076][ T7] team0 (unregistering): Port device team_slave_0 removed [ 464.923069][ T7] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 464.978227][ T7] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 465.066386][ T7] bond0 (unregistering): Released all slaves [ 465.171318][ T1893] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.178560][ T1893] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.186440][ T1893] device bridge_slave_0 entered promiscuous mode [ 465.193840][ T1893] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.200981][ T1893] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.208847][ T1893] device bridge_slave_1 entered promiscuous mode [ 465.223966][ T1893] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 465.233891][ T1893] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 465.251167][ T1893] team0: Port device team_slave_0 added [ 465.258736][ T1893] team0: Port device team_slave_1 added [ 465.316236][ T1893] device hsr_slave_0 entered promiscuous mode [ 465.374553][ T1893] device hsr_slave_1 entered promiscuous mode [ 465.460406][ T1893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.471815][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 465.482456][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.490441][ T7418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.500495][ T1893] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.546628][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.555447][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.563789][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.570873][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.596837][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.605962][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.614985][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.623291][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.630374][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.640040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 465.648746][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 465.657552][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 465.669858][ T1893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 465.681479][ T1893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 465.692357][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 465.708938][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 465.738083][ T1893] 8021q: adding VLAN 0 to HW filter on device batadv0 11:10:14 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290253110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, 0x0, 0x8080fffffffe) 11:10:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:14 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x700) shutdown(r0, 0x1) 11:10:14 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 465.980988][ T1912] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:10:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:14 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, 0x0, 0x8080fffffffe) 11:10:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x900) shutdown(r0, 0x1) 11:10:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290453110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fe, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 466.227344][ T1931] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:15 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xa00) shutdown(r0, 0x1) 11:10:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290853110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:15 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, 0x0, 0x8080fffffffe) [ 466.518354][ T1961] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:15 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xe00) shutdown(r0, 0x1) [ 466.711716][ T1984] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:10:15 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290a53110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:15 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x0) [ 466.819342][ T1991] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=3, oom_score_adj=1000 [ 466.864474][ T1991] CPU: 0 PID: 1991 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 466.873525][ T1991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.883595][ T1991] Call Trace: [ 466.886903][ T1991] dump_stack+0x172/0x1f0 [ 466.891251][ T1991] dump_header+0x10f/0xba6 [ 466.895764][ T1991] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 466.901597][ T1991] ? ___ratelimit+0x60/0x595 [ 466.906186][ T1991] ? do_raw_spin_unlock+0x57/0x270 [ 466.911301][ T1991] oom_kill_process.cold+0x10/0x15 [ 466.916418][ T1991] out_of_memory+0x79a/0x1280 [ 466.921099][ T1991] ? lock_downgrade+0x880/0x880 [ 466.925966][ T1991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.932209][ T1991] ? oom_killer_disable+0x280/0x280 [ 466.937407][ T1991] ? find_held_lock+0x35/0x130 [ 466.942185][ T1991] mem_cgroup_out_of_memory+0x1ca/0x230 [ 466.947733][ T1991] ? memcg_event_wake+0x230/0x230 [ 466.952766][ T1991] ? do_raw_spin_unlock+0x57/0x270 [ 466.957881][ T1991] ? _raw_spin_unlock+0x2d/0x50 [ 466.962740][ T1991] try_charge+0x118d/0x1790 [ 466.967252][ T1991] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 466.972801][ T1991] ? mark_held_locks+0xa4/0xf0 [ 466.977580][ T1991] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 466.983210][ T1991] ? __sk_mem_raise_allocated+0x557/0x1390 [ 466.989013][ T1991] ? mem_cgroup_charge_skmem+0x11a/0x280 [ 466.994646][ T1991] ? lockdep_hardirqs_on+0x418/0x5d0 [ 466.999932][ T1991] ? trace_hardirqs_on+0x67/0x230 [ 467.004963][ T1991] mem_cgroup_charge_skmem+0x12f/0x280 [ 467.010424][ T1991] ? mem_cgroup_sk_free+0x90/0x90 [ 467.015455][ T1991] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 467.021177][ T1991] ? iov_iter_advance+0x295/0xfd0 [ 467.026217][ T1991] __sk_mem_raise_allocated+0x557/0x1390 [ 467.031956][ T1991] ? alloc_pages_current+0x10f/0x210 [ 467.037252][ T1991] __sk_mem_schedule+0x6d/0xe0 [ 467.042023][ T1991] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 467.048266][ T1991] tcp_sendmsg_locked+0x1992/0x34b0 [ 467.053482][ T1991] ? tcp_sendpage+0x60/0x60 [ 467.057990][ T1991] ? trace_hardirqs_on+0x67/0x230 [ 467.063013][ T1991] ? lock_sock_nested+0x9a/0x120 [ 467.067955][ T1991] ? __local_bh_enable_ip+0x15a/0x270 [ 467.073333][ T1991] tcp_sendmsg+0x30/0x50 [ 467.077585][ T1991] inet_sendmsg+0x147/0x5d0 [ 467.082087][ T1991] ? ipip_gro_receive+0x100/0x100 [ 467.087117][ T1991] sock_sendmsg+0xdd/0x130 [ 467.091534][ T1991] __sys_sendto+0x262/0x380 [ 467.096150][ T1991] ? __ia32_sys_getpeername+0xb0/0xb0 [ 467.101552][ T1991] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 467.107792][ T1991] ? put_timespec64+0xda/0x140 [ 467.112570][ T1991] ? nsecs_to_jiffies+0x30/0x30 [ 467.117435][ T1991] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.122894][ T1991] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 467.128458][ T1991] ? do_syscall_64+0x26/0x610 [ 467.133134][ T1991] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.139207][ T1991] __x64_sys_sendto+0xe1/0x1a0 [ 467.143975][ T1991] do_syscall_64+0x103/0x610 [ 467.148576][ T1991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 467.154467][ T1991] RIP: 0033:0x457e29 [ 467.158361][ T1991] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 467.177965][ T1991] RSP: 002b:00007ff373969c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 467.186375][ T1991] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000457e29 [ 467.194342][ T1991] RDX: ffffffffffffffef RSI: 0000000020d7cfcb RDI: 0000000000000003 [ 467.202310][ T1991] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000e00 11:10:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) [ 467.210276][ T1991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff37396a6d4 [ 467.218241][ T1991] R13: 00000000004c5551 R14: 00000000004d9488 R15: 00000000ffffffff 11:10:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279291053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 467.292629][ T2006] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 467.311603][ T1991] memory: usage 307184kB, limit 307200kB, failcnt 1287 [ 467.324440][ T1991] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 11:10:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) [ 467.379665][ T1991] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 11:10:16 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x0) [ 467.421294][ T1991] Memory cgroup stats for /syz2: cache:120KB rss:2192KB rss_huge:2048KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:2192KB inactive_file:0KB active_file:0KB unevictable:0KB [ 467.479855][ T2020] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 467.488769][ T1991] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1990,uid=0 [ 467.512468][ T1991] Memory cgroup out of memory: Killed process 1990 (syz-executor.2) total-vm:72576kB, anon-rss:2144kB, file-rss:34816kB, shmem-rss:0kB 11:10:16 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x1100) shutdown(r0, 0x1) [ 467.528726][ T1045] oom_reaper: reaped process 1990 (syz-executor.2), now anon-rss:0kB, file-rss:34704kB, shmem-rss:0kB 11:10:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279291153110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) [ 467.738531][ T2032] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=3, oom_score_adj=1000 [ 467.766106][ T2043] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 467.778633][ T2032] CPU: 1 PID: 2032 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 11:10:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) utime(&(0x7f0000000440)='./bus\x00', &(0x7f0000000240)={0x0, 0x7f}) sendfile(r1, r1, &(0x7f0000000000), 0x0) [ 467.787669][ T2032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.797739][ T2032] Call Trace: [ 467.801031][ T2032] dump_stack+0x172/0x1f0 [ 467.805459][ T2032] dump_header+0x10f/0xba6 [ 467.809888][ T2032] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 467.815689][ T2032] ? ___ratelimit+0x60/0x595 [ 467.820275][ T2032] ? do_raw_spin_unlock+0x57/0x270 [ 467.827500][ T2032] oom_kill_process.cold+0x10/0x15 [ 467.832615][ T2032] out_of_memory+0x79a/0x1280 [ 467.837294][ T2032] ? lock_downgrade+0x880/0x880 [ 467.842131][ T2032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.848358][ T2032] ? oom_killer_disable+0x280/0x280 [ 467.853532][ T2032] ? find_held_lock+0x35/0x130 [ 467.858288][ T2032] mem_cgroup_out_of_memory+0x1ca/0x230 [ 467.863952][ T2032] ? memcg_event_wake+0x230/0x230 [ 467.868960][ T2032] ? do_raw_spin_unlock+0x57/0x270 [ 467.874056][ T2032] ? _raw_spin_unlock+0x2d/0x50 [ 467.879081][ T2032] try_charge+0x118d/0x1790 [ 467.883588][ T2032] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 467.889115][ T2032] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 467.894669][ T2032] ? find_held_lock+0x35/0x130 [ 467.899425][ T2032] ? get_mem_cgroup_from_mm+0x10b/0x2b0 [ 467.904986][ T2032] __memcg_kmem_charge_memcg+0x7c/0x130 [ 467.910547][ T2032] ? memcg_kmem_put_cache+0xb0/0xb0 [ 467.915737][ T2032] ? get_mem_cgroup_from_mm+0x128/0x2b0 [ 467.921265][ T2032] __memcg_kmem_charge+0x136/0x300 [ 467.926360][ T2032] __alloc_pages_nodemask+0x437/0x7e0 [ 467.931723][ T2032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.938003][ T2032] ? __alloc_pages_slowpath+0x2900/0x2900 [ 467.943729][ T2032] ? copy_process.part.0+0x1d35/0x79e0 [ 467.949209][ T2032] ? lockdep_hardirqs_on+0x418/0x5d0 [ 467.954486][ T2032] ? trace_hardirqs_on+0x67/0x230 [ 467.959592][ T2032] copy_process.part.0+0x3e0/0x79e0 [ 467.964773][ T2032] ? psi_memstall_leave+0x11c/0x180 [ 467.970051][ T2032] ? kvm_sched_clock_read+0x9/0x20 [ 467.975155][ T2032] ? psi_memstall_leave+0x12e/0x180 [ 467.980352][ T2032] ? find_held_lock+0x35/0x130 [ 467.985108][ T2032] ? __lock_acquire+0x55d/0x4710 [ 467.990043][ T2032] ? __cleanup_sighand+0x60/0x60 [ 467.994965][ T2032] ? mark_held_locks+0xf0/0xf0 [ 467.999842][ T2032] ? rcu_read_lock_sched_held+0x110/0x130 [ 468.005540][ T2032] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 468.011758][ T2032] ? try_to_free_mem_cgroup_pages+0x3b6/0xa30 [ 468.017807][ T2032] _do_fork+0x257/0xfd0 [ 468.021956][ T2032] ? fork_idle+0x1d0/0x1d0 [ 468.026383][ T2032] ? blkcg_maybe_throttle_current+0x5e2/0xfc0 [ 468.032435][ T2032] ? lock_downgrade+0x880/0x880 [ 468.037270][ T2032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.043493][ T2032] ? blkcg_exit_queue+0x30/0x30 [ 468.048324][ T2032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.053760][ T2032] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.059200][ T2032] ? do_syscall_64+0x26/0x610 [ 468.063884][ T2032] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.069951][ T2032] ? do_syscall_64+0x26/0x610 [ 468.074629][ T2032] __x64_sys_clone+0xbf/0x150 [ 468.079306][ T2032] do_syscall_64+0x103/0x610 [ 468.083903][ T2032] entry_SYSCALL_64_after_hwframe+0x49/0xbe 11:10:16 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) [ 468.089790][ T2032] RIP: 0033:0x45a7f9 [ 468.093681][ T2032] Code: ff 48 85 f6 0f 84 d7 8e fb ff 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 0f 8c ae 8e fb ff 74 01 c3 31 ed 48 f7 c7 00 00 01 00 75 [ 468.113281][ T2032] RSP: 002b:00007ffcc13ec0f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 468.121682][ T2032] RAX: ffffffffffffffda RBX: 00007ff373949700 RCX: 000000000045a7f9 [ 468.129781][ T2032] RDX: 00007ff3739499d0 RSI: 00007ff373948db0 RDI: 00000000003d0f00 [ 468.137731][ T2032] RBP: 00007ffcc13ec300 R08: 00007ff373949700 R09: 00007ff373949700 [ 468.145695][ T2032] R10: 00007ff3739499d0 R11: 0000000000000202 R12: 0000000000000000 [ 468.153662][ T2032] R13: 00007ffcc13ec1af R14: 00007ff3739499c0 R15: 000000000073bfac [ 468.174129][ T2032] memory: usage 307192kB, limit 307200kB, failcnt 1311 [ 468.181143][ T2032] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 468.189430][ T2032] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 468.197187][ T2032] Memory cgroup stats for /syz2: cache:120KB rss:72KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:148KB inactive_file:0KB active_file:0KB unevictable:0KB [ 468.218219][ T2032] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=2032,uid=0 [ 468.234338][ T2032] Memory cgroup out of memory: Killed process 2032 (syz-executor.2) total-vm:72576kB, anon-rss:96kB, file-rss:34816kB, shmem-rss:0kB [ 468.249856][ T1045] oom_reaper: reaped process 2032 (syz-executor.2), now anon-rss:0kB, file-rss:34832kB, shmem-rss:0kB 11:10:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279293053110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:17 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x1700) shutdown(r0, 0x1) [ 468.350717][ T1893] syz-executor.2 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=1, oom_score_adj=0 [ 468.415991][ T2065] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 468.430424][ T1893] CPU: 0 PID: 1893 Comm: syz-executor.2 Not tainted 5.0.0-rc7-next-20190222 #41 [ 468.439469][ T1893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.449605][ T1893] Call Trace: [ 468.452897][ T1893] dump_stack+0x172/0x1f0 [ 468.457230][ T1893] dump_header+0x10f/0xba6 [ 468.461646][ T1893] ? _raw_spin_unlock_irqrestore+0xa4/0xe0 [ 468.467462][ T1893] ? ___ratelimit+0x60/0x595 [ 468.472051][ T1893] ? do_raw_spin_unlock+0x57/0x270 [ 468.477170][ T1893] oom_kill_process.cold+0x10/0x15 [ 468.482279][ T1893] out_of_memory+0x79a/0x1280 [ 468.486955][ T1893] ? lock_downgrade+0x880/0x880 [ 468.491807][ T1893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.498048][ T1893] ? oom_killer_disable+0x280/0x280 [ 468.503241][ T1893] ? find_held_lock+0x35/0x130 [ 468.508014][ T1893] mem_cgroup_out_of_memory+0x1ca/0x230 [ 468.513557][ T1893] ? memcg_event_wake+0x230/0x230 [ 468.518585][ T1893] ? do_raw_spin_unlock+0x57/0x270 [ 468.523694][ T1893] ? _raw_spin_unlock+0x2d/0x50 [ 468.528549][ T1893] try_charge+0x118d/0x1790 [ 468.533060][ T1893] ? mem_cgroup_oom_trylock+0x1a0/0x1a0 [ 468.539062][ T1893] ? rcu_read_lock_sched_held+0x110/0x130 [ 468.544785][ T1893] ? __alloc_pages_nodemask+0x599/0x7e0 [ 468.550334][ T1893] ? _raw_spin_unlock+0x2d/0x50 [ 468.555196][ T1893] __memcg_kmem_charge_memcg+0x7c/0x130 [ 468.560733][ T1893] ? memcg_kmem_put_cache+0xb0/0xb0 [ 468.565921][ T1893] ? cache_grow_begin+0x594/0x860 [ 468.570935][ T1893] ? lockdep_hardirqs_on+0x418/0x5d0 [ 468.576209][ T1893] ? trace_hardirqs_on+0x67/0x230 [ 468.581224][ T1893] cache_grow_begin+0x5c0/0x860 [ 468.586064][ T1893] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 468.592291][ T1893] ? __cpuset_node_allowed+0x136/0x540 [ 468.597743][ T1893] fallback_alloc+0x1fd/0x2d0 [ 468.602410][ T1893] ____cache_alloc_node+0x1be/0x1e0 [ 468.607593][ T1893] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 468.613810][ T1893] kmem_cache_alloc+0x1e8/0x6f0 [ 468.618650][ T1893] ? inet_create+0x2f4/0xe10 [ 468.623261][ T1893] sk_prot_alloc+0x67/0x2e0 [ 468.627749][ T1893] ? lock_downgrade+0x880/0x880 [ 468.632585][ T1893] sk_alloc+0x39/0xf70 [ 468.636645][ T1893] inet_create+0x36a/0xe10 [ 468.641054][ T1893] __sock_create+0x3e6/0x750 [ 468.645746][ T1893] __sys_socket+0x103/0x220 [ 468.650237][ T1893] ? move_addr_to_kernel+0x80/0x80 [ 468.655436][ T1893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 468.660901][ T1893] ? do_syscall_64+0x26/0x610 [ 468.665569][ T1893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.671621][ T1893] ? do_syscall_64+0x26/0x610 [ 468.676289][ T1893] __x64_sys_socket+0x73/0xb0 [ 468.680954][ T1893] do_syscall_64+0x103/0x610 [ 468.685539][ T1893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.691444][ T1893] RIP: 0033:0x45a997 [ 468.695325][ T1893] Code: 00 00 00 49 89 ca b8 36 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 2a 8d fb ff c3 66 0f 1f 84 00 00 00 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 0d 8d fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.714922][ T1893] RSP: 002b:00007ffcc13ebce8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 468.723321][ T1893] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a997 [ 468.731270][ T1893] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 468.739219][ T1893] RBP: 0000000000000003 R08: 0000000000000000 R09: 000000000000000a [ 468.747187][ T1893] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000005 [ 468.755141][ T1893] R13: 00000000000724b1 R14: 0000000000000006 R15: 0000000000000002 11:10:17 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) 11:10:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x72, 0x3) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x66b6}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket(0xffffffffffffffff, 0x3, 0x5) r2 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r2) r3 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) r4 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) r5 = socket$inet6(0xa, 0x804, 0x40000000000) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r5, 0x29, 0x3b, &(0x7f0000000240)=@dstopts={0xff}, 0x8) sendmmsg(r5, &(0x7f0000004580)=[{{&(0x7f00000046c0)=@llc={0x1a, 0x304, 0x4, 0x7ba8f8b, 0x1, 0x0, @remote}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004240)="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", 0xfc}], 0x1}, 0x2}], 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x1) fcntl$setstatus(r1, 0x4, 0x400) sendfile(r3, r4, 0x0, 0x80003) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000000180)=""/36, 0xd8}) [ 468.763890][ T1893] memory: usage 307452kB, limit 307200kB, failcnt 1367 [ 468.784325][ T1893] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 468.791992][ T1893] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 468.814375][ T1893] Memory cgroup stats for /syz2: cache:120KB rss:72KB rss_huge:0KB shmem:216KB mapped_file:0KB dirty:132KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:48KB inactive_file:0KB active_file:0KB unevictable:0KB [ 468.842830][ T1893] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=1893,uid=0 11:10:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279295453110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 468.874921][ T1893] Memory cgroup out of memory: Killed process 1893 (syz-executor.2) total-vm:72312kB, anon-rss:96kB, file-rss:35712kB, shmem-rss:0kB [ 468.905022][ T1045] oom_reaper: reaped process 1893 (syz-executor.2), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB 11:10:17 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) syz_genetlink_get_family_id$tipc2(0x0) 11:10:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) 11:10:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) [ 469.050363][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6ea38 [ 469.051178][ T2088] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 469.081316][ T2090] page:ffffea0001ba8e00 count:0 mapcount:0 mapping:ffff888094d62820 index:0x0 11:10:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279296253110f118d0000f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 469.104742][ T2090] shmem_aops [ 469.104749][ T2090] name:"memfd:" [ 469.108593][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 469.126991][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 469.159596][ T2090] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 469.185285][ T2100] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 469.187904][ T2090] page dumped because: non-NULL mapping 11:10:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0200f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) [ 469.243754][ T2090] Modules linked in: [ 469.256295][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Not tainted 5.0.0-rc7-next-20190222 #41 [ 469.265349][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.275411][ T2090] Call Trace: [ 469.278709][ T2090] dump_stack+0x172/0x1f0 [ 469.283058][ T2090] bad_page.cold+0xda/0xff [ 469.287480][ T2090] ? si_mem_available+0x320/0x320 [ 469.292516][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.298767][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.305018][ T2090] free_pages_check_bad+0x142/0x1a0 [ 469.310221][ T2090] free_unref_page+0x3c6/0x600 [ 469.315018][ T2090] __put_page+0x8d/0xd0 [ 469.319179][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 469.324995][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 469.330380][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 469.335596][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 469.341708][ T2090] ? rw_verify_area+0x118/0x360 [ 469.346562][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 469.352657][ T2090] direct_splice_actor+0x126/0x1a0 [ 469.357778][ T2090] splice_direct_to_actor+0x369/0x970 [ 469.363157][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 469.368799][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.375040][ T2090] ? do_splice_to+0x190/0x190 [ 469.379717][ T2090] ? rw_verify_area+0x118/0x360 [ 469.384569][ T2090] do_splice_direct+0x1da/0x2a0 [ 469.389418][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 469.394973][ T2090] ? rw_verify_area+0x118/0x360 [ 469.399825][ T2090] do_sendfile+0x597/0xd00 [ 469.404255][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 469.409543][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 469.415780][ T2090] ? put_timespec64+0xda/0x140 [ 469.420560][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 469.425767][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 469.431071][ T2090] ? do_syscall_64+0x26/0x610 [ 469.435751][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 469.441028][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 469.446046][ T2090] do_syscall_64+0x103/0x610 [ 469.450651][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 469.456546][ T2090] RIP: 0033:0x457e29 [ 469.460534][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 469.480119][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 11:10:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) [ 469.488530][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 469.496499][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 469.504559][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 469.512522][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 469.520475][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 469.530272][ T2090] Disabling lock debugging due to kernel taint 11:10:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) bind$packet(r1, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r1, &(0x7f0000000040)="030300000300600000000100fff55b4202938207d9fb0380398d5375000031f279290053110f118d0400f5cfe606f6925cbf34658ea111797b1a00000000000010000000faffffff02020000ae41cf66b45554e7000000000000000000000000000000000000000000000000", 0x6c, 0x0, 0x0, 0x0) 11:10:18 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20200802, &(0x7f00000001c0)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x3f00) shutdown(r0, 0x1) 11:10:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x204e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x7f, 0x400200007fe, &(0x7f0000000080)={0x2, 0x10084e23, @local}, 0x10) write$binfmt_elf64(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000000200)=""/20, 0x487, 0x300}, 0x1500) [ 469.564361][ T2090] BUG: Bad page state in process syz-executor.4 pfn:78cbf [ 469.582835][ T2111] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value 11:10:18 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@numtail='nonumtail=0'}, {@utf8='utf8=1'}, {@utf8no='utf8=0'}, {@rodir='rodir'}, {@shortname_lower='shortname=lower'}, {@fat=@discard='discard'}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x0, 0x0, 0x0, 0x37], 0x2d, [], 0x2d, [], 0x2d, [0x64, 0x37], 0x2d, [0x32, 0x63, 0x0, 0x7b, 0x39, 0x34, 0x61, 0x36]}}}]}) [ 469.637753][ T2090] page:ffffea0001e32fc0 count:0 mapcount:0 mapping:ffff888094d62820 index:0x1 [ 469.686630][ T2090] shmem_aops [ 469.686636][ T2090] name:"memfd:" [ 469.713624][ T2122] FAT-fs (loop3): Unrecognized mount option "fsuuid=" or missing value [ 469.772811][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 469.780980][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 469.789882][ T2090] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 469.805218][ T2090] page dumped because: non-NULL mapping [ 469.832298][ T2090] Modules linked in: [ 469.842875][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 469.853398][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.863441][ T2090] Call Trace: [ 469.866742][ T2090] dump_stack+0x172/0x1f0 [ 469.871088][ T2090] bad_page.cold+0xda/0xff [ 469.875501][ T2090] ? si_mem_available+0x320/0x320 [ 469.880520][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 469.885539][ T2090] ? kasan_check_read+0x11/0x20 [ 469.890393][ T2090] free_pages_check_bad+0x142/0x1a0 [ 469.895587][ T2090] free_unref_page+0x3c6/0x600 [ 469.900350][ T2090] __put_page+0x8d/0xd0 [ 469.904500][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 469.910299][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 469.915674][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 469.920872][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 469.926856][ T2090] ? rw_verify_area+0x118/0x360 [ 469.931697][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 469.937668][ T2090] direct_splice_actor+0x126/0x1a0 [ 469.942774][ T2090] splice_direct_to_actor+0x369/0x970 [ 469.948139][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 469.953678][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.959910][ T2090] ? do_splice_to+0x190/0x190 [ 469.964586][ T2090] ? rw_verify_area+0x118/0x360 [ 469.969443][ T2090] do_splice_direct+0x1da/0x2a0 [ 469.974291][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 469.979846][ T2090] ? rw_verify_area+0x118/0x360 [ 469.984692][ T2090] do_sendfile+0x597/0xd00 [ 469.989110][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 469.994389][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 470.000620][ T2090] ? put_timespec64+0xda/0x140 [ 470.005397][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 470.010694][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 470.015970][ T2090] ? do_syscall_64+0x26/0x610 [ 470.020654][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 470.025930][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 470.030949][ T2090] do_syscall_64+0x103/0x610 [ 470.035537][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.041417][ T2090] RIP: 0033:0x457e29 [ 470.045316][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.064908][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 470.073319][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 470.081368][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 470.089332][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 470.097308][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 470.105270][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 470.116998][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6ed99 [ 470.128870][ T2090] page:ffffea0001bb6640 count:0 mapcount:0 mapping:ffff888094d62820 index:0x2 [ 470.140448][ T2090] shmem_aops [ 470.140454][ T2090] name:"memfd:" [ 470.143893][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 470.158596][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 470.167532][ T2090] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 470.179760][ T2090] page dumped because: non-NULL mapping [ 470.185529][ T2090] Modules linked in: [ 470.189576][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 470.199972][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.210014][ T2090] Call Trace: [ 470.213310][ T2090] dump_stack+0x172/0x1f0 [ 470.217637][ T2090] bad_page.cold+0xda/0xff [ 470.222045][ T2090] ? si_mem_available+0x320/0x320 [ 470.227079][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 470.232108][ T2090] ? kasan_check_read+0x11/0x20 [ 470.236959][ T2090] free_pages_check_bad+0x142/0x1a0 [ 470.242149][ T2090] free_unref_page+0x3c6/0x600 [ 470.247010][ T2090] __put_page+0x8d/0xd0 [ 470.251159][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 470.256958][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 470.262319][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 470.267517][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 470.273501][ T2090] ? rw_verify_area+0x118/0x360 [ 470.278345][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 470.284319][ T2090] direct_splice_actor+0x126/0x1a0 [ 470.289443][ T2090] splice_direct_to_actor+0x369/0x970 [ 470.294810][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 470.300351][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.306584][ T2090] ? do_splice_to+0x190/0x190 [ 470.311251][ T2090] ? rw_verify_area+0x118/0x360 [ 470.316105][ T2090] do_splice_direct+0x1da/0x2a0 [ 470.320946][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 470.326490][ T2090] ? rw_verify_area+0x118/0x360 [ 470.331333][ T2090] do_sendfile+0x597/0xd00 [ 470.335747][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 470.341024][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 470.347253][ T2090] ? put_timespec64+0xda/0x140 [ 470.352030][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 470.357239][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 470.362542][ T2090] ? do_syscall_64+0x26/0x610 [ 470.367211][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 470.372492][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 470.377512][ T2090] do_syscall_64+0x103/0x610 [ 470.382098][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.387980][ T2090] RIP: 0033:0x457e29 [ 470.391867][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.411460][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 470.419863][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 470.427833][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 470.435899][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 470.443863][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 470.451824][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 470.481979][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6f0ef [ 470.493015][ T2090] page:ffffea0001bc3bc0 count:0 mapcount:0 mapping:ffff888094d62820 index:0x3 [ 470.503952][ T2090] shmem_aops [ 470.503958][ T2090] name:"memfd:" [ 470.509593][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 470.523287][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 470.534332][ T2090] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 470.543139][ T2090] page dumped because: non-NULL mapping [ 470.549155][ T2090] Modules linked in: [ 470.553115][ T2090] CPU: 1 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 470.563509][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.573574][ T2090] Call Trace: [ 470.576962][ T2090] dump_stack+0x172/0x1f0 [ 470.581307][ T2090] bad_page.cold+0xda/0xff [ 470.585804][ T2090] ? si_mem_available+0x320/0x320 [ 470.590918][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 470.595936][ T2090] ? kasan_check_read+0x11/0x20 [ 470.600787][ T2090] free_pages_check_bad+0x142/0x1a0 [ 470.605980][ T2090] free_unref_page+0x3c6/0x600 [ 470.610738][ T2090] __put_page+0x8d/0xd0 [ 470.614892][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 470.620690][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 470.626165][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 470.631366][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 470.637350][ T2090] ? rw_verify_area+0x118/0x360 [ 470.642193][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 470.648166][ T2090] direct_splice_actor+0x126/0x1a0 [ 470.653277][ T2090] splice_direct_to_actor+0x369/0x970 [ 470.658656][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 470.664198][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.670430][ T2090] ? do_splice_to+0x190/0x190 [ 470.675106][ T2090] ? rw_verify_area+0x118/0x360 [ 470.679965][ T2090] do_splice_direct+0x1da/0x2a0 [ 470.684809][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 470.690354][ T2090] ? rw_verify_area+0x118/0x360 [ 470.695196][ T2090] do_sendfile+0x597/0xd00 [ 470.699614][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 470.704888][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 470.711120][ T2090] ? put_timespec64+0xda/0x140 [ 470.715885][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 470.721076][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 470.726351][ T2090] ? do_syscall_64+0x26/0x610 [ 470.731018][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 470.736298][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 470.741347][ T2090] do_syscall_64+0x103/0x610 [ 470.745933][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 470.751815][ T2090] RIP: 0033:0x457e29 [ 470.755706][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 470.775296][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 470.783698][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 470.791658][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 470.799619][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 470.807579][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 470.815544][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 470.829272][ T2090] BUG: Bad page state in process syz-executor.4 pfn:78d27 [ 470.837615][ T2090] page:ffffea0001e349c0 count:0 mapcount:0 mapping:ffff888094d62820 index:0x4 [ 470.846775][ T2090] shmem_aops [ 470.846781][ T2090] name:"memfd:" [ 470.850135][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 470.863803][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 470.873682][ T2090] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 470.885753][ T2090] page dumped because: non-NULL mapping [ 470.891351][ T2090] Modules linked in: [ 470.897290][ T2090] CPU: 1 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 470.907691][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.917737][ T2090] Call Trace: [ 470.921019][ T2090] dump_stack+0x172/0x1f0 [ 470.925348][ T2090] bad_page.cold+0xda/0xff [ 470.929779][ T2090] ? si_mem_available+0x320/0x320 [ 470.934798][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 470.939812][ T2090] ? kasan_check_read+0x11/0x20 [ 470.944658][ T2090] free_pages_check_bad+0x142/0x1a0 [ 470.949859][ T2090] free_unref_page+0x3c6/0x600 [ 470.954614][ T2090] __put_page+0x8d/0xd0 [ 470.958762][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 470.964561][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 470.970010][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 470.975316][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 470.981321][ T2090] ? rw_verify_area+0x118/0x360 [ 470.986167][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 470.992140][ T2090] direct_splice_actor+0x126/0x1a0 [ 470.997250][ T2090] splice_direct_to_actor+0x369/0x970 [ 471.002618][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 471.008159][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.014388][ T2090] ? do_splice_to+0x190/0x190 [ 471.019057][ T2090] ? rw_verify_area+0x118/0x360 [ 471.023902][ T2090] do_splice_direct+0x1da/0x2a0 [ 471.028749][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 471.034296][ T2090] ? rw_verify_area+0x118/0x360 [ 471.039141][ T2090] do_sendfile+0x597/0xd00 [ 471.043560][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 471.048838][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.055067][ T2090] ? put_timespec64+0xda/0x140 [ 471.059833][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 471.065023][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 471.070298][ T2090] ? do_syscall_64+0x26/0x610 [ 471.074969][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 471.080245][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 471.085264][ T2090] do_syscall_64+0x103/0x610 [ 471.089853][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.095824][ T2090] RIP: 0033:0x457e29 [ 471.099719][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.119326][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 471.127738][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 471.135725][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 471.143687][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 471.151837][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 471.159798][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 471.174669][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6f14e [ 471.188510][ T2090] page:ffffea0001bc5380 count:0 mapcount:0 mapping:ffff888094d62820 index:0x5 [ 471.200929][ T2090] shmem_aops [ 471.200972][ T2090] name:"memfd:" [ 471.207766][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 471.218374][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 471.230442][ T2090] raw: 0000000000000005 0000000000000000 00000000ffffffff 0000000000000000 [ 471.239281][ T2090] page dumped because: non-NULL mapping [ 471.248299][ T2090] Modules linked in: [ 471.252301][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 471.262781][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.272819][ T2090] Call Trace: [ 471.276103][ T2090] dump_stack+0x172/0x1f0 [ 471.280429][ T2090] bad_page.cold+0xda/0xff [ 471.284838][ T2090] ? si_mem_available+0x320/0x320 [ 471.289858][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 471.294875][ T2090] ? kasan_check_read+0x11/0x20 [ 471.299722][ T2090] free_pages_check_bad+0x142/0x1a0 [ 471.304914][ T2090] free_unref_page+0x3c6/0x600 [ 471.309669][ T2090] __put_page+0x8d/0xd0 [ 471.313819][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 471.319620][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 471.324986][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 471.330193][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 471.336272][ T2090] ? rw_verify_area+0x118/0x360 [ 471.341111][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 471.347084][ T2090] direct_splice_actor+0x126/0x1a0 [ 471.352201][ T2090] splice_direct_to_actor+0x369/0x970 [ 471.357567][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 471.363106][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.369338][ T2090] ? do_splice_to+0x190/0x190 [ 471.374009][ T2090] ? rw_verify_area+0x118/0x360 [ 471.378853][ T2090] do_splice_direct+0x1da/0x2a0 [ 471.383697][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 471.389241][ T2090] ? rw_verify_area+0x118/0x360 [ 471.394083][ T2090] do_sendfile+0x597/0xd00 [ 471.398499][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 471.403778][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.410008][ T2090] ? put_timespec64+0xda/0x140 [ 471.414772][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 471.419966][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 471.425245][ T2090] ? do_syscall_64+0x26/0x610 [ 471.429912][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 471.435213][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 471.440237][ T2090] do_syscall_64+0x103/0x610 [ 471.444823][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.450716][ T2090] RIP: 0033:0x457e29 [ 471.454604][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.474283][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 471.482704][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 471.490682][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 471.498745][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 471.506829][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 471.514792][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 471.531416][ T2090] BUG: Bad page state in process syz-executor.4 pfn:78cbb [ 471.539884][ T2090] page:ffffea0001e32ec0 count:0 mapcount:0 mapping:ffff888094d62820 index:0x6 [ 471.551234][ T2090] shmem_aops [ 471.551240][ T2090] name:"memfd:" [ 471.555904][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 471.568627][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 471.578625][ T2090] raw: 0000000000000006 0000000000000000 00000000ffffffff 0000000000000000 [ 471.589489][ T2090] page dumped because: non-NULL mapping [ 471.595240][ T2090] Modules linked in: [ 471.599184][ T2090] CPU: 1 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 471.609578][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.619620][ T2090] Call Trace: [ 471.622903][ T2090] dump_stack+0x172/0x1f0 [ 471.627242][ T2090] bad_page.cold+0xda/0xff [ 471.631687][ T2090] ? si_mem_available+0x320/0x320 [ 471.636721][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 471.641738][ T2090] ? kasan_check_read+0x11/0x20 [ 471.646587][ T2090] free_pages_check_bad+0x142/0x1a0 [ 471.651783][ T2090] free_unref_page+0x3c6/0x600 [ 471.656552][ T2090] __put_page+0x8d/0xd0 [ 471.660707][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 471.666507][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 471.671871][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 471.677087][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 471.683075][ T2090] ? rw_verify_area+0x118/0x360 [ 471.687920][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 471.693891][ T2090] direct_splice_actor+0x126/0x1a0 [ 471.698999][ T2090] splice_direct_to_actor+0x369/0x970 [ 471.704836][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 471.710377][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.716609][ T2090] ? do_splice_to+0x190/0x190 [ 471.721283][ T2090] ? rw_verify_area+0x118/0x360 [ 471.726129][ T2090] do_splice_direct+0x1da/0x2a0 [ 471.730980][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 471.736525][ T2090] ? rw_verify_area+0x118/0x360 [ 471.741370][ T2090] do_sendfile+0x597/0xd00 [ 471.745789][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 471.751068][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 471.757317][ T2090] ? put_timespec64+0xda/0x140 [ 471.762086][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 471.767280][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 471.772561][ T2090] ? do_syscall_64+0x26/0x610 [ 471.777232][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 471.782601][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 471.787635][ T2090] do_syscall_64+0x103/0x610 [ 471.792240][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 471.798124][ T2090] RIP: 0033:0x457e29 [ 471.802121][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 471.821721][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 471.832734][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 471.843220][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 471.851197][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 471.859166][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 471.867129][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 471.882980][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6f0b1 [ 471.890991][ T2090] page:ffffea0001bc2c40 count:0 mapcount:0 mapping:ffff888094d62820 index:0x7 [ 471.903338][ T2090] shmem_aops [ 471.903344][ T2090] name:"memfd:" [ 471.906833][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 471.921502][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 471.930278][ T2090] raw: 0000000000000007 0000000000000000 00000000ffffffff 0000000000000000 [ 471.942439][ T2090] page dumped because: non-NULL mapping [ 471.948178][ T2090] Modules linked in: [ 471.952123][ T2090] CPU: 1 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 471.962631][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.972678][ T2090] Call Trace: [ 471.976052][ T2090] dump_stack+0x172/0x1f0 [ 471.980380][ T2090] bad_page.cold+0xda/0xff [ 471.984790][ T2090] ? si_mem_available+0x320/0x320 [ 471.989824][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 471.994842][ T2090] ? kasan_check_read+0x11/0x20 [ 471.999689][ T2090] free_pages_check_bad+0x142/0x1a0 [ 472.004881][ T2090] free_unref_page+0x3c6/0x600 [ 472.009649][ T2090] __put_page+0x8d/0xd0 [ 472.013798][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 472.019599][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 472.024964][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 472.030168][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 472.036162][ T2090] ? rw_verify_area+0x118/0x360 [ 472.041007][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 472.046979][ T2090] direct_splice_actor+0x126/0x1a0 [ 472.052085][ T2090] splice_direct_to_actor+0x369/0x970 [ 472.057451][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 472.062994][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.069228][ T2090] ? do_splice_to+0x190/0x190 [ 472.073900][ T2090] ? rw_verify_area+0x118/0x360 [ 472.078747][ T2090] do_splice_direct+0x1da/0x2a0 [ 472.083590][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 472.089144][ T2090] ? rw_verify_area+0x118/0x360 [ 472.093988][ T2090] do_sendfile+0x597/0xd00 [ 472.098404][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 472.103683][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 472.109914][ T2090] ? put_timespec64+0xda/0x140 [ 472.114680][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 472.119873][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 472.125159][ T2090] ? do_syscall_64+0x26/0x610 [ 472.129830][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 472.135110][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 472.140147][ T2090] do_syscall_64+0x103/0x610 [ 472.144737][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.150618][ T2090] RIP: 0033:0x457e29 [ 472.154511][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.174127][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 472.182533][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 472.190496][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 472.198456][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 472.206421][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 472.214382][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 472.224340][ T2090] BUG: Bad page state in process syz-executor.4 pfn:78cb8 [ 472.231639][ T2090] page:ffffea0001e32e00 count:0 mapcount:0 mapping:ffff888094d62820 index:0x8 [ 472.240760][ T2090] shmem_aops [ 472.240765][ T2090] name:"memfd:" [ 472.244142][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 472.255689][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 472.264497][ T2090] raw: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 472.273170][ T2090] page dumped because: non-NULL mapping [ 472.278946][ T2090] Modules linked in: [ 472.282919][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 472.293326][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.303367][ T2090] Call Trace: [ 472.306657][ T2090] dump_stack+0x172/0x1f0 [ 472.310983][ T2090] bad_page.cold+0xda/0xff [ 472.315391][ T2090] ? si_mem_available+0x320/0x320 [ 472.320422][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 472.325456][ T2090] ? kasan_check_read+0x11/0x20 [ 472.330304][ T2090] free_pages_check_bad+0x142/0x1a0 [ 472.335494][ T2090] free_unref_page+0x3c6/0x600 [ 472.340287][ T2090] __put_page+0x8d/0xd0 [ 472.344440][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 472.350239][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 472.355604][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 472.360802][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 472.366790][ T2090] ? rw_verify_area+0x118/0x360 [ 472.371631][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 472.377605][ T2090] direct_splice_actor+0x126/0x1a0 [ 472.382708][ T2090] splice_direct_to_actor+0x369/0x970 [ 472.388072][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 472.393627][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.399857][ T2090] ? do_splice_to+0x190/0x190 [ 472.404531][ T2090] ? rw_verify_area+0x118/0x360 [ 472.409375][ T2090] do_splice_direct+0x1da/0x2a0 [ 472.414220][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 472.419766][ T2090] ? rw_verify_area+0x118/0x360 [ 472.424610][ T2090] do_sendfile+0x597/0xd00 [ 472.429030][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 472.434305][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 472.440533][ T2090] ? put_timespec64+0xda/0x140 [ 472.445299][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 472.450488][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 472.455762][ T2090] ? do_syscall_64+0x26/0x610 [ 472.460433][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 472.465707][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 472.470722][ T2090] do_syscall_64+0x103/0x610 [ 472.475313][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.481213][ T2090] RIP: 0033:0x457e29 [ 472.485130][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.504735][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 472.513135][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 472.521110][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 472.529074][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 472.537500][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 472.545463][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 472.554878][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6f142 [ 472.565622][ T2090] page:ffffea0001bc5080 count:0 mapcount:0 mapping:ffff888094d62820 index:0x9 [ 472.576676][ T2090] shmem_aops [ 472.576681][ T2090] name:"memfd:" [ 472.580043][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 472.592175][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 472.606865][ T2090] raw: 0000000000000009 0000000000000000 00000000ffffffff 0000000000000000 [ 472.617235][ T2090] page dumped because: non-NULL mapping [ 472.622946][ T2090] Modules linked in: [ 472.628912][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 472.639403][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.649443][ T2090] Call Trace: [ 472.652724][ T2090] dump_stack+0x172/0x1f0 [ 472.657049][ T2090] bad_page.cold+0xda/0xff [ 472.661469][ T2090] ? si_mem_available+0x320/0x320 [ 472.666486][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 472.671503][ T2090] ? kasan_check_read+0x11/0x20 [ 472.676361][ T2090] free_pages_check_bad+0x142/0x1a0 [ 472.681556][ T2090] free_unref_page+0x3c6/0x600 [ 472.686316][ T2090] __put_page+0x8d/0xd0 [ 472.690487][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 472.696371][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 472.701735][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 472.706948][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 472.712936][ T2090] ? rw_verify_area+0x118/0x360 [ 472.717793][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 472.723854][ T2090] direct_splice_actor+0x126/0x1a0 [ 472.728961][ T2090] splice_direct_to_actor+0x369/0x970 [ 472.734328][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 472.739869][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.746109][ T2090] ? do_splice_to+0x190/0x190 [ 472.750782][ T2090] ? rw_verify_area+0x118/0x360 [ 472.755628][ T2090] do_splice_direct+0x1da/0x2a0 [ 472.760469][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 472.766011][ T2090] ? rw_verify_area+0x118/0x360 [ 472.770856][ T2090] do_sendfile+0x597/0xd00 [ 472.775272][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 472.780545][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 472.786862][ T2090] ? put_timespec64+0xda/0x140 [ 472.791639][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 472.796828][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 472.802110][ T2090] ? do_syscall_64+0x26/0x610 [ 472.806779][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 472.812079][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 472.817105][ T2090] do_syscall_64+0x103/0x610 [ 472.821692][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 472.827582][ T2090] RIP: 0033:0x457e29 [ 472.831464][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 472.851051][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 472.859553][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 472.867514][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 472.875474][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 472.883434][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 472.891396][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 472.906701][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6eeb7 [ 472.918413][ T2090] page:ffffea0001bbadc0 count:0 mapcount:0 mapping:ffff888094d62820 index:0xa [ 472.932612][ T2090] shmem_aops [ 472.932618][ T2090] name:"memfd:" [ 472.936154][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 472.949917][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 472.959048][ T2090] raw: 000000000000000a 0000000000000000 00000000ffffffff 0000000000000000 [ 472.971190][ T2090] page dumped because: non-NULL mapping [ 472.976907][ T2090] Modules linked in: [ 472.980840][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 472.991251][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.001293][ T2090] Call Trace: [ 473.004578][ T2090] dump_stack+0x172/0x1f0 [ 473.008904][ T2090] bad_page.cold+0xda/0xff [ 473.013313][ T2090] ? si_mem_available+0x320/0x320 [ 473.018336][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 473.023464][ T2090] ? kasan_check_read+0x11/0x20 [ 473.028309][ T2090] free_pages_check_bad+0x142/0x1a0 [ 473.033500][ T2090] free_unref_page+0x3c6/0x600 [ 473.038261][ T2090] __put_page+0x8d/0xd0 [ 473.042409][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 473.048209][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 473.053575][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 473.058775][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 473.064769][ T2090] ? rw_verify_area+0x118/0x360 [ 473.069619][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 473.075593][ T2090] direct_splice_actor+0x126/0x1a0 [ 473.080699][ T2090] splice_direct_to_actor+0x369/0x970 [ 473.086076][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 473.091617][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.097846][ T2090] ? do_splice_to+0x190/0x190 [ 473.102515][ T2090] ? rw_verify_area+0x118/0x360 [ 473.107359][ T2090] do_splice_direct+0x1da/0x2a0 [ 473.112205][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 473.117856][ T2090] ? rw_verify_area+0x118/0x360 [ 473.122700][ T2090] do_sendfile+0x597/0xd00 [ 473.127117][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 473.132397][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.138627][ T2090] ? put_timespec64+0xda/0x140 [ 473.143393][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 473.148587][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 473.153864][ T2090] ? do_syscall_64+0x26/0x610 [ 473.158532][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 473.163810][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 473.168843][ T2090] do_syscall_64+0x103/0x610 [ 473.173431][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.179312][ T2090] RIP: 0033:0x457e29 [ 473.183200][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.202795][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 473.211320][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 473.219368][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 473.227419][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 473.235398][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 473.243361][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 473.257912][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6edbf [ 473.267005][ T2090] page:ffffea0001bb6fc0 count:0 mapcount:0 mapping:ffff888094d62820 index:0xb [ 473.277568][ T2090] shmem_aops [ 473.277573][ T2090] name:"memfd:" [ 473.280892][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 473.293267][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 473.303466][ T2090] raw: 000000000000000b 0000000000000000 00000000ffffffff 0000000000000000 [ 473.314020][ T2090] page dumped because: non-NULL mapping [ 473.321208][ T2090] Modules linked in: [ 473.327092][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 473.337490][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.347563][ T2090] Call Trace: [ 473.350853][ T2090] dump_stack+0x172/0x1f0 [ 473.355197][ T2090] bad_page.cold+0xda/0xff [ 473.359606][ T2090] ? si_mem_available+0x320/0x320 [ 473.364626][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 473.369639][ T2090] ? kasan_check_read+0x11/0x20 [ 473.374485][ T2090] free_pages_check_bad+0x142/0x1a0 [ 473.379692][ T2090] free_unref_page+0x3c6/0x600 [ 473.384448][ T2090] __put_page+0x8d/0xd0 [ 473.388609][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 473.394407][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 473.399772][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 473.404977][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 473.410961][ T2090] ? rw_verify_area+0x118/0x360 [ 473.415806][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 473.421776][ T2090] direct_splice_actor+0x126/0x1a0 [ 473.426883][ T2090] splice_direct_to_actor+0x369/0x970 [ 473.432251][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 473.437791][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.444034][ T2090] ? do_splice_to+0x190/0x190 [ 473.448706][ T2090] ? rw_verify_area+0x118/0x360 [ 473.453545][ T2090] do_splice_direct+0x1da/0x2a0 [ 473.458398][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 473.463938][ T2090] ? rw_verify_area+0x118/0x360 [ 473.468782][ T2090] do_sendfile+0x597/0xd00 [ 473.473196][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 473.478472][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.484704][ T2090] ? put_timespec64+0xda/0x140 [ 473.489464][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 473.494653][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 473.499926][ T2090] ? do_syscall_64+0x26/0x610 [ 473.504594][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 473.509869][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 473.514888][ T2090] do_syscall_64+0x103/0x610 [ 473.519471][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.525349][ T2090] RIP: 0033:0x457e29 [ 473.529233][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.548825][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 473.557226][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 473.565189][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 473.573150][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 473.581106][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 473.589064][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 473.603495][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6f050 [ 473.610753][ T2090] page:ffffea0001bc1400 count:0 mapcount:0 mapping:ffff888094d62820 index:0xc [ 473.623060][ T2090] shmem_aops [ 473.623065][ T2090] name:"memfd:" [ 473.626531][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 473.644032][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 473.652819][ T2090] raw: 000000000000000c 0000000000000000 00000000ffffffff 0000000000000000 [ 473.664841][ T2090] page dumped because: non-NULL mapping [ 473.670410][ T2090] Modules linked in: [ 473.676984][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 473.687393][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.697430][ T2090] Call Trace: [ 473.700712][ T2090] dump_stack+0x172/0x1f0 [ 473.705211][ T2090] bad_page.cold+0xda/0xff [ 473.709620][ T2090] ? si_mem_available+0x320/0x320 [ 473.714634][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 473.719648][ T2090] ? kasan_check_read+0x11/0x20 [ 473.724490][ T2090] free_pages_check_bad+0x142/0x1a0 [ 473.729677][ T2090] free_unref_page+0x3c6/0x600 [ 473.734430][ T2090] __put_page+0x8d/0xd0 [ 473.738575][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 473.744373][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 473.749737][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 473.754935][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 473.760918][ T2090] ? rw_verify_area+0x118/0x360 [ 473.765756][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 473.771728][ T2090] direct_splice_actor+0x126/0x1a0 [ 473.776833][ T2090] splice_direct_to_actor+0x369/0x970 [ 473.782373][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 473.787914][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.794141][ T2090] ? do_splice_to+0x190/0x190 [ 473.798813][ T2090] ? rw_verify_area+0x118/0x360 [ 473.803653][ T2090] do_splice_direct+0x1da/0x2a0 [ 473.808494][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 473.814034][ T2090] ? rw_verify_area+0x118/0x360 [ 473.818876][ T2090] do_sendfile+0x597/0xd00 [ 473.823292][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 473.828558][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 473.834783][ T2090] ? put_timespec64+0xda/0x140 [ 473.839547][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 473.844738][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 473.850085][ T2090] ? do_syscall_64+0x26/0x610 [ 473.854756][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 473.860031][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 473.865066][ T2090] do_syscall_64+0x103/0x610 [ 473.869652][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 473.875531][ T2090] RIP: 0033:0x457e29 [ 473.879420][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 473.899010][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 473.907411][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 473.915381][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 473.923338][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 473.931295][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 473.939257][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 473.952050][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6f0e1 [ 473.961401][ T2090] page:ffffea0001bc3840 count:0 mapcount:0 mapping:ffff888094d62820 index:0xd [ 473.973696][ T2090] shmem_aops [ 473.973701][ T2090] name:"memfd:" [ 473.977175][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 473.990879][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 473.999641][ T2090] raw: 000000000000000d 0000000000000000 00000000ffffffff 0000000000000000 [ 474.011590][ T2090] page dumped because: non-NULL mapping [ 474.017302][ T2090] Modules linked in: [ 474.021232][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 474.031623][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.041662][ T2090] Call Trace: [ 474.044951][ T2090] dump_stack+0x172/0x1f0 [ 474.049289][ T2090] bad_page.cold+0xda/0xff [ 474.053697][ T2090] ? si_mem_available+0x320/0x320 [ 474.058715][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 474.063736][ T2090] ? kasan_check_read+0x11/0x20 [ 474.068578][ T2090] free_pages_check_bad+0x142/0x1a0 [ 474.073775][ T2090] free_unref_page+0x3c6/0x600 [ 474.078530][ T2090] __put_page+0x8d/0xd0 [ 474.082675][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 474.088475][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 474.093835][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 474.099036][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 474.105023][ T2090] ? rw_verify_area+0x118/0x360 [ 474.109867][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 474.115839][ T2090] direct_splice_actor+0x126/0x1a0 [ 474.120940][ T2090] splice_direct_to_actor+0x369/0x970 [ 474.126315][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 474.131857][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.138084][ T2090] ? do_splice_to+0x190/0x190 [ 474.142760][ T2090] ? rw_verify_area+0x118/0x360 [ 474.147601][ T2090] do_splice_direct+0x1da/0x2a0 [ 474.152451][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 474.157999][ T2090] ? rw_verify_area+0x118/0x360 [ 474.162842][ T2090] do_sendfile+0x597/0xd00 [ 474.167259][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 474.172532][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 474.178763][ T2090] ? put_timespec64+0xda/0x140 [ 474.183525][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 474.188713][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 474.193989][ T2090] ? do_syscall_64+0x26/0x610 [ 474.198659][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 474.203939][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 474.208976][ T2090] do_syscall_64+0x103/0x610 [ 474.213561][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.219446][ T2090] RIP: 0033:0x457e29 [ 474.223337][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.242925][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 474.251333][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 474.259294][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 474.267252][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 474.275214][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 474.283172][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 474.297397][ T2090] BUG: Bad page state in process syz-executor.4 pfn:6f16e [ 474.306828][ T2090] page:ffffea0001bc5b80 count:0 mapcount:0 mapping:ffff888094d62820 index:0xe [ 474.317039][ T2090] shmem_aops [ 474.317045][ T2090] name:"memfd:" [ 474.320365][ T2090] flags: 0x1fffc000008000c(uptodate|dirty|swapbacked) [ 474.333046][ T2090] raw: 01fffc000008000c dead000000000100 dead000000000200 ffff888094d62820 [ 474.342918][ T2090] raw: 000000000000000e 0000000000000000 00000000ffffffff 0000000000000000 [ 474.353845][ T2090] page dumped because: non-NULL mapping [ 474.360646][ T2090] Modules linked in: [ 474.366862][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 474.377260][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.387303][ T2090] Call Trace: [ 474.390589][ T2090] dump_stack+0x172/0x1f0 [ 474.394923][ T2090] bad_page.cold+0xda/0xff [ 474.399342][ T2090] ? si_mem_available+0x320/0x320 [ 474.404362][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 474.409376][ T2090] ? kasan_check_read+0x11/0x20 [ 474.414224][ T2090] free_pages_check_bad+0x142/0x1a0 [ 474.419412][ T2090] free_unref_page+0x3c6/0x600 [ 474.424165][ T2090] __put_page+0x8d/0xd0 [ 474.428316][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 474.434123][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 474.439485][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 474.444688][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 474.450671][ T2090] ? rw_verify_area+0x118/0x360 [ 474.455514][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 474.461484][ T2090] direct_splice_actor+0x126/0x1a0 [ 474.466585][ T2090] splice_direct_to_actor+0x369/0x970 [ 474.471960][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 474.477501][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.483732][ T2090] ? do_splice_to+0x190/0x190 [ 474.488404][ T2090] ? rw_verify_area+0x118/0x360 [ 474.493244][ T2090] do_splice_direct+0x1da/0x2a0 [ 474.498088][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 474.503629][ T2090] ? rw_verify_area+0x118/0x360 [ 474.508470][ T2090] do_sendfile+0x597/0xd00 [ 474.512890][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 474.518167][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 474.524396][ T2090] ? put_timespec64+0xda/0x140 [ 474.529156][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 474.534348][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 474.540130][ T2090] ? do_syscall_64+0x26/0x610 [ 474.544799][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 474.550077][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 474.555092][ T2090] do_syscall_64+0x103/0x610 [ 474.559680][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.565556][ T2090] RIP: 0033:0x457e29 [ 474.569443][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.589032][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 474.597439][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 474.605397][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 474.613359][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 474.621320][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 474.629278][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff [ 474.644719][ T2090] BUG: Bad page state in process syz-executor.4 pfn:78cb4 [ 474.651980][ T2090] page:ffffea0001e32d00 count:0 mapcount:0 mapping:ffff888094d62820 index:0xf [ 474.664300][ T2090] shmem_aops [ 474.664306][ T2090] name:"memfd:" [ 474.667634][ T2090] flags: 0x1fffc000008000e(referenced|uptodate|dirty|swapbacked) [ 474.686287][ T2090] raw: 01fffc000008000e dead000000000100 dead000000000200 ffff888094d62820 [ 474.696215][ T2090] raw: 000000000000000f 0000000000000000 00000000ffffffff 0000000000000000 [ 474.707227][ T2090] page dumped because: non-NULL mapping [ 474.712820][ T2090] Modules linked in: [ 474.718068][ T2090] CPU: 0 PID: 2090 Comm: syz-executor.4 Tainted: G B 5.0.0-rc7-next-20190222 #41 [ 474.728468][ T2090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.738509][ T2090] Call Trace: [ 474.741795][ T2090] dump_stack+0x172/0x1f0 [ 474.746124][ T2090] bad_page.cold+0xda/0xff [ 474.750529][ T2090] ? si_mem_available+0x320/0x320 [ 474.755551][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 474.760563][ T2090] ? kasan_check_read+0x11/0x20 [ 474.765409][ T2090] free_pages_check_bad+0x142/0x1a0 [ 474.770598][ T2090] free_unref_page+0x3c6/0x600 [ 474.775353][ T2090] __put_page+0x8d/0xd0 [ 474.779502][ T2090] page_cache_pipe_buf_release+0x12b/0x180 [ 474.785298][ T2090] iter_file_splice_write+0x7d1/0xbe0 [ 474.790659][ T2090] ? atime_needs_update+0x5f0/0x5f0 [ 474.795855][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 474.801834][ T2090] ? rw_verify_area+0x118/0x360 [ 474.806677][ T2090] ? page_cache_pipe_buf_confirm+0x2b0/0x2b0 [ 474.812644][ T2090] direct_splice_actor+0x126/0x1a0 [ 474.817748][ T2090] splice_direct_to_actor+0x369/0x970 [ 474.823115][ T2090] ? generic_pipe_buf_nosteal+0x10/0x10 [ 474.828658][ T2090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.834892][ T2090] ? do_splice_to+0x190/0x190 [ 474.839584][ T2090] ? rw_verify_area+0x118/0x360 [ 474.844430][ T2090] do_splice_direct+0x1da/0x2a0 [ 474.849276][ T2090] ? splice_direct_to_actor+0x970/0x970 [ 474.854817][ T2090] ? rw_verify_area+0x118/0x360 [ 474.859659][ T2090] do_sendfile+0x597/0xd00 [ 474.864076][ T2090] ? do_compat_pwritev64+0x1c0/0x1c0 [ 474.869351][ T2090] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 474.875584][ T2090] ? put_timespec64+0xda/0x140 [ 474.880348][ T2090] __x64_sys_sendfile64+0x1dd/0x220 [ 474.885540][ T2090] ? __ia32_sys_sendfile+0x230/0x230 [ 474.890814][ T2090] ? do_syscall_64+0x26/0x610 [ 474.895483][ T2090] ? lockdep_hardirqs_on+0x418/0x5d0 [ 474.900757][ T2090] ? trace_hardirqs_on+0x67/0x230 [ 474.905774][ T2090] do_syscall_64+0x103/0x610 [ 474.910359][ T2090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 474.916241][ T2090] RIP: 0033:0x457e29 [ 474.920128][ T2090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 474.939717][ T2090] RSP: 002b:00007f2fef3b6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 474.948114][ T2090] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000457e29 [ 474.956076][ T2090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 474.964036][ T2090] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 474.971996][ T2090] R10: 0000000000080003 R11: 0000000000000246 R12: 00007f2fef3b76d4 [ 474.979959][ T2090] R13: 00000000004c4dce R14: 00000000004d8af8 R15: 00000000ffffffff