Warning: Permanently added '10.128.0.119' (ECDSA) to the list of known hosts. 2018/12/11 20:50:00 fuzzer started 2018/12/11 20:50:02 dialing manager at 10.128.0.26:34565 2018/12/11 20:50:02 syscalls: 1 2018/12/11 20:50:02 code coverage: enabled 2018/12/11 20:50:02 comparison tracing: enabled 2018/12/11 20:50:02 setuid sandbox: enabled 2018/12/11 20:50:02 namespace sandbox: enabled 2018/12/11 20:50:02 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/11 20:50:02 fault injection: enabled 2018/12/11 20:50:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/11 20:50:02 net packet injection: enabled 2018/12/11 20:50:02 net device setup: enabled 20:53:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = memfd_create(&(0x7f0000000100)='#em3#/\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000400), 0x24, 0x0) fchmod(r0, 0x0) syzkaller login: [ 226.523988] IPVS: ftp: loaded support on port[0] = 21 20:53:07 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x12a0a, 0x0) write(r0, &(0x7f0000000040)='s', 0x1) [ 226.790255] IPVS: ftp: loaded support on port[0] = 21 20:53:07 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x3, 0x0) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000000)={0x2, "47aa688707d07c3e75a9b12884890b470c10ef2687823d58553c0ff48f571457"}) [ 227.139456] IPVS: ftp: loaded support on port[0] = 21 20:53:07 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x31) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x88, 0xfffffffffffffe01, 0xca}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 227.633221] IPVS: ftp: loaded support on port[0] = 21 20:53:08 executing program 4: syz_execute_func(&(0x7f00000002c0)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mknod(&(0x7f0000f80000)='./file0\x00', 0x1042, 0x0) execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) creat(&(0x7f0000000000)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000080)="e91f7189591e9233614b00", 0x109) dup2(r0, r1) execve(&(0x7f00000000c0)="e91f7189591e9233614b00", 0x0, 0x0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x842, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 228.160325] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.176375] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.203354] device bridge_slave_0 entered promiscuous mode [ 228.223897] IPVS: ftp: loaded support on port[0] = 21 [ 228.410033] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.425067] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.433557] device bridge_slave_1 entered promiscuous mode 20:53:09 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x21, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x400200007fd, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$admmidi(0x0, 0x67, 0x2c80) write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0xffffff84) r1 = dup2(r0, r0) write$P9_RREMOVE(r1, &(0x7f0000000040)={0x7}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) [ 228.571575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 228.705762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 228.730395] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.758414] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.772172] device bridge_slave_0 entered promiscuous mode [ 228.880600] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.893496] IPVS: ftp: loaded support on port[0] = 21 [ 228.903270] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.910725] device bridge_slave_1 entered promiscuous mode [ 229.012521] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.069577] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.107953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.224358] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.240538] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.251137] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.271019] device bridge_slave_0 entered promiscuous mode [ 229.439329] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.453385] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.462135] device bridge_slave_1 entered promiscuous mode [ 229.549318] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 229.600155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.634724] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 229.760101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 229.781140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 229.788031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 229.823951] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.838900] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.851843] device bridge_slave_0 entered promiscuous mode [ 229.882853] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 229.901425] team0: Port device team_slave_0 added [ 229.921428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 229.930281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.016806] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.037185] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.045242] device bridge_slave_1 entered promiscuous mode [ 230.133032] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.140554] team0: Port device team_slave_1 added [ 230.168289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 230.187403] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.299557] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 230.322987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.346387] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 230.375930] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 230.403397] team0: Port device team_slave_0 added [ 230.419282] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.519206] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 230.534015] team0: Port device team_slave_1 added [ 230.548151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.565454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.582468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.612792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 230.619634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.632744] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 230.689607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.709524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.734244] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 230.745545] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.753326] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.760772] device bridge_slave_0 entered promiscuous mode [ 230.772074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.782549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.794319] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 230.831001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.857958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.867813] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.879890] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.903869] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.922006] device bridge_slave_1 entered promiscuous mode [ 230.948017] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 230.967019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.982387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.996860] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.041086] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.078812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.096776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.114784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 231.145347] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 231.162581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 231.174111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.204456] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.231914] team0: Port device team_slave_0 added [ 231.289944] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.320734] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.328006] device bridge_slave_0 entered promiscuous mode [ 231.394020] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.431815] team0: Port device team_slave_1 added [ 231.439193] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.447855] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.462052] device bridge_slave_1 entered promiscuous mode [ 231.535645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 231.585884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 231.601424] team0: Port device team_slave_0 added [ 231.631894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 231.671250] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 231.678116] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 231.691770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 231.723531] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 231.732757] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 231.799563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 231.812146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 231.829624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 231.849700] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 231.864663] team0: Port device team_slave_1 added [ 231.883878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.901868] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 231.910534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 231.926222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.017575] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 232.024638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 232.044050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 232.057924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 232.086807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.134001] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.171656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 232.186733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.201754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 232.209189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 232.225357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.262334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.370550] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 232.401950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.409960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.434624] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.441181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.448268] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.454676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.479051] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.519615] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 232.551899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.559949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.632259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 232.656696] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.680179] team0: Port device team_slave_0 added [ 232.772811] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.779247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.786016] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.792429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.831891] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 232.842781] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.850258] team0: Port device team_slave_1 added [ 232.903592] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.931839] team0: Port device team_slave_0 added [ 233.004878] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.041193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.049152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.076545] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.087849] team0: Port device team_slave_1 added [ 233.131927] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 233.141974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 233.149856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.244158] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.255329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.267353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.285173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 233.305377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 233.318893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 233.361689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.368846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.381919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 233.443175] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 233.540251] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 233.558756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 233.568379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 233.613597] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.619986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.626718] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.633134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.648655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.662745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 233.675697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.683815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.704788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 233.731681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.144762] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.151305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.157973] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.164441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.183930] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 234.693686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 234.897255] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.903690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.910410] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.916838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.949618] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.155735] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.162179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.168847] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.175278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.208835] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 235.716525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.734372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 237.872649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.079692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.392087] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.592729] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 238.643201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.868130] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 238.882953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 238.899925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.053653] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 239.121290] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.127508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.141593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.338018] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.348546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.596833] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 239.611841] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.618029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.628404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.884849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.191721] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.233115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.320552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.485325] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.501525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.512020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.729116] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.773349] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 241.011230] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.200425] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.221399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.236657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.281807] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 241.290340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 241.308137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.703847] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.722278] 8021q: adding VLAN 0 to HW filter on device team0 20:53:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000180)) preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6}}, {{@in=@remote}, 0x0, @in=@local}}, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000600)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000400)) 20:53:22 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000100)=""/114, 0x21b) r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) [ 242.481728] hrtimer: interrupt took 46026 ns 20:53:23 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000100)=""/114, 0x21b) r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 20:53:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000180)) preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6}}, {{@in=@remote}, 0x0, @in=@local}}, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000000600)) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000400)) 20:53:23 executing program 0: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000100)=""/114, 0x21b) r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 20:53:23 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:23 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 243.185634] binder: 7535:7536 ioctl c018620b 20000000 returned -14 20:53:23 executing program 1: unshare(0x20040600) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7002) [ 243.272819] binder: 7546:7547 ioctl c018620b 20000000 returned -14 20:53:23 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000000280)='westwood\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc359, 0x8, 0x2, 0x2, 0x0, 0x5, 0x88, 0x9, 0x800, 0x401, 0x7f, 0x2, 0x1f, 0x5, 0x1, 0x4000000, 0xfffffffffffffffc, 0xffffffffffff0000, 0xfffffffffffffff7, 0x5, 0x8000, 0x9, 0x79c0657, 0x1ff, 0x6, 0x4, 0x3000000, 0x400, 0xfffffffffffff801, 0x80000001, 0x80, 0xdb, 0xffffffffffff0b30, 0x675, 0x80000000, 0x401, 0x0, 0x0, 0x6, @perf_bp, 0x10, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1f}, r1, 0x6, r0, 0x8) r2 = socket(0x10, 0x3, 0xa) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x20000, 0x0) write$cgroup_pid(r3, &(0x7f0000000340)=r1, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000080)="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") sendfile(r2, r4, &(0x7f0000000040)=0x100000, 0xfffffffe) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) 20:53:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000001c0)={0x0, r1/1000+30000}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f0000000180)=0x80000000002, 0x93) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x0, 0x5}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x80, 0x4) sendto$inet(r0, &(0x7f0000000100), 0xfffffffffffffdf4, 0x0, 0x0, 0x0) 20:53:24 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x3ff) connect$inet(r2, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x326, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x22b, 0x0) close(r1) close(r2) 20:53:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents(r0, &(0x7f0000000100)=""/114, 0x21b) r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) 20:53:24 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:24 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") bpf$PROG_LOAD(0x5, &(0x7f0000002000)={0xf, 0x4, &(0x7f0000006000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0xffffffc5, 0x1, 0x4}]}, &(0x7f0000000080)="73797a6b6a700183f4f69a28b4a913ce7cbc91a7656c6c657200", 0xffffffff, 0x1000, &(0x7f0000008000)=""/4096}, 0x48) 20:53:24 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000000280)='westwood\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc359, 0x8, 0x2, 0x2, 0x0, 0x5, 0x88, 0x9, 0x800, 0x401, 0x7f, 0x2, 0x1f, 0x5, 0x1, 0x4000000, 0xfffffffffffffffc, 0xffffffffffff0000, 0xfffffffffffffff7, 0x5, 0x8000, 0x9, 0x79c0657, 0x1ff, 0x6, 0x4, 0x3000000, 0x400, 0xfffffffffffff801, 0x80000001, 0x80, 0xdb, 0xffffffffffff0b30, 0x675, 0x80000000, 0x401, 0x0, 0x0, 0x6, @perf_bp, 0x10, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1f}, r1, 0x6, r0, 0x8) r2 = socket(0x10, 0x3, 0xa) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x20000, 0x0) write$cgroup_pid(r3, &(0x7f0000000340)=r1, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000080)="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") sendfile(r2, r4, &(0x7f0000000040)=0x100000, 0xfffffffe) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) 20:53:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'sit0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000280)={{0x2, 0x4e21, @empty}, {0x1, @link_local}, 0x12, {0x2, 0x4e21, @loopback}, 'veth1_to_bond\x00'}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000040)=@ipv6_newaddr={0x40, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffffffffffff1bb}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0xff12}}, 0x0) 20:53:24 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0xffff, 0x0) [ 244.523662] binder: 7649:7650 ioctl c018620b 20000000 returned -14 20:53:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) [ 244.722992] binder: 7670:7672 ioctl c018620b 20000000 returned -14 20:53:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:25 executing program 2: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r0, 0x0, 0x9, &(0x7f0000000280)='westwood\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xc359, 0x8, 0x2, 0x2, 0x0, 0x5, 0x88, 0x9, 0x800, 0x401, 0x7f, 0x2, 0x1f, 0x5, 0x1, 0x4000000, 0xfffffffffffffffc, 0xffffffffffff0000, 0xfffffffffffffff7, 0x5, 0x8000, 0x9, 0x79c0657, 0x1ff, 0x6, 0x4, 0x3000000, 0x400, 0xfffffffffffff801, 0x80000001, 0x80, 0xdb, 0xffffffffffff0b30, 0x675, 0x80000000, 0x401, 0x0, 0x0, 0x6, @perf_bp, 0x10, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1f}, r1, 0x6, r0, 0x8) r2 = socket(0x10, 0x3, 0xa) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x20000, 0x0) write$cgroup_pid(r3, &(0x7f0000000340)=r1, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000080)="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") sendfile(r2, r4, &(0x7f0000000040)=0x100000, 0xfffffffe) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='westwood\x00', 0x9) 20:53:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:25 executing program 5: socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/218, 0xda}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x2, 0x0) [ 245.207980] binder: 7688:7690 ioctl c018620b 20000000 returned -14 20:53:25 executing program 3: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) write$selinux_attr(0xffffffffffffffff, &(0x7f0000000080)='system_u:object_r:ipmi_device_t:s0\x00', 0x23) 20:53:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r0, &(0x7f0000007f40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x0, @mcast2}, 0x80, 0x0}}], 0x1, 0x0) 20:53:25 executing program 4: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000072ff8)={0xffffffff}, 0x0, 0x8) dup2(r1, r0) io_setup(0x7e, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)='n', 0x1}]) 20:53:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:25 executing program 5: r0 = socket$inet6(0xa, 0x200000000001, 0x0) r1 = memfd_create(&(0x7f0000001fc1)="00ac3d9dd2dbe6bfb408ed634a8e84d44e129b1f09bd112b865416a3b3ae309f393fef6fa46b01323ea19c86781c9f841935de975f097ef3591222705ec10f", 0x0) write(r1, &(0x7f0000002000)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) 20:53:25 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0xcc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, &(0x7f0000001780)="aefa654b5feb73249cc803000000145b32ad1de6c38ad17c49f044f42d395c3d5ba7b68b6581eca27e8ff8bf396f9a2b8396", 0x0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001680)={r0, &(0x7f00000005c0)="5377c282aeb8f6b7a3856cb71d30bfe96d481350b57a153f8c3ba447c121d6090c51533286320ac86bf52337d5e50a6a1e58ec514c0f1c2030442a8075a09a398279be04a384115b83e169b704a907b59f62dae351bc0c6972b9b67b6db1061855a2bd5591446fb7358d567167f5a410b9a863549b38f2c78229bea420dc001dd5d5afaf6bedd5b55b79a2aa87c4d269b183e9c45fa05e1ad2d86e0f81b9b10522561a3ff6d1ab528627575d30ca425374b7130d5531bb937685ab2307ea2f9181fd890a2c4ce307d5b2fc308238a770381f96aec48f3140b52e7b449c2d35bcb1a88fdece23792687235f12fb44e9d895aa11a66765a6c441651cd7a604ddcea6c45ed149430c75b9f51374e5f151a5186b258090482ae1f394a97284a683f6a57a89d4bdb03ae1e4198c041a425c149d1a35ce18d9862c96a13165436be367d0929c65664e40c982c18ef8f6b23646a752ae695aa5974ded49328970b6662a4c9f71cdd1580e39d38af7ca351823470c3e4683256e28cf8ead8ff195e3597026f983fef2c6601586898a25439aec74c6da867d79c3177e8955b972126b0ada96849d99b02a45b7beda78f98b6d23366abc7804b7a92660675765bc95181237a52681aefdc6e47e8223d354faacb08bd7791705c21b9eba58c2a175ba67dac4c7fb4bd0590434f3557562c1ae4b5a55f261d4cec8329440b850d044eff21fc377a64bebf7d3eb39d6abcf09a0437fe573ed9cda173b7785c5f051a2e0038ecf1f7a55ae17db01fefd5d7a035662228572815148579bd2b007525016ac60722b45ba7c1180fd38c53cae5d35aaaaf0eb1dc16eff01c9939b370c594a72253c8abd69d55c22515c3bd359004fba30a0d3725fef2648e6979b7577d2b9ec0c2130986071ccb6303794c5b2e464d79f4d77c8134ad00e0fe79059b00affc5ded36fed84df29018b1f9b5ff30dbe1b1a21a93d7068ee55bc94b7717556e5aa918678d92812094927615cedbec8ccb13929cbe0097b1de6f08d66a740c7f430fbc98561872982f398d0f933fa6c283a8cd08c48b0bfab71b71f06ccc385e37a60507dac0ca1caa073851b670fae000f3146947b8bb4a01cb26662bf81ced6f4d0d401e3fdf8c826fa424d37c121d3da8773c7eeb6281a3d491bb62c78a116318c1fd42e0260206bd1c25ad466644c5b953808d65661e47626c1792b5885043a887997af7c92b8430d3e4c904a813f3cc3ca54f5e3ea66a54c3350d07ccc84f63d26464efc34add782c87bb5027cecfb4820bf4acd2e89a63c5ccd36f71728cfba061e0a6579b01f4ed86952e7a800b1fb247ac19cee3acf99d80ce4927c7e7582456e48ae3e3a4663f66841683f8cfdced992b71fac387871f7f0097cb05eb00aa94fc464076ee3470513ef32660b8e1c6f9060e705a2460b175a4fed6c7f9444676710e54970d6b66edee144bc10509e96ba3a24115873c6d4ed73cdcb43192168ecbbfd3ab1660031e98593d5c883a45bac7afa03bbe4c5b49a0fd937db3bb54c3ac33a87821e713c702c8f3950618be1113602d1285200117aaba4ab533e7a59b0af214158b762609824fa612647ba6ded844b56aaf3bb92043de1ed6142ca92eace4b910241a64a30ae4a8022e718c399c79f448b48aa33d0cd0518284c6e736679c7dfae86de01997b932cc2d3c0a524e078647a7ab2e91076ab321b26ed85e2e397f9108b2cd4ac66e5e136ae1656b8ce38d58620ddff6be013212b981ffe71f229ec6268af05bca2eee187fdfd8172630f34167dcbd85fc4fa312be9628b5d153f11062e65a6774d5dac889ab6eda4d879d49f2d6b6ee053372a67a2d61670e24c2e5a80d523c1ab3c9a7c7c42ec49f5361a21a1f367d92a4d8705c44c2abc33a47df753b5bfe8957c0271670b4195eb83e6f8393e780934b272b4b0b2098d1ed7cc719cd81c788959a5ba85850fd43b63c15e0a1ec41f1af3d156f61bbb50eb7d147ca53608cac65eb5c7e9b59281a1f765cf4b5d5d77a95061b2af07edf19b27bfb05c0b040737325274be84764abcdaab55d448582cf10197674a4c5755a07331a887b8fe7a5bf7ea6edef1427bc5cefd9e5dbf7da429326ad774d55ca4b402e5ad09e959b46d5c001c73b9de483f20b2929ec57c3bb3b916b141041c8bd7dcc0536455352a476dfae2270edc4dfa0379e1a007728b09cadb210ae024355316b31a0223d3b04893c328357b69ce8f8f84a6cb77c52d3e5c9a4a862692b1adfda5fe68a707570b9158162233dd8aa43947c3026b100ed601fc97b5ce73527b35f3bcafa81c594df1c2c352476c43b22f30403870c58f46549cbfdcee72cad27514285e3c084ab2f0bc54fa51c7364bee38f9425ad118a4fd3af07c36f055bc2879844188ce8906e3a0c23e901823f36d5012b16d85aface28690ef1734256cfd3262b834e07d265327de21b83adba1f61d24631abd3c5c48592c3971db11c757d03f45a7ef2befaa5552f0376e2344f88d2e573db927ba86844c8be71f580f1ecf39709f5ef8cfe07be972e728fc043c563a054e66abd6798821d0adf1c0e5f314050d74b3d870eb018a376098f36e299dd4f8028fb3c469bf5c4734ed5cf77bf1ed55d034671c20e398480898f5c0e21422c94106cb513cbc4278ae91f2c9b5407528a9e25d6c828a974ea3734bcb4fd420281d8870917758659a69b74f90e089b0155c3271cce0d11801c8376801ec96b51cc61533973af680a1240efbdac8e68baf01426695a76ea1fcbeccdbd9a221b3c3b991023b79975075471e36fabfdeedeacde60f08529d0b16feec6f892d5c3d817d53fb70f7a91dfadd082558b673c25b6be5839b111043e2cbf27d082d261b9ca21f997b505c0459dd280a4a04a8e9395c44f05a0cfa43d00132dc32bb74a382c8cc4ff96648c636c93cc96f35e4def304c8c1a3c0e867121228b78ee39272c48a19dd0bdbc2765f93044cf554d6a6bd52b6fd10c4863316267c2d7da90e8fb2d20ce82133d2249c649470d280357978ff6b4e394c1fe35054fc8bf54397e07c9b34ec2848a4947773d9c7627f6ad744fccdd10454a08ee1043747df14875528da8970cd662a573f947ae566a6ebff5c231d21c4f05018b47eaeb234218be9f7bf0f1968923e247070104711cc5fd05cdf13def4fe3cea98e18bd0662aff175eaf5d2c64a41179f988c9bee59d56bb798ac706eb2c4ba46fc113541491afb51c2c848a80d5028d7ad221aea582b267a46a2c257c1c139b9572001c779b165957bf0bf0d3e09de95b04279eda651e2cd76245f3a321456a7e70a5dec08c5a47f9b0412409fded21d8ee23f00e5f22d819b4b60887612eb3adceb7494482822ee3767a70839510121a367e8c4c4ce37e2f10cadbc99d1c440cc56198ac28bb3bc7deaa41c8c16def904115e27e0a49a4543074a5d729d2dbf4106647f0ff5363d9d4b0913ac3b1e7c2ce602fc3d001dd265d41a590b0fe725fd7893bc77ac9b54063ef6e5d8032c9c7457078687496b492da1c7c9bf2298cc7e4bbdc96e5ed87ede54fa4564c64d6544f311bb1efdb14739021290d35bd124230f1caab7b5372818fbd5f41e1acedc97dbded1cfa1d5eb65f921931ef77ff4b46aefa51c6367521356d689f146c88e2b3a9fbdb568801273dce144371ecb3e84774b0cb36a29faa2b5eb5ea4d3e3f478795fe94334fb5b3df33dc361941d0eccb6b2c1d357bbe7b394d3158e4658790d6d8024ded6cbc8a2867d47c7ed8e0144c12b148c0f06547fc60c4421263530d498ed0ce9107ae40909f4e02b0287f02b9f8a3c5117c0e2f6e0d7f809aa0326ff95c5b9bc7a611b68fd1c055c1f6c70e3ffbded9d160b3af324562d862d59bd7f3485cbcfdf341b4abb228ba7d64831ec4d066bcff54134fc6c645c44086a1ffa0ab1e5b01bc3283bbb654f8f6db45da8c961030394503effd01ee90378cfca7bd155771977bb0959eb0814f92fa606b782ff10fa8e3141dc678faab7013e76f5b8dbfc7b096935434146166dbff056a6e840f25db6de6b1846a33b954ebe53cb1065a4e21f11c29713249e236f1ad015bdbaa8f44e96ce13769b3b139a6bba20e7a10aed09c1f29a75fca4e6c7ffbfa91f34f9d6447c37c95193ab4196833e53beaed1666edc7c88cef03e5877ce1c3b2274e5d28d9005f81b4a94bf0d1016d25a90703e7e996c2e57694e0ae4e4d002642a1de1ef58a873000555566d311fd8ccc472abc4f90c47a0d0f00f5a6e160388cf4847738bb205fed7aea286cf5c433a64f7005a4a943c46b9e6f971b7bb165e89c1eaf649606334df117a9de9d133bbb5ae132166b6031a3919f8faaecd431f8ddd23a4dbb14850c0d02825bc1a6dbf09766a65d76ee3a4314edd5fcdbcc2a3724a5b5388479a4d86baecbb253549c8a36ff00f0e177d2ae776876672d162d7cb2d6a29472abe7d1742a8f23ba2abe49f8a4aca3a0cc74519ba32938f1015109cbd7e545be54960ffedebbf461aea48dcfa626656e014ba95caca0cd507b5aecb623b90597f32642da5024c7c46959b1bc82adde8ce0925eebc28dc0beccd951c73c7ea664cf1017cf784636df24d828908e4ada80b3ee047dd42e47e75e103e14081a21968c243f4f216349b42aee095a868c26794bbfaef02b12a86eafbdd76b61ed13d3175043ec390fc98b750ec18363c5c01a25d8f4a2b30d71ecdd0f19942b41e6c69da6947bf4742a82e01c8db4dac57c0267c6aec78b67057a867741ac97bbb9ad3cb58007547377fc7c7749922562e7bb3f30f8d16289108ddfebadba704504dfde78c13eaef5730eea2c84ee4a515229105b69200624f08f325ab058a088c1c167456ffc0bb611a74d8f10d07c6e799af269f776d9ddc05fd033b4b2aa140c17f36b7e63b097860a0282b43bd815d62f09266f241142d2c81f440440006b19bfc44a461024694863cd47ea0097d89dcf0c2edb653cf84131701728c6f4d60e5715cc29b9973c612c2349fd557af6e2ea237c2825d79d450c67523c67835f8c85fb0069fae0fc14169459c4da534b84d6b98ee5249b875dcab1b8af9fa1594f474a262d4909871f6e79a95744517bd2aa41abb594719b568bba6c11122b13819c62544098eff75dcaad2cc7b2b23b65fd71a854ef9e70ef2862641467418af8eeef8d21107b402724c89b458eed86b06410810a60cd59e2483fe3095628980c66af1d696ba362e6966a23f217fefdffaffcaa595cd20892ddd284b3b586b4f3f23fcbd4a5418b3114fb5a6ab4b39af583eaa1e2e6d917c49c377e358add6c878116da9a9ab335fdfc87683ca8eda40ce53415e5e9395c5b49b5d612c1e6dd96f2661b2dba20305af0d5fde6cfec5a440fa2bf28d55a648ddd871000200f808ed610655679499e61ae66180ebe1461eb6d1759eb2b87a1bbe1efe5200058f9af54e7d05e5e6bd16681a2da483ee97cd902364fa30277506e7d7eb8be5f5e73125ecf80fad6f7ba508179c4c7979e518ccc5c10456bab97660c878598289fc50f7d4eb5958dfe67fb643723e8772c01a51ec6e42fd51eec2d0433e12f71d0d34d4d0aa5fdffd5f8dbc265cc97e41ca59a732d5de5f4d3a9dc6d0dabd089d2b7aa3b657cb1aed049050f551b17d9176d703322389c362f51191000a814daf9b87ad4fcabdf91dc4d26afc9bc6c80dc2f9698dd7ffba1bfa4c4305737c0dd31ae65732aa312f1a04a04a8d9c5a68e305f77895b5d910698e08f2a2489b091e3f872387a2022d96ce06e8f5f3b4bd8", 0x0}, 0x18) 20:53:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, 0x0, &(0x7f0000000580)=""/90}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086607, 0x7fffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x0, 0x9, &(0x7f00000002c0)='eth0eth0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x89, &(0x7f0000000380)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0xffffffffffffffff}, 0x30) 20:53:25 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000000c0)) 20:53:25 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8923, &(0x7f0000000200)="766574000000000000000002bd6800") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) 20:53:26 executing program 4: r0 = socket$inet6(0xa, 0x200000000001, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f0000000000)) 20:53:26 executing program 2: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='timers\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 20:53:26 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:26 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x80) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r3 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000480)={@local, 0x0, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0xc201}) 20:53:26 executing program 4: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/userio\x00', 0x22001, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff005, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) 20:53:26 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000600)={r1, 0x0, &(0x7f0000000580)=""/90}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086607, 0x7fffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0xffffffffffffffff, r2, 0x0, 0x9, &(0x7f00000002c0)='eth0eth0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x89, &(0x7f0000000380)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0xffffffffffffffff}, 0x30) 20:53:26 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:26 executing program 4: r0 = socket(0x1, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000002c0)={'team0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={"7465616d300000ffffffc000", 0xc201}) 20:53:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfffffc7d) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 20:53:26 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a7c2d023c126285718070") sendto(r0, &(0x7f0000001040)="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", 0x138, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000002380)="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", 0x1f0, 0x4040000, 0x0, 0x0) 20:53:26 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 245.997901] binder: 7765:7769 ioctl c018620b 20000000 returned -14 [ 246.365385] : renamed from vet [ 246.396869] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.784663] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.884085] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.890665] : renamed from vet 20:53:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000180)) preadv(r1, &(0x7f0000000480), 0x1000000000000162, 0x0) getuid() setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 20:53:27 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), 0x4) preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 20:53:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) clone(0x1ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2502001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7, @empty, 0x100}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) socket$inet6(0xa, 0x80001, 0xfa) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f0000000240)) 20:53:27 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000001c0)={@mcast1}, 0x14) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="2b642955da1dd8073986632346939a08", 0x10) 20:53:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0xfffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) setpriority(0x2, 0x0, 0x0) [ 247.131394] 8021q: adding VLAN 0 to HW filter on device team0 20:53:27 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:27 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x400000000001, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) 20:53:27 executing program 1: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) fallocate(r0, 0x0, 0x0, 0xfff) 20:53:27 executing program 0: r0 = memfd_create(0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:27 executing program 5: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 20:53:27 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$unix(0x1, 0x100000000005, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) poll(&(0x7f0000000100)=[{r0, 0x40012}], 0x1, 0xff) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 20:53:27 executing program 0: r0 = memfd_create(0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:28 executing program 0: r0 = memfd_create(0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:28 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {}, 0xfffffffffffffffd}, 0x45c) clone(0x1000000000001fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) [ 247.790695] input input5: cannot allocate more than FF_MAX_EFFECTS effects 20:53:28 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) 20:53:28 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:28 executing program 2: r0 = socket$inet6(0x18, 0x8002, 0x0) setsockopt(r0, 0x2000000000029, 0xc, &(0x7f0000000000)="ff0e3e2a5e00b5f7e1b4784f0000000004000000", 0x14) 20:53:28 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x3, 0x20000000021) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:53:28 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(seed)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) ioctl(r4, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") write$binfmt_script(r1, &(0x7f0000000280)=ANY=[], 0xfffffffc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) splice(r0, 0x0, r3, 0x0, 0x20000000003, 0x0) 20:53:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) write(r0, &(0x7f0000000600)="edca4c00e7b354e40b9e0fd32a1175327fea151502c06217aca17db3131e6072cdfd69e7cd5135eaf6568d7607c841192f7e70236b57d96863375712e7058c4ec548f381d55e4615590c64443ae8179f6366cb59df8f61a1b11de7270c39ed664c816cb657ed2f4356b28b105e42ae1edb6fb192cdea77ca26c662b4f30fd0c225f5b7cf5a2de1929e24eaea1551b46903f3dda28db6ba3305c52cc91723e93bc452f55b53a12a59b2975c6e3bea28edefd3726a64e3967b6e87164f0cb0de76bf87225d1748b0a068ece9ff12be45a4142ab3d2c88d67d8248d0d8c4b3d64dce1c6bc4cd8c39d96e8da06a72feb2a5a470b45ab3b18d7e0331b480bc058a009ee7ada1645f5e67d55bbbc623bf8478c0aa18881cbda37c97961535d77556a35ce2863776499910491a8bed4f921a43e3b70809cd53b0e8f15834e10cac343cce6935b5dc6069cf82895a814b8be42d95f41e20aea0ba0012139613289a155ae79402d93ea47425daca8e2ff0db9d2580179f22f7adf5e971427d02c606d7d9399303280e6f2f53eafee5078b9ccbdd3633b95008e1ebf72b8acd87047684af0c322f142e1a155afed365d3990ada50cfc5924224a9102959f9bb0a66765bcf2f7b8780168148dacc98065901ac465f6a6e5f4425e4d232599a5a968135816e5a0863a6eaddb6aa7f7b0e32b589254494242497d0c569165d1e40865a2fdfa3b36e348f289f57a9de57fd076f96ba3d6da5f646dc85ba6fa1681e2bc7cc96e998df36b940e423007046d78e150137075b0488a8f94f056ed5a8ee93f26952a36a755d2a2099d4e14489ac60a4b318cad79b60d7a58cf71fdf149aaf0dcc3ac30a4ab41c9bd3ef0ac9f310d8b44ffd4d5988f552f544d5eeefe295bf51d6e2ca0556a61c081b0ca54eea19ed7f5a187ac1109539ed7bf5a59750600377e451b831b56bc6b5fd534187e1cf113585e07ad578f7bd0d2424306cdd45e69727e13f18d69107b107ad558472aab0ee915839862a94a45ecdfdeb4732c3558a0ea878aeb5eb54e6f3fdfc149838fbfbac8c219d87e29c724670e706d2479fb4e41ce189b379d9d1f37af43fd2d53434fcaeaea0ea94eacd62071e924fccfdc26d8e1635efdbd7bb678fc0ee60081f47ac16d82c340c53421761a549511fac31fb4ef513c6c95635231863ec86035182a50ef7142ec000ebae17d822f91a58663ec3b7b2754cc526f3f4dc6b8adace6e8244fb6d12c2c0da3f4086a0ef28e84e1af34a2fdfc07b9c8e652f097bdfd5517c1ad6711d60637fb8f3fe0d83cb2689b396e6d406d661aa474b883ef1e1ab9f5c11f7ac5fd61a77700d65652e04f7bb4ae0d81ed84236618149fefaeafd36c2345d6156b80988a5b6e12e97f17570b7c66a91dc895293137e11d8ea2c3a5ee255ebdebc5815e436d2eb1976e22f4d72704b9863bcac10a697917fba6ca5d0aa8f44dca72bf59e82e21cc4fdeadd3baa90cbde1a287aab6c163cd3a6a898de9a18bce8749523f1bc9d99e96b49069954d90a60e08fdae720f8b1e1205783d525573fe329486eaa1bae4975723d0c5d715248c26558bdf8a04347e6202ff079ff207c215db8cc295ae153963489a6928af57bddca93cc03b4fd3fc0cd886d4de975125e4ea888c9baa1fd4ac7e81fc24ea42f854bce47810d44aa3887a9e47fe9a28e6e8244de7bfe91671a9cd9a0ff77ca1f1c42506c61ee668ad75875f6b947a8983a61042b478b376039e190aa5f1db4fe52c7fcd401a3b25c3008b1eef4dad0313ba261c3301f0923b9394a3fa233440e1d84282edbd18a24730b460354c362fb21016b79a934dac80e4d00534cf88bce6db34823b6a630479147a8abcbccf2ca41f8bedcc9695a01840669fe22dd32916bae5fea1af5ba89be819444f235d0faa7e8c32c4d3da1efb8b367e738c94248c9a69322409d869289484761415a2ff0e9bcfa337b5ab751da35ed1dc2e77d36a20129808780eab232064c98ee4ea1cd9801d6e71e1b16a28911dd249f49387a361517febdfcc305d9d0cb3992674dab33b41bdf232f151ccd3192025aaead5a30e3cf0a057fe36dc29577980f81bcc57c2f052136a13eed2bb6816e44d43af2b80a218fc7d5e06669a5b175fbdb288b7f70386043ca97a059b3c3e868a861b7053288d36d875a8152ab2ae5cefe454baa6d6a32a64beeff8991004dbeafb43b1a095391db2a8ed9c2f93a47157145fd1515ccc0d96d876edf92cd196382278496db5b41e0478b32eba040b8e088b9014dc3b44410ede0d400a0a0d1b77271695e6494d3c2e4cf11aa25593891b80e2eeff5ac31b522ba5b906425830bd215fe1b1227a5af91978af872decba7db9455bb37252b4d152ac41d8b0cd5edb75902be27dcce1816dd07c2d095b259f6892b937e83c21a5c36488816dd28baf4b010009c62147f66770b4ced321bf17b1aceb7f9afe864f6c389a25c3c0a22f4fd8a900ffb18e633e0ffaaa413df47b9e689416092eb3a69c32b2e41b573b49ffabdd73db7b97d9864d038039843c21b36c0394a1104d1feee652e3c4c1a6d991d518e0ad9dc210cc6b6480f97c9856737ee9c1e349b1d129ac8bb53939964da7fa8c511f9ce648bb9c7679181c1f433b35337089e9b50f97b346c25eff2fc3486d69575f28025ab0253ef56a405a51a6da27ab9de3e189daccd5eaa88a6212d866bd2382952d7e57a5b93391ff1400eac67f6c9fef11ef9931b9162710198ea6d00041b113010f7aed955a1cfff0bceb1f0fb714429fbc9f695bb2ac7de7bac3f52c23690c46fa0febf80df782e72daf5a9cd0acfed6f26b851313a0b04f37eb1bcdfe17a37794fa9058feee52a58d4c2959c66f71933fcd66a0187d8a31880341cae695f50e80d7f9cfbf98b57eb024b2e61f31cdae882b53211da15e2e26f6577a408542674c56cb10a95d44b9c2a5e8970832c007d5ff9f26cd96ddc9dc059fff8cdadfc60fd78f47e7cc99f648d65ff18fd824d990c3c137b3b79ea6a55eac895cfebfc12ab8addef871baee1317021440fa8a8dc049a9bf4ff9452a5695577abce5ba96897677fb698f1ae17771a9b71aef8f2c06f4459fe6052737377834333421bdf38aa3c7ecbd22b518a51fbbad3b85f322df1dbbf79f68377718d3810558055170ebaeb90cb1463699679cb2f486e7845f729fc8f23b65283f098c910bbe4b06f7f06b1b0c41ff5b2d097d46cf4050cc74c9413b6809cc4d2e1a1e770bd69251f2010f4994aa73a229991abd79b222b79bd2e45f7b3d912365cab124bbac4078c416f9df21f53e6076dfd3e2d6153f0b91d484f0f0d36a0073099b4ee997bac02345e5fa49670a8b5968449ab508bb8d8663428974633f07e3f5f4b3d2cc0b6ffd5fdec7417137f4c05a1162412b6c4bdeaf110a90a2ba17947fe82fe2c1ddbc9a5a2cae29b8cc929c9ed47f195d06968cc036022c35a225678972fefbd7b6d6d8e7a26bbeb702246a736daca4bc1ed6cc8b3ee9894abc5178601289120c64884ed3055bb062e0c3891df2fa2ca33ce6da4bb884a4b43ba94871cd5ad5771b1503b61759fc843b7a2829cf0cfeabad5cf690212431345119e9d4d97d8881", 0xa00) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x1ffda) [ 248.103071] binder: 7873:7875 ioctl c018620b 20000000 returned -14 20:53:28 executing program 1: [ 248.227932] audit: type=1800 audit(1544561608.610:31): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor2" name="file0" dev="sda1" ino=16564 res=0 [ 248.268537] audit: type=1804 audit(1544561608.640:32): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir397887296/syzkaller.gWb4kY/10/file0" dev="sda1" ino=16564 res=1 20:53:28 executing program 5: 20:53:28 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:28 executing program 1: [ 248.490200] audit: type=1804 audit(1544561608.870:33): pid=7889 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir397887296/syzkaller.gWb4kY/10/file0" dev="sda1" ino=16564 res=1 20:53:28 executing program 1: 20:53:29 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0xfffffffffffffffe, 0x136) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, 0x0, &(0x7f0000000180)) [ 248.570737] binder: 7899:7901 ioctl c018620b 20000000 returned -14 [ 248.601466] syz-executor2 (7889) used greatest stack depth: 13080 bytes left 20:53:29 executing program 3: 20:53:29 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f000042d000)=@routing={0x0, 0x2, 0x2, 0x80000001, 0x0, [@mcast1]}, 0x18) connect$inet6(r0, &(0x7f0000000000), 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) 20:53:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:29 executing program 1: 20:53:29 executing program 4: 20:53:29 executing program 4: 20:53:29 executing program 1: 20:53:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 249.126874] binder: 7925:7927 ioctl c018620b 20000000 returned -14 20:53:29 executing program 2: 20:53:29 executing program 3: 20:53:29 executing program 1: [ 249.244978] binder: 7936:7937 ioctl c018620b 20000000 returned -14 20:53:29 executing program 5: 20:53:29 executing program 4: 20:53:29 executing program 2: 20:53:29 executing program 3: 20:53:29 executing program 1: 20:53:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:29 executing program 3: 20:53:29 executing program 2: [ 249.430050] binder: 7953:7954 ioctl c018620b 20000000 returned -14 20:53:29 executing program 4: 20:53:29 executing program 1: [ 249.509727] binder: 7959:7961 ioctl c018620b 20000000 returned -14 20:53:29 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:29 executing program 5: 20:53:30 executing program 2: 20:53:30 executing program 3: 20:53:30 executing program 4: [ 249.633816] binder: 7972:7973 ioctl c018620b 20000000 returned -14 20:53:30 executing program 5: 20:53:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)'], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:30 executing program 1: 20:53:30 executing program 3: 20:53:30 executing program 2: 20:53:30 executing program 5: 20:53:30 executing program 4: 20:53:30 executing program 3: 20:53:30 executing program 1: [ 249.835794] binder: 7989:7990 ioctl c018620b 20000000 returned -14 20:53:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)'], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:30 executing program 2: 20:53:30 executing program 3: 20:53:30 executing program 4: 20:53:30 executing program 5: 20:53:30 executing program 1: [ 250.006600] binder: 8005:8007 ioctl c018620b 20000000 returned -14 20:53:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:30 executing program 2: 20:53:30 executing program 3: 20:53:30 executing program 4: 20:53:30 executing program 1: 20:53:30 executing program 5: 20:53:30 executing program 4: 20:53:30 executing program 3: [ 250.213988] binder: 8019:8022 ioctl c018620b 20000000 returned -14 20:53:30 executing program 2: 20:53:30 executing program 3: 20:53:30 executing program 1: 20:53:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x10, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:30 executing program 4: 20:53:30 executing program 5: 20:53:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x10, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:30 executing program 2: 20:53:30 executing program 3: 20:53:30 executing program 1: 20:53:30 executing program 4: 20:53:30 executing program 5: 20:53:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x10, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:31 executing program 3: 20:53:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) 20:53:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) 20:53:31 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b7566aa17b4728dde5f9eedfc811ff1f75642558335fbbc2453d13", 0x46) r2 = syz_open_pts(r0, 0x2) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)) 20:53:31 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:31 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x6) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r2 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x3ff) connect$inet(r2, &(0x7f0000000180)={0x2, 0x8000000000004e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r2, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, 0x326, &(0x7f0000003b80), 0x0, &(0x7f0000003bc0)}}], 0x22b, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@dev}) close(r1) close(r2) 20:53:31 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:31 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:31 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f000088cff6)='/dev/ptmx\x00', 0x1000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f000054bfba)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f5930fd07000000dcf50bbc54b7566aa17b4728dde5f9eedfc811ff1f75642558335fbbc2453d13", 0x46) r2 = syz_open_pts(r0, 0x2) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)) 20:53:31 executing program 1: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:31 executing program 3: r0 = socket$inet6(0xa, 0x400000000000803, 0x74) ioctl(r0, 0x400001000008912, &(0x7f0000000500)="0a5c2d023c126285718070") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40000, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x0, 0x7ff, 0x100, 0x10000, 0x8001, 0x200}) r2 = socket(0x200000000040009, 0x803, 0xc18) getsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000000)=""/20, &(0x7f0000000040)=0x14) getsockopt$sock_buf(r2, 0x1, 0x31, &(0x7f0000b56f40)=""/192, &(0x7f0000004ffc)=0xc0) 20:53:31 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:31 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40046432, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) 20:53:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = accept4(r1, &(0x7f0000000100)=@tipc=@name, &(0x7f0000000280)=0x80, 0x800) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x550, 0x2a0, 0x0, 0x2a0, 0xe8, 0x1e0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x1000000, 0x2}}}, {{@ip={@empty, @empty, 0xffffff00, 0xffffff00, 'lo\x00', 'rose0\x00', {0xff}, {0xff}, 0x16, 0x0, 0x4}, 0x0, 0x98, 0xf8}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x8, [0x101, 0x100000000, 0x80000000, 0x1, 0x985, 0x6], 0x1, 0xffffffffffff0000}, {0x8, [0xff, 0x7, 0x7fff, 0x6, 0x3a5, 0x3], 0x1, 0x20}}}}, {{@ip={@remote, @empty, 0xffffff00, 0xffffffff, 'bpq0\x00', 'irlan0\x00', {0xff}, {}, 0x37, 0x1, 0xe}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'nr0\x00', 0x8000}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000180)={0x7b, 0x0, [0x6e0], [0xc1]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10200000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="000327bd7000fbdbdf250700000008000400050000000800060005000000080006002000000008000400010000002800020014000100fe8000000000000000000000000000bb080002004e2100000800080004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000850) 20:53:31 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:31 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200200, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000380)) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x17c, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x1c}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8001}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000680)=""/235) [ 251.233917] binder: 8109:8110 ioctl c018620b 20000000 returned -14 20:53:31 executing program 1: r0 = socket(0x1e, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002300), 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x4040, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, 0x0) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='#! ./file0 lo \x00\x00\x00net'], 0x14) mkdir(0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x1b) ptrace$cont(0x18, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x3e}) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, 0x0, 0x0, 0x0) getpeername(r1, &(0x7f0000000000)=@ax25, &(0x7f0000000180)=0x80) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000080)="5694a14779640e3b7f562683f600c29dd0d220ce09c47168ea849d15bf37ea7d35bcd3367aba4b3d530e8c47814bd332d4a2b71d0344f924bb8fdc3d5a8bbde5a28d3688d9ef88e00e2e7c5c3897cc201fcb7453dff240442b8a0758a23107b02c9bcad96ffba4340fdd2bd2ea76e708ed3fb125b9e1016aa89daf5e2c3f274e4e2580f45306dd0d2d8d42d012ef1efdc4248af615f3c173be3b540476dfc2111e115c1269a0471dfa287452efa27cb5283d", 0xb2, 0x48040, 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000003e40)='ntfs\x00', &(0x7f0000003e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 251.293000] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 20:53:31 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 251.448048] binder: 8132:8136 ioctl c018620b 20000000 returned -14 20:53:31 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x88980, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000140)=""/87) r1 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x7, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f00000000c0)={0x1}) 20:53:32 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:32 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0xfcffda1577cb5f79) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in6=@ipv4={[], [], @empty}}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8) io_setup(0x8, &(0x7f0000000100)=0x0) io_getevents(r3, 0x0, 0x0, 0x0, 0x0) close(r1) socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f000000ed862a6fd25f3f3817da3f75a89dadd2fb2757dd09d5800bd5249842eaaf8bdca03585ce698619c4efe9ed9530c1e14bbdfae8c6409318e56208315d8bcad499da19bb37defb1f3af43ce76cc3859197cc5b1238a2a23c2a83760f5b4124da38cf6933a4297a0cce4ca09b2cbd53b6b115de66c54df1b4b7de4b5000000000"], &(0x7f00000000c0)=0x87) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r4, 0x16e0c0}, 0x8) io_submit(r3, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) 20:53:32 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:32 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000100)=0xfa9) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0xf0b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @gre={{0x8, 0x1, 'gre\x00'}, {0xc, 0x2, [@IFLA_GRE_LOCAL={0x8, 0x14}]}}}]}, 0x38}}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}, &(0x7f00000001c0)=0x10) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f00000000c0)={0x2, [0x3ff, 0x102002]}) 20:53:32 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 251.760791] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. 20:53:32 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2800000000, 0x2000) epoll_wait(r2, &(0x7f0000000040)=[{}, {}], 0x2, 0x47c) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x20, 0x29, 0x82d, 0x0, 0x0, {0x1}, [@typed={0xc, 0x0, @u64}]}, 0x20}}, 0x0) 20:53:32 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x204800, 0x0) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, {0x995, 0x7f, 0x100000000, 0x401, 0x3, 0x8}}, 0x8) mkdir(&(0x7f0000000240)='.//ile0\x00', 0x100000) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3aff696c65302c776f726b6469723d2e2f66696c6531"]) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) openat$cgroup_type(r1, 0x0, 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, &(0x7f0000000280)) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000380)={[0x103006, 0x2, 0x6000], 0x8, 0x80}) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 20:53:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)="6367c7dd00a8b8745a006c6c869775deea2be0faffffffffffffff5f65727300", 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x10076) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x1732) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000001300)={0x0, r0, 0x0, 0x0, 0xffffffff}) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x1, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000000c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000040), r2}}, 0x18) 20:53:32 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, 0x0) [ 251.906133] overlayfs: failed to resolve './file1': -2 [ 251.966659] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size. [ 252.006980] overlayfs: failed to resolve './file1': -2 [ 252.031806] binder: 8190:8193 ioctl c018620b 0 returned -14 20:53:32 executing program 1: socketpair(0x1, 0x20001000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001c80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000bc801280000000000e4390000000000000000000000070000000000000000000000000000000000000000009848101f790625d9cf3957362c970bb20ab9a704b09ec71fff31c3c8fe614af1d06c6271432ed47d003ec83f36ff5bb86595e1a813b05f03ce63287d6c7db1a9b0d151ead2adcc8f43e8133a119966255ea179d2ab11a17652af76f969888984a2bfa2f15b54d00aa11ffeb9d2496c8af872d8838b2c0b6e2335de2400000005000000023fdd5e17d32f9457ada0c156e7b313aa4a85aa61807911d6eb73b135599e9514f586644d846baf14967db793037b0a65fdd9ae7e4d38b1e556636ff36ea3565feaa0751ee61de395c11911df5c5cada263e708d0b8c25c8d52e88f4104fa8c43980b006cec9dc2cc62907a98bb4162ddb6b3cb17b749416778473d9fe64a9f505b32dcb99fdb687f174840b8d9129e51186f5538c1d11363894dd1642a4349a41b16be50f1fcb8045df84c63e72cd6d452ea282220456188ae51f53f9ec3ae5a56c5"]) r1 = getpid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) gettid() r3 = socket$xdp(0x2c, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000500)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000019c0)={0x6, 0x0, [{0x10000, 0x1000, &(0x7f00000007c0)=""/4096}, {0x0, 0xdb, &(0x7f00000005c0)=""/219}, {0x4000, 0x4c, &(0x7f00000017c0)=""/76}, {0x1d000, 0x23, &(0x7f0000000240)=""/35}, {0x100000, 0x65, &(0x7f0000001840)=""/101}, {0x0, 0xeb, &(0x7f00000018c0)=""/235}]}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000000)=r1) write$P9_RXATTRCREATE(r7, &(0x7f0000000140)={0x7, 0x21, 0xffffffffffffffff}, 0x7) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000340)=""/60) write$P9_RSETATTR(r7, &(0x7f0000000040)={0x7}, 0x7) sendfile(r4, r7, &(0x7f0000d83ff8)=0xf00, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) 20:53:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:32 executing program 2: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0xffffffffffffff09, 0x80000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a000000000000004ab6540a6d032f79738cfb5861cbe7c400000000000000000000000000000000000000000000000002001300a8000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000ff0000000000000000192e4fbde5513e52947c0e01009c813c6b7b1cc845e368b20db3ada8f777f732b1991e169dd600938f9471a73f4097c05856"], 0x70}}, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x1, 0x400) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000300)={0x0, 0x6, 0x4, &(0x7f00000002c0)=0x6}) splice(r0, &(0x7f0000000200), r0, &(0x7f0000000240), 0xffffffff, 0x1) 20:53:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)={0x100000001, 0x82, 0x81, 0x7, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0xfffffeb9) prctl$PR_SET_UNALIGN(0x6, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3f, 0x40000) listen(r1, 0xffffffff) fchdir(r0) 20:53:32 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a7000f4ff050000000000aa78e5aad8eb862d7da010b43bfc181968a9b7dd50ed079241fd5ffab3ed291b5b030000000000000062dd") ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x1, 0xc8, 0x9, 0x0, 0x5, 0x3000, 0x0, [], 0x3}) getpeername(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000380)=0x80) bind$nfc_llcp(r1, &(0x7f00000003c0)={0x27, 0x1, 0x0, 0x7, 0x80000001, 0x3, "bf6f86a6ae936ba2d9a6845b9a49bb5b767bb72f6e7e7dee9095c5c6ce921c9dc7ed6b0bfa12e5cab3c6b04b9c8110cdad08a8e46dc9e93520d393593d3c86", 0x7}, 0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000080)=0x3000) 20:53:32 executing program 0 (fault-call:5 fault-nth:0): r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:32 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 252.255940] FAULT_INJECTION: forcing a failure. [ 252.255940] name failslab, interval 1, probability 0, space 0, times 1 [ 252.318243] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) [ 252.338990] CPU: 1 PID: 8206 Comm: syz-executor0 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 252.347504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.347512] Call Trace: [ 252.347627] dump_stack+0x244/0x39d [ 252.347656] ? dump_stack_print_info.cold.1+0x20/0x20 20:53:32 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 252.347742] ? debug_smp_processor_id+0x1c/0x20 [ 252.373205] ? perf_trace_lock+0x14d/0x7a0 [ 252.377509] should_fail.cold.4+0xa/0x17 [ 252.381586] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 252.386706] ? lock_is_held_type+0x210/0x210 [ 252.391203] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 252.396241] ? print_usage_bug+0xc0/0xc0 [ 252.400313] ? graph_lock+0x270/0x270 [ 252.400343] ? find_held_lock+0x36/0x1c0 [ 252.408268] ? perf_trace_sched_process_exec+0x860/0x860 [ 252.413804] __should_failslab+0x124/0x180 20:53:32 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 252.413844] should_failslab+0x9/0x14 [ 252.421885] kmem_cache_alloc_trace+0x2db/0x740 [ 252.426605] ? _raw_spin_unlock+0x2c/0x50 [ 252.430804] binder_get_thread+0x255/0x880 [ 252.435058] ? binder_new_node+0x8d0/0x8d0 [ 252.439310] ? perf_trace_sched_process_exec+0x860/0x860 [ 252.444828] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 252.450414] ? rcu_pm_notify+0xc0/0xc0 [ 252.454319] ? __might_sleep+0x95/0x190 [ 252.454338] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 252.454355] binder_ioctl+0x275/0x194a [ 252.454378] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 252.454394] ? find_held_lock+0x36/0x1c0 [ 252.454459] ? __fget+0x4aa/0x740 [ 252.480987] ? lock_downgrade+0x900/0x900 [ 252.485151] ? check_preemption_disabled+0x48/0x280 [ 252.490188] ? kasan_check_read+0x11/0x20 [ 252.494350] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 252.494368] ? rcu_read_unlock_special+0x370/0x370 [ 252.494396] ? __fget+0x4d1/0x740 [ 252.494424] ? ksys_dup3+0x680/0x680 [ 252.508127] ? __mutex_unlock_slowpath+0x197/0x8c0 20:53:32 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 252.508151] ? binder_ioctl_write_read.isra.42+0xba0/0xba0 [ 252.522385] do_vfs_ioctl+0x1de/0x1790 [ 252.522409] ? ioctl_preallocate+0x300/0x300 [ 252.522427] ? __fget_light+0x2e9/0x430 [ 252.522444] ? fget_raw+0x20/0x20 [ 252.522507] ? __sb_end_write+0xd9/0x110 [ 252.522530] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.530836] ? fput+0x130/0x1a0 [ 252.530864] ? do_syscall_64+0x9a/0x820 [ 252.530880] ? do_syscall_64+0x9a/0x820 [ 252.530898] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 252.530942] ? security_file_ioctl+0x94/0xc0 [ 252.530961] ksys_ioctl+0xa9/0xd0 [ 252.538376] __x64_sys_ioctl+0x73/0xb0 [ 252.538395] do_syscall_64+0x1b9/0x820 [ 252.538412] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 252.538431] ? syscall_return_slowpath+0x5e0/0x5e0 [ 252.538447] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.538486] ? trace_hardirqs_on_caller+0x310/0x310 [ 252.538506] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 252.604563] ? prepare_exit_to_usermode+0x291/0x3b0 [ 252.609594] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 252.614455] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.619656] RIP: 0033:0x457679 [ 252.622855] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.641776] RSP: 002b:00007f6f8642cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.649509] RAX: ffffffffffffffda RBX: 00007f6f8642cc90 RCX: 0000000000457679 [ 252.656792] RDX: 0000000020000000 RSI: 00000000c018620b RDI: 0000000000000004 20:53:33 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x2) socket$netlink(0x10, 0x3, 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000e1f3989aba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x383}, 0x7) ioprio_set$pid(0x2, r4, 0x9c93) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r1, r5, &(0x7f0000d83ff8)=0x1800, 0x8000fffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x143, 0x1009}}, 0x20) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000640)={0x0, 0x7fffffff}, 0x8) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, r6, 0x0, 0x1, &(0x7f0000000440)='\x00'}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0xd, 0xfa00, @id_tos={&(0x7f00000004c0), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x0) [ 252.664066] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 252.671339] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6f8642d6d4 [ 252.678608] R13: 00000000004beaef R14: 00000000004cf6f8 R15: 0000000000000005 [ 252.718207] binder: 8204:8206 ioctl c018620b 20000000 returned -12 20:53:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x3d7, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000880)="b805000000b98b9400000f01c19a01000000b0000f43d1b8000000000f23d80f21f835800000900f23f80f060f2140b9800000c00f3235000800000f3066ba4300b8f1ffffffefb9800000c00f3235002000000f30c4c3295f4da400", 0x5c}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x1e1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @remote}, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='eql\x00', 0x9890, 0x8, 0x20}) [ 252.796050] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.884832] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 253.326529] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:53:34 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:34 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000000)="0a7000f4ff050000000000aa78e5aad8eb862d7da010b43bfc181968a9b7dd50ed079241fd5ffab3ed291b5b030000000000000062dd") ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x1, 0xc8, 0x9, 0x0, 0x5, 0x3000, 0x0, [], 0x3}) getpeername(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000380)=0x80) bind$nfc_llcp(r1, &(0x7f00000003c0)={0x27, 0x1, 0x0, 0x7, 0x80000001, 0x3, "bf6f86a6ae936ba2d9a6845b9a49bb5b767bb72f6e7e7dee9095c5c6ce921c9dc7ed6b0bfa12e5cab3c6b04b9c8110cdad08a8e46dc9e93520d393593d3c86", 0x7}, 0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4000000004}, [@typed={0x4, 0x12}]}, 0x18}}, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000540)='TRUE', 0x4, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000080)=0x3000) 20:53:34 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:34 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace$setsig(0x4203, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000}) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, 0x0) 20:53:34 executing program 1: socketpair(0x1, 0x20001000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$kcm(0x2, 0xa, 0x2) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"]) r1 = getpid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x248380, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) sched_setaffinity(0x0, 0xffffffffffffffd9, &(0x7f0000000280)) gettid() r3 = socket$xdp(0x2c, 0x3, 0x0) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000500)) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000019c0)={0x6, 0x0, [{0x10000, 0x1000, &(0x7f00000007c0)=""/4096}, {0x0, 0xdb, &(0x7f00000005c0)=""/219}, {0x4000, 0x4c, &(0x7f00000017c0)=""/76}, {0x1d000, 0x23, &(0x7f0000000240)=""/35}, {0x100000, 0x65, &(0x7f0000001840)=""/101}, {0x0, 0xeb, &(0x7f00000018c0)=""/235}]}) r4 = socket$inet6(0xa, 0x400000000001, 0x0) close(r4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={@dev}, &(0x7f0000000540)=0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x2007fff) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000000)=r1) write$P9_RXATTRCREATE(r7, &(0x7f0000000140)={0x7, 0x21, 0xffffffffffffffff}, 0x7) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000340)=""/60) write$P9_RSETATTR(r7, &(0x7f0000000040)={0x7}, 0x7) sendfile(r4, r7, &(0x7f0000d83ff8)=0xf00, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) 20:53:34 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f00000003c0)='trusted.overlay.opaque\x00', &(0x7f0000000480)='y\x00', 0x2, 0x2) socket$netlink(0x10, 0x3, 0xd) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000e1f3989aba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x383}, 0x7) ioprio_set$pid(0x2, r4, 0x9c93) write$P9_RSETATTR(r5, &(0x7f0000000040)={0x7}, 0x7) sendfile(r1, r5, &(0x7f0000d83ff8)=0x1800, 0x8000fffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x143, 0x1009}}, 0x20) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000640)={0x0, 0x7fffffff}, 0x8) r6 = creat(&(0x7f0000000200)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, r6, 0x0, 0x1, &(0x7f0000000440)='\x00'}, 0x30) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0xd, 0xfa00, @id_tos={&(0x7f00000004c0), 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x0) 20:53:34 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 253.902955] binder: 8260:8261 ioctl c018620b 20000000 returned -14 20:53:34 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) write$smack_current(r1, &(0x7f0000000040)='lrw(serpent)\x00', 0xd) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) 20:53:34 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40100000003, 0x87) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0x7}, 0x20}, 0x10) sendto$inet6(r1, &(0x7f0000000080), 0xfc00, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}, 0x8}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xffffffff) 20:53:34 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 254.187571] binder: 8287:8293 ioctl 10 20000000 returned -22 20:53:34 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 254.229014] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:53:34 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:34 executing program 4: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200600, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x1, {0x0, 0x1}}, 0x14) r1 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0x0, 0x240000) write$P9_RFLUSH(r1, &(0x7f00000003c0)={0x7, 0x6d, 0x2}, 0x7) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f00000000c0)}, 0x10) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x7, 0x313000) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f0000000940)) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000880)) sendto$inet6(r3, &(0x7f0000000040), 0x0, 0x20000001, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x458) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000008c0)) write$binfmt_elf64(r2, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], 0xbb4) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000b40)=""/23) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000b00)) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000340)=0x80000000) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000a00)=""/244, 0xf4}, &(0x7f0000000200), 0x20}, 0x20) 20:53:34 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:34 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40100000003, 0x87) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0x7}, 0x20}, 0x10) sendto$inet6(r1, &(0x7f0000000080), 0xfc00, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}, 0x8}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xffffffff) 20:53:35 executing program 1: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) mmap(&(0x7f00001c0000/0x2000)=nil, 0x2000, 0x0, 0x6011, r0, 0x0) madvise(&(0x7f00001c1000/0x1000)=nil, 0x1000, 0xb) clone(0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000140), &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x3, 0x4) 20:53:35 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x40100000003, 0x87) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000080)={{0x6, 0x7}, 0x20}, 0x10) sendto$inet6(r1, &(0x7f0000000080), 0xfc00, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}, 0x8}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0xffffffff) 20:53:35 executing program 4: r0 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x0, @remote}], 0x10) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001580)=@assoc_value={0x0, 0x8001}, 0x8) 20:53:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0x3}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in6=@mcast2}}, 0xe8) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) 20:53:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 255.024472] binder: 8340:8343 ioctl c0306201 20000000 returned -14 20:53:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0186246, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:35 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, 0x0, 0x79ffff00000011) 20:53:35 executing program 4: mkdir(&(0x7f0000000680)='./control\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20001, 0x0) r2 = open(&(0x7f0000000040)='./control\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x3, 0x7, 0x8, 0x2, 0x2, 0x7, 0x1, {0x0, @in={{0x2, 0x4e22, @multicast2}}, 0x40, 0x5, 0x1ff, 0x100000000, 0x1000}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0x85c}, &(0x7f00000002c0)=0xc) mknodat(r2, &(0x7f0000000180)='./control\x00', 0x0, 0x0) linkat(r2, &(0x7f00000001c0)='./control\x00', r2, &(0x7f0000000200)='./file0\x00', 0x1400) 20:53:35 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="140000070000000000000000b90617c7f74d79667e77e66077e0f61cac717e5c0c32471ff6b6ea580845933ced147b91c9994a98481951803f87bf6dd527acddc3000000000000000044eab42f675ee32f8f3a5e8c524c59bbd3c2fb73606621532528bc53e092ebb9b27b13cf279760d5568b3974c238fcbb0000000000"]}) close(r2) close(r1) 20:53:35 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100), 0x79ffff00000011) [ 255.312189] binder: 8367:8376 ioctl c0186246 20000000 returned -22 20:53:35 executing program 4: r0 = syz_open_dev$amidi(&(0x7f00000005c0)='/dev/amidi#\x00', 0xd64, 0x212001) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000640)=@assoc_value={0x0, 0x69}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000006c0)={r1, 0x101, 0x30, 0x3ff, 0x2}, &(0x7f0000000700)=0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)=0x14, 0x80000) accept4(r2, &(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000340)=0x80, 0x80800) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e21, 0x8000000000000000, @dev}, r5, 0xffffffffffffffff}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{}, {0xa, 0x0, 0x6, @local}, 0xffffffffffffffff, 0x8}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) sendto(0xffffffffffffffff, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ftruncate(r3, 0x0) getpeername$inet(r6, &(0x7f0000000740), &(0x7f0000000780)=0x10) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r6, &(0x7f0000000600)={0x5, 0x10, 0xfa00, {&(0x7f00000003c0), 0xffffffffffffffff, 0x2}}, 0x18) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0), &(0x7f0000000140)='hash\x00', 0x0) r7 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1745) fstat(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000800)={{0xfff, r8}, 0x0, 0x4, 0x7d1, 0x3fc, 0x0, 0x0, 0x5}) ioctl$IOC_PR_RELEASE(r6, 0x401070ca, &(0x7f0000000000)={0x2, 0x6, 0x1}) 20:53:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x8}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x501080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r5, &(0x7f0000000100)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r6, 0x1}}, 0x18) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20:53:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./kgroup/syz0\x00', 0x200002, 0x0) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/86}, {&(0x7f0000000280)=""/191}, {&(0x7f00000009c0)=""/9}, {&(0x7f0000000340)=""/244}, {&(0x7f0000000840)=""/105}, {&(0x7f00000004c0)=""/32}, {&(0x7f0000000500)=""/179, 0xeb}, {&(0x7f00000005c0)=""/43}, {&(0x7f0000000600)=""/207}, {&(0x7f0000000700)=""/82}], 0x10000000000000bf, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/fib_trie\x00') preadv(r1, &(0x7f0000000000), 0x1000000000000063, 0x1c) 20:53:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000240)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000140)=0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af092e5323b71fa55ee14bf900"}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$tipc(0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="06000000", @ANYRES16=r4, @ANYBLOB="090329bd7000fcdbdf250100000000000000014100000018001703000000000000007564703a73797a3200000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x41) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000040)={0x1, 0x6, 0x10000, 0x400}) 20:53:35 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:36 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x0) 20:53:36 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x17, 0xf0, &(0x7f0000000040)="2547a0ac83f7dbe3777ce7db3d6853833b894aa09ff4755926f2bdd40453e458c6fcf57c86b33c966ffbef91e529275a55742d1db4b371311b798eb3496d189f94692e01122db9b461fb3abe7e86a3ee24cf38781d791e56071a3e4271ceed9781c66918173939ad6f291034db544ea715f63470f5b0e7fac46dd7a397c64c2acd19951ba6f55471b4bba2b2f2d669dc8e42b092ba149d17cc90674c269911cad344e2da2e9002123f7b1d9395f147fb56bdf1b1d602ea1d244c641e17dc5b16076dbca944b190c5082ac4a5670c33ecae36dfbec0c451e9b2113a68c00b8a41bab8e69c6ab8a3c6d9c459dfd9709190"}) getpriority(0x7, 0x0) 20:53:36 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:36 executing program 4: timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000002c0)=0x0) clock_gettime(0x0, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/mixer\x00', 0x100, 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x1, &(0x7f0000000180)=""/114, 0x72) timer_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x77359400}}, 0x0) setns(r1, 0x40000000) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x210000) write$P9_RSYMLINK(r2, &(0x7f0000000140)={0x14, 0x11, 0x2, {0x4, 0x4, 0x8}}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000e04000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x3, 0x800) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x0, 0x6, 0x8d, &(0x7f0000ffc000/0x3000)=nil, 0x7}) fcntl$setstatus(r3, 0x4, 0x800) 20:53:36 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x0, &(0x7f0000000180)) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000000)=""/41, 0x29) getdents64(r2, &(0x7f0000000440)=""/186, 0x760) getdents64(r2, &(0x7f0000000100)=""/81, 0x4a) getdents(r2, &(0x7f00000005c0)=""/4096, 0x299) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x1, 0x2) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000240)) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000080)=0x5, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)="626272009f86f814cff6dca20c0dd71ceeee09c563d4e07117423a41681a23809f902089191a8d2c042f7aa2828f218ee5dfca1f7a612ab5a38de109b778cd0c75d8bdf3892d17f86d5147671863171a50f9bb68dabfc3fa7be11d2581af6c6753e64844a25bba1d338e1baa71d9b144ad6de8c7867999d5e99aa2961fda43db5846e0857025b8ff85b5e69bb8f7eb67e700000000000000007440a2d6805f642c1ead790dcdefb31f3c29e7", 0x2a1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f00000001c0)={0x10000, 0x2, 0x7f}) accept4$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10, 0x800) 20:53:36 executing program 2: r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f0000000040)="0a5c2d02402b6285717070") timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) 20:53:36 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x0) 20:53:36 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='IPVS\x00', 0x2) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000300)="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", 0x1000, 0x800, &(0x7f0000000080)={0xa, 0x4e22, 0xf4d, @ipv4={[], [], @multicast1}, 0x100000000}, 0x1c) dup3(r1, r2, 0x0) ioctl$TIOCNXCL(r2, 0x540d) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') 20:53:36 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:36 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/140}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x3f00000000000000, 'syz1\x00', "737978310000000000000000000000000000000200000057310f00000000000000000000000000170000220000000000000000000000000000000000001400", 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80003, 0x0) [ 255.936689] proc: Unknown parameter 'XFà…p%¸ÿ…µæ›¸÷ëgç' 20:53:36 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:36 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="477e981cdcfe636ec02da1a862e8b830e35617094dea9693f6775938e3", 0x1d, 0xe8f}, {&(0x7f0000000140)="db27b50e669711ed848085bfaf5eb27eaf3ced483f6d89707659804c7e7185ce6536d29ce671562dfcea3e5ab51b225fcfd0f8ed1935a75c828f38e85dd72557d440b07fd8d5", 0x46, 0x1}], 0x0, &(0x7f00000002c0)={[{@uid={'uid', 0x3d, r0}}]}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x3, 0x80, 0x3f}) futex(&(0x7f0000004000), 0x400000087, 0x0, 0x0, 0x0, 0x0) 20:53:36 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x0) 20:53:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x20, 0x22, 0x1, 0x0, 0x0, {0x3}, [@nested={0xc, 0x2, [@generic="d63f5dda70"]}]}, 0x20}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x8001, 0x1, 0xffffffff, 0x8, 0x2}, 0xc) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000380)=""/132) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000100)="0f23e0c744240000880000c74424020d000000c7442406000000000f0114240f350f0158f3660f38806d5dc4c17de7983bc79872c4c27d5a20c74424008be37591c744240207800000c7442406000000000f0114240f0118440f20c03501000000440f22c0", 0x65}], 0x1, 0x13, &(0x7f0000000380), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300), &(0x7f0000000340)=0xf3) 20:53:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x0, @local, 0x1}}}, 0x80, 0x0, 0xffffffb1}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8202, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) recvfrom(r0, &(0x7f00000016c0)=""/4096, 0x1000, 0x1, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) close(r0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x40406, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xff}}], [{@hash='hash'}, {@obj_role={'obj_role', 0x3d, ')trustedsystem'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*'}}, {@subj_type={'subj_type', 0x3d, "7b18656d31262f657468302b6c6f2f"}}, {@dont_hash='dont_hash'}, {@obj_user={'obj_user', 0x3d, '}\'posix_acl_access)vboxnet1'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x31, 0x34, 0x77, 0x64, 0x77], 0x2d, [0x7c, 0x64, 0x77, 0x77], 0x2d, [0x31, 0x33, 0x31, 0x36], 0x2d, [0x63, 0x63, 0x74, 0x75], 0x2d, [0x6fd5d5fb051c0382, 0x34, 0x31, 0x79, 0x7b, 0x66, 0x63, 0x35]}}}]}}) 20:53:36 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaa000028004c0a0000000000004000000000000000009078ffffffffffffffe000009716aef9d22f4cf76f6b300000000006002795485d96895a000000000000000000000000000000416cd60ed513ac93e3fe353fe3b87613ad794d2e9ac35a4cefd6552ee07fa10000000000000000000000000000"], &(0x7f0000000040)={0x1, 0x1}) r0 = syz_open_dev$midi(&(0x7f00000006c0)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xf511) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) r2 = getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000580)=0xe8) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x4, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000180)="81cac462caa43335cf890afd9fdbc6c99cf5f07d2984ca06d7a188b0922dbba782b9aaba8579b1dca5c623acd2381f23f2c6f6951c22ba32cbc20377e3aa9d187ad74aaaaa8d0e1a86e540fcffdc77a70584ae21eed4a24558656d2134c54e64e02d5de2309496431837582fe4f7b521cb33a7b784efa30ee43e8d0f274f620bb4a930afe969987677d56ebe2418fe08a9d3f1a35fd04bf9f2789f576141a0705450e457cddc4705d62aa10f1c1a8d", 0xaf, 0x8}, {&(0x7f0000000240)="f49a26630e7c25826b6e5f6fab3b4ef2dd648118664f28ca5f366b94762b84144a5d1907d718497c5268015cd0c9d21e3776982a0c36eb912778df320024dfbb54cbefc95568b7bb6f37547397bdab15cbfd9c0a1b039ba750e1c2fc2fb73aeed2dfc375d74e239bf447f32a90714e02cb8fb7f5e80649af09b90af179d85c2edc9a94d6a97ac4db8609ba85bd6eee55063ac773add10498f0a85e55feffb810251f080a65c5bbae3b2a26b4c09b6a2e422bb6cfbfed6db237d33346632f7e1706ed711422968a9a12d7819a049fa59d244b6b66cdc5f88427876389eae12ec23fecfc5f3733", 0xe6, 0xac}, {&(0x7f0000000340)="46d63784aa53664a043a38453a7c985303cd8604257ba0f181a27eccb3d9760f0e89e384fa98d607726f37022528258f8af4137aeb959c1f3acb67036905bcc6202692b9c551dff677c273e8981c14c06c6d5f0fd673783dd3944eed081ad75c", 0x60, 0x20}], 0x2081, &(0x7f00000005c0)={[{@errors_continue='errors=continue'}, {@integrity='integrity'}, {@errors_continue='errors=continue'}, {@gid={'gid', 0x3d, r1}}, {@discard_size={'discard', 0x3d, 0x3}}, {@quota='quota'}, {@gid={'gid', 0x3d, r2}}, {@discard='discard'}, {@resize='resize'}, {@discard='discard'}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@fsmagic={'fsmagic', 0x3d, 0x27}}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}]}) 20:53:36 executing program 5 (fault-call:2 fault-nth:0): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:36 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x0, @local, 0x1}}}, 0x80, 0x0, 0xffffffb1}, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x8202, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x152610) recvfrom(r0, &(0x7f00000016c0)=""/4096, 0x1000, 0x1, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x1, @loopback}}, 0x80) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) close(r0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x40406, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xff}}], [{@hash='hash'}, {@obj_role={'obj_role', 0x3d, ')trustedsystem'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '*'}}, {@subj_type={'subj_type', 0x3d, "7b18656d31262f657468302b6c6f2f"}}, {@dont_hash='dont_hash'}, {@obj_user={'obj_user', 0x3d, '}\'posix_acl_access)vboxnet1'}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x39, 0x31, 0x34, 0x77, 0x64, 0x77], 0x2d, [0x7c, 0x64, 0x77, 0x77], 0x2d, [0x31, 0x33, 0x31, 0x36], 0x2d, [0x63, 0x63, 0x74, 0x75], 0x2d, [0x6fd5d5fb051c0382, 0x34, 0x31, 0x79, 0x7b, 0x66, 0x63, 0x35]}}}]}}) [ 256.305069] FAULT_INJECTION: forcing a failure. [ 256.305069] name failslab, interval 1, probability 0, space 0, times 0 [ 256.381096] CPU: 0 PID: 8494 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 256.389656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.399031] Call Trace: [ 256.401660] dump_stack+0x244/0x39d [ 256.405333] ? dump_stack_print_info.cold.1+0x20/0x20 [ 256.410569] ? perf_trace_lock+0x4a7/0x7a0 [ 256.414855] should_fail.cold.4+0xa/0x17 [ 256.418963] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.424105] ? lock_is_held_type+0x210/0x210 [ 256.428560] ? find_held_lock+0x36/0x1c0 [ 256.432732] ? aa_file_perm+0x469/0x1060 [ 256.436837] ? find_held_lock+0x36/0x1c0 [ 256.440989] ? perf_trace_sched_process_exec+0x860/0x860 [ 256.446482] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 256.451995] __should_failslab+0x124/0x180 [ 256.456265] should_failslab+0x9/0x14 [ 256.460096] kmem_cache_alloc_trace+0x2db/0x740 [ 256.464796] ? aa_file_perm+0x490/0x1060 [ 256.468885] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 256.474208] alloc_pipe_info+0x164/0x5d0 [ 256.478306] ? pipe_read+0x940/0x940 [ 256.482079] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 256.487035] ? common_file_perm+0x236/0x7f0 [ 256.491384] ? perf_trace_lock+0x4a7/0x7a0 [ 256.495739] splice_direct_to_actor+0x786/0x9d0 [ 256.500449] ? pipe_to_sendpage+0x400/0x400 [ 256.504813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.510382] ? do_splice_to+0x190/0x190 [ 256.514393] ? rw_verify_area+0x118/0x360 [ 256.518579] do_splice_direct+0x2d4/0x420 [ 256.522776] ? splice_direct_to_actor+0x9d0/0x9d0 [ 256.527668] ? rw_verify_area+0x118/0x360 20:53:36 executing program 3: syz_emit_ethernet(0x103, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa545e7be24500003000000000002f90780000000000000000210090781c000030450000000000000000000000ac14ffbbe0000001"], 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)=0x3) 20:53:36 executing program 1: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000700)="800000000002000019000000e60600006c000000000000040000000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400002, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000040)={0x3ff}) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000080)=0x3ff, 0x4) [ 256.531869] do_sendfile+0x62a/0xe50 [ 256.535636] ? do_compat_pwritev64+0x1c0/0x1c0 [ 256.540274] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.545841] ? _copy_from_user+0xdf/0x150 [ 256.550034] __x64_sys_sendfile64+0x15d/0x250 [ 256.554569] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 256.559208] do_syscall_64+0x1b9/0x820 [ 256.563123] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 256.568509] ? syscall_return_slowpath+0x5e0/0x5e0 [ 256.573476] ? trace_hardirqs_off_thunk+0x1a/0x1c 20:53:36 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='2d2', 0x3) [ 256.578351] ? trace_hardirqs_on_caller+0x310/0x310 [ 256.583394] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 256.588444] ? prepare_exit_to_usermode+0x291/0x3b0 [ 256.593497] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.598392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.603600] RIP: 0033:0x457679 [ 256.603621] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.603633] RSP: 002b:00007f5eb5efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 256.603653] RAX: ffffffffffffffda RBX: 00007f5eb5efec90 RCX: 0000000000457679 [ 256.603666] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000003 [ 256.603680] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 256.603693] R10: 0079ffff00000011 R11: 0000000000000246 R12: 00007f5eb5eff6d4 [ 256.603722] R13: 00000000004c3e2b R14: 00000000004d6c40 R15: 0000000000000005 20:53:37 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=""/140}, 0x18) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) ioctl$TIOCLINUX4(0xffffffffffffffff, 0x541c, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x3f00000000000000, 'syz1\x00', "737978310000000000000000000000000000000200000057310f00000000000000000000000000170000220000000000000000000000000000000000001400", 'syz0\x00', &(0x7f0000000000)=""/11, 0xb}, 0x11c) shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffb000/0x3000)=nil) openat$snapshot(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snapshot\x00', 0x80003, 0x0) 20:53:37 executing program 3: unshare(0x8020000) r0 = semget$private(0x0, 0x4007, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f00000000c0)=""/208) unshare(0x8020400) 20:53:37 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 256.749608] EXT4-fs (loop1): fragment/cluster size (2048) != block size (1024) 20:53:37 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:37 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x0, 0x400) write$binfmt_misc(r0, &(0x7f00000002c0)={'syz0', "df1c2cd088b328238445f2571427f2339b8579d0d169e78214c8fd601124990678429313c9944bf005d3c6dd2a9bf9d41aa25e16ff0e6467120f74c2b4135c3b44eb9fc9c58035bd19ef92e3f97f4f39266d92d8af8c92be459b3305a59349d1d1c48ed7d9bc4d4f9729f360d8205180a1b2f91ee7eb717c01622b7d9092811f46dda2506357f53713dad6291db867be827da27a2092518dcbda48f8b9038fbf5e697d2a226e72c52d494ef2803e890c4aa8"}, 0xb6) openat$audio(0xffffffffffffff9c, &(0x7f0000000d80)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:53:37 executing program 5 (fault-call:2 fault-nth:1): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:37 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0xdcf9, 0x4) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000004c0)={0x8001, 0x4, 0x7ff}) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) r3 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x6, 0x7ff, 0xb7, 0x81, 0x0, 0x1, 0x36200, 0x4, 0x742b6da6, 0x0, 0x80, 0x6, 0x7, 0x8, 0x8, 0x3, 0x8b9, 0x52, 0x0, 0x3ff, 0x6ed2, 0x7, 0xa1, 0x4, 0x48, 0xfffffffffffffff9, 0x6, 0x7, 0xf11d, 0x6, 0x1, 0x8d, 0x0, 0x4, 0x97e, 0x4, 0x0, 0x100, 0x2, @perf_config_ext={0xb7, 0x9}, 0x20, 0x1, 0x1, 0x4, 0x3, 0x8, 0xfff}, 0x0, 0x7, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x1ff, 0x2, 0x5, 0xde6, 0x0, 0x5e6b, 0x40000, 0x1, 0x1f, 0x7, 0x400, 0x7, 0x7, 0x0, 0x3, 0x9, 0x2, 0x3ff, 0x9, 0x7fff, 0x4, 0x5, 0x101, 0x3, 0x5, 0x1d77c46d, 0x6, 0x5, 0x9, 0x200, 0x200, 0x9, 0x4, 0x42, 0xfff, 0x6, 0x0, 0xf5, 0x6, @perf_bp={&(0x7f0000000280), 0x9}, 0x4018, 0x3, 0x3, 0x9, 0x521, 0x5, 0x81}, r2, 0x6, r3, 0x2) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x60, @dev}}, 0x0, 0x0, 0x40000004, 0x0, 0x14}, 0x98) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x81, 0x81, 0x7, 0x8, 0x0, 0x2, 0x80000, 0x0, 0xfff, 0x5, 0x2, 0xfffffffffffff800, 0x4, 0xffff, 0x200, 0x9, 0x7, 0x80000000, 0xcd, 0x7, 0x0, 0x10000, 0x1000, 0x8, 0x101, 0x4c, 0x9, 0x759e30ef, 0x1, 0x2, 0xffffffffffffff01, 0x6, 0x6, 0x0, 0x7a, 0x3, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x8, 0x10000, 0x4, 0x7, 0x8, 0x6, 0xfffffffffffffffb}, r5, 0x4, r4, 0x2) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r6, &(0x7f00000001c0)=""/186, 0xba) [ 256.927237] FAULT_INJECTION: forcing a failure. [ 256.927237] name failslab, interval 1, probability 0, space 0, times 0 [ 257.011470] CPU: 0 PID: 8534 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 257.020018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.029385] Call Trace: [ 257.029420] dump_stack+0x244/0x39d [ 257.029461] ? dump_stack_print_info.cold.1+0x20/0x20 [ 257.029494] ? perf_trace_lock+0x4a7/0x7a0 [ 257.029537] should_fail.cold.4+0xa/0x17 [ 257.029571] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.029620] ? kasan_kmalloc+0xcb/0xd0 20:53:37 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 257.058274] ? kmem_cache_alloc_trace+0x154/0x740 [ 257.058295] ? alloc_pipe_info+0x164/0x5d0 [ 257.058318] ? splice_direct_to_actor+0x786/0x9d0 [ 257.072227] ? do_sendfile+0x62a/0xe50 [ 257.076137] ? __x64_sys_sendfile64+0x15d/0x250 [ 257.080837] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.086236] ? find_held_lock+0x36/0x1c0 [ 257.090367] ? perf_trace_sched_process_exec+0x860/0x860 [ 257.095845] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 257.101431] __should_failslab+0x124/0x180 [ 257.101457] should_failslab+0x9/0x14 [ 257.101490] __kmalloc+0x2e4/0x760 [ 257.101506] ? kmem_cache_alloc_trace+0x356/0x740 [ 257.101524] ? aa_file_perm+0x490/0x1060 [ 257.109672] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 257.118041] ? alloc_pipe_info+0x2ce/0x5d0 [ 257.118076] alloc_pipe_info+0x2ce/0x5d0 [ 257.118103] ? pipe_read+0x940/0x940 [ 257.139640] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 257.144597] ? perf_trace_lock+0x4a7/0x7a0 [ 257.148879] splice_direct_to_actor+0x786/0x9d0 [ 257.153580] ? pipe_to_sendpage+0x400/0x400 20:53:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x2, 0x8}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80000) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e21}, {0x0, @link_local}, 0x20, {0x2, 0x4e24, @remote}, 'veth1\x00'}) write(r0, &(0x7f0000000400)="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", 0xfffffffffffffe58) sendfile(r0, r1, 0x0, 0x10000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @remote, 0x1f}}}, 0x84) 20:53:37 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 257.157947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.163518] ? do_splice_to+0x190/0x190 [ 257.167533] ? rw_verify_area+0x118/0x360 [ 257.171741] do_splice_direct+0x2d4/0x420 [ 257.175925] ? splice_direct_to_actor+0x9d0/0x9d0 [ 257.180823] ? rw_verify_area+0x118/0x360 [ 257.185019] do_sendfile+0x62a/0xe50 [ 257.188797] ? do_compat_pwritev64+0x1c0/0x1c0 [ 257.193427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.193449] ? _copy_from_user+0xdf/0x150 [ 257.193482] __x64_sys_sendfile64+0x15d/0x250 [ 257.193507] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 257.203223] do_syscall_64+0x1b9/0x820 [ 257.203244] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 257.203270] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.226548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.231426] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.236469] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.241505] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.241538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.241573] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.256617] RIP: 0033:0x457679 [ 257.259833] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.278752] RSP: 002b:00007f5eb5efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 257.286498] RAX: ffffffffffffffda RBX: 00007f5eb5efec90 RCX: 0000000000457679 [ 257.293798] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000003 [ 257.301089] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 257.308378] R10: 0079ffff00000011 R11: 0000000000000246 R12: 00007f5eb5eff6d4 [ 257.315666] R13: 00000000004c3e2b R14: 00000000004d6c40 R15: 0000000000000005 [ 257.324686] audit: type=1800 audit(1544561617.680:34): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16616 res=0 [ 257.362380] audit: type=1804 audit(1544561617.690:35): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir077948358/syzkaller.rVqU30/36/file0" dev="sda1" ino=16616 res=1 [ 257.386625] audit: type=1800 audit(1544561617.690:36): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16616 res=0 20:53:37 executing program 2: pipe(&(0x7f0000000000)) pipe(&(0x7f00000001c0)) io_setup(0x40, &(0x7f0000000140)=0x0) io_submit(r0, 0x2, &(0x7f0000001680)) [ 257.509212] cgroup: fork rejected by pids controller in /syz0 20:53:37 executing program 5 (fault-call:2 fault-nth:2): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 257.713581] FAULT_INJECTION: forcing a failure. [ 257.713581] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 257.725792] CPU: 0 PID: 8578 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 257.734300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.743674] Call Trace: [ 257.746306] dump_stack+0x244/0x39d [ 257.749983] ? dump_stack_print_info.cold.1+0x20/0x20 [ 257.755316] ? perf_tp_event+0xc20/0xc20 [ 257.759431] should_fail.cold.4+0xa/0x17 [ 257.763537] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.768723] ? perf_trace_lock+0x4a7/0x7a0 [ 257.773011] ? lock_is_held_type+0x210/0x210 [ 257.777444] ? lock_downgrade+0x900/0x900 [ 257.781629] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 257.786929] ? graph_lock+0x270/0x270 [ 257.790758] ? rcu_read_unlock_special+0x370/0x370 [ 257.796045] ? rcu_read_unlock+0x16/0x60 [ 257.800200] __alloc_pages_nodemask+0x366/0xec0 [ 257.804903] ? kasan_check_read+0x11/0x20 [ 257.809083] ? __alloc_pages_slowpath+0x2e00/0x2e00 [ 257.814118] ? rcu_read_unlock_special+0x370/0x370 [ 257.819096] ? rcu_read_unlock+0x33/0x60 [ 257.823239] ? trace_hardirqs_off+0xb8/0x310 [ 257.827684] cache_grow_begin+0xa5/0x8c0 [ 257.831781] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.837353] ? check_preemption_disabled+0x48/0x280 [ 257.842437] __kmalloc+0x69d/0x760 [ 257.846019] ? kmem_cache_alloc_trace+0x356/0x740 [ 257.850918] ? aa_file_perm+0x490/0x1060 [ 257.855014] ? alloc_pipe_info+0x2ce/0x5d0 [ 257.859289] alloc_pipe_info+0x2ce/0x5d0 [ 257.863386] ? pipe_read+0x940/0x940 [ 257.867149] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 257.872110] ? perf_trace_lock+0x4a7/0x7a0 [ 257.876427] splice_direct_to_actor+0x786/0x9d0 [ 257.881125] ? pipe_to_sendpage+0x400/0x400 [ 257.885500] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.891151] ? do_splice_to+0x190/0x190 [ 257.895164] ? rw_verify_area+0x118/0x360 [ 257.899350] do_splice_direct+0x2d4/0x420 [ 257.903535] ? splice_direct_to_actor+0x9d0/0x9d0 [ 257.908418] ? rw_verify_area+0x118/0x360 [ 257.912624] do_sendfile+0x62a/0xe50 [ 257.916393] ? do_compat_pwritev64+0x1c0/0x1c0 [ 257.921028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.926589] ? _copy_from_user+0xdf/0x150 [ 257.930776] __x64_sys_sendfile64+0x15d/0x250 [ 257.935306] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 257.940003] do_syscall_64+0x1b9/0x820 [ 257.943918] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 257.949341] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.954290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.959159] ? trace_hardirqs_on_caller+0x310/0x310 [ 257.964200] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.969288] ? prepare_exit_to_usermode+0x291/0x3b0 [ 257.974357] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.979274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.984487] RIP: 0033:0x457679 [ 257.987702] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.006640] RSP: 002b:00007f5eb5efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 258.014370] RAX: ffffffffffffffda RBX: 00007f5eb5efec90 RCX: 0000000000457679 [ 258.021659] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000003 [ 258.028945] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 258.036235] R10: 0079ffff00000011 R11: 0000000000000246 R12: 00007f5eb5eff6d4 [ 258.043525] R13: 00000000004c3e2b R14: 00000000004d6c40 R15: 0000000000000005 [ 258.179069] binder: 8582:8583 ioctl c0046209 20000000 returned -22 20:53:38 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 259.117446] audit: type=1804 audit(1544561619.500:37): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir077948358/syzkaller.rVqU30/36/file0" dev="sda1" ino=16616 res=1 [ 259.141576] audit: type=1800 audit(1544561619.500:38): pid=8555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=16616 res=0 20:53:39 executing program 3: unshare(0x8020000) r0 = semget$private(0x0, 0x4007, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f00000000c0)=""/208) unshare(0x8020400) 20:53:39 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:39 executing program 1: r0 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x100000000001, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0xdcf9, 0x4) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000004c0)={0x8001, 0x4, 0x7ff}) sendto$inet6(r1, &(0x7f0000000100)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) r3 = perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x6, 0x7ff, 0xb7, 0x81, 0x0, 0x1, 0x36200, 0x4, 0x742b6da6, 0x0, 0x80, 0x6, 0x7, 0x8, 0x8, 0x3, 0x8b9, 0x52, 0x0, 0x3ff, 0x6ed2, 0x7, 0xa1, 0x4, 0x48, 0xfffffffffffffff9, 0x6, 0x7, 0xf11d, 0x6, 0x1, 0x8d, 0x0, 0x4, 0x97e, 0x4, 0x0, 0x100, 0x2, @perf_config_ext={0xb7, 0x9}, 0x20, 0x1, 0x1, 0x4, 0x3, 0x8, 0xfff}, 0x0, 0x7, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) perf_event_open(&(0x7f0000000380)={0x0, 0x70, 0x1ff, 0x2, 0x5, 0xde6, 0x0, 0x5e6b, 0x40000, 0x1, 0x1f, 0x7, 0x400, 0x7, 0x7, 0x0, 0x3, 0x9, 0x2, 0x3ff, 0x9, 0x7fff, 0x4, 0x5, 0x101, 0x3, 0x5, 0x1d77c46d, 0x6, 0x5, 0x9, 0x200, 0x200, 0x9, 0x4, 0x42, 0xfff, 0x6, 0x0, 0xf5, 0x6, @perf_bp={&(0x7f0000000280), 0x9}, 0x4018, 0x3, 0x3, 0x9, 0x521, 0x5, 0x81}, r2, 0x6, r3, 0x2) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x60, @dev}}, 0x0, 0x0, 0x40000004, 0x0, 0x14}, 0x98) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x81, 0x81, 0x7, 0x8, 0x0, 0x2, 0x80000, 0x0, 0xfff, 0x5, 0x2, 0xfffffffffffff800, 0x4, 0xffff, 0x200, 0x9, 0x7, 0x80000000, 0xcd, 0x7, 0x0, 0x10000, 0x1000, 0x8, 0x101, 0x4c, 0x9, 0x759e30ef, 0x1, 0x2, 0xffffffffffffff01, 0x6, 0x6, 0x0, 0x7a, 0x3, 0x0, 0x80000001, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x8, 0x10000, 0x4, 0x7, 0x8, 0x6, 0xfffffffffffffffb}, r5, 0x4, r4, 0x2) r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r6, &(0x7f00000001c0)=""/186, 0xba) 20:53:39 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0/../file0\x00', 0x8000, 0x19c) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0x0) socketpair(0x18, 0x0, 0x0, &(0x7f00000004c0)) eventfd2(0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000740)=ANY=[]) r1 = open$dir(&(0x7f00004daff8)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0xffffffffffffffff) r3 = dup(r2) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000)=0x81, 0x4) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'bcsf0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}}) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) sendto$inet6(r2, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)=ANY=[], 0x0) mkdirat(r3, &(0x7f0000000080)='./bus\x00', 0x1) socketpair$unix(0x1, 0x7e5ac9905f6e1257, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e21, 0xe7d, @ipv4, 0x2}, {0xa, 0x4e23, 0x6, @remote, 0x7}, 0x8, [0x0, 0x0, 0x0, 0x34798395, 0xffffffffffff8001, 0x81, 0x6, 0x4]}, 0x5c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000100)=0x5, 0x4) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000380)=""/148) lsetxattr$security_ima(&(0x7f0000000200)='./bus\x00', &(0x7f0000000480)='security.ima\x00', &(0x7f00000007c0)=ANY=[], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00'}, 0x10) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000440)=@fragment={0x3f, 0x0, 0x5, 0x10001, 0x0, 0x800000000, 0x67}, 0x8) mkdirat(r6, &(0x7f0000000640)='./bus\x00', 0x20) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000500)=0x80) ioctl$VT_RELDISP(r5, 0x5605) r7 = open(&(0x7f0000000680)='./bus\x00', 0x4000, 0x1) ftruncate(r7, 0x7fff) sendfile(r3, r7, &(0x7f0000d83ff8), 0x8000fffffffe) 20:53:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40001000af01, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x220100, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x7fff, 0x20}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3}, 0xfe86) r4 = openat$cgroup_procs(r1, &(0x7f0000000c40)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x10a0001fe) 20:53:39 executing program 5 (fault-call:2 fault-nth:3): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 259.538771] FAULT_INJECTION: forcing a failure. [ 259.538771] name failslab, interval 1, probability 0, space 0, times 0 [ 259.561887] binder: 8600:8602 ioctl c018620c 20000000 returned -1 [ 259.588032] binder: 8600:8609 ioctl c018620c 20000000 returned -1 [ 259.597310] CPU: 0 PID: 8599 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 259.605835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 259.615212] Call Trace: [ 259.617843] dump_stack+0x244/0x39d [ 259.621519] ? dump_stack_print_info.cold.1+0x20/0x20 [ 259.626766] ? perf_trace_lock+0x4a7/0x7a0 [ 259.631044] should_fail.cold.4+0xa/0x17 [ 259.635140] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 259.640287] ? perf_trace_run_bpf_submit+0x267/0x330 [ 259.645439] ? perf_trace_run_bpf_submit+0x26e/0x330 [ 259.650669] ? perf_tp_event+0xc20/0xc20 [ 259.654769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.660335] ? check_preemption_disabled+0x48/0x280 [ 259.665391] ? find_held_lock+0x36/0x1c0 [ 259.669524] ? perf_trace_run_bpf_submit+0x26e/0x330 [ 259.674677] ? perf_trace_sched_process_exec+0x860/0x860 [ 259.680171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.685762] __should_failslab+0x124/0x180 [ 259.690030] should_failslab+0x9/0x14 [ 259.693858] kmem_cache_alloc_node_trace+0x277/0x740 [ 259.698998] ? perf_trace_lock+0x4a7/0x7a0 [ 259.703274] __kmalloc_node+0x3c/0x70 [ 259.707170] kvmalloc_node+0x65/0xf0 [ 259.710923] iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 259.715883] ? check_preemption_disabled+0x48/0x280 [ 259.721196] ? graph_lock+0x270/0x270 [ 259.725042] ? copyin+0x100/0x100 [ 259.728533] ? rcu_softirq_qs+0x20/0x20 [ 259.732580] ? unwind_dump+0x190/0x190 [ 259.732617] ? find_held_lock+0x36/0x1c0 [ 259.732655] ? aa_file_perm+0x469/0x1060 [ 259.740605] ? lock_downgrade+0x900/0x900 [ 259.740627] ? check_preemption_disabled+0x48/0x280 [ 259.740661] ? kasan_check_read+0x11/0x20 [ 259.740680] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 259.740705] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 259.768427] ? iov_iter_pipe+0xbb/0x2f0 [ 259.772455] default_file_splice_read+0x1db/0xb20 [ 259.777352] ? do_syscall_64+0x1b9/0x820 [ 259.781439] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.786849] ? iter_file_splice_write+0x1050/0x1050 [ 259.791892] ? aa_path_link+0x5e0/0x5e0 [ 259.795897] ? lock_downgrade+0x900/0x900 [ 259.800075] ? check_preemption_disabled+0x48/0x280 [ 259.805134] ? kasan_check_read+0x11/0x20 [ 259.809310] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 259.814610] ? __kmalloc+0x593/0x760 [ 259.818360] ? __lockdep_init_map+0x105/0x590 [ 259.822905] ? __mutex_init+0x1f7/0x290 [ 259.826910] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 259.832540] ? fsnotify+0x50e/0xef0 [ 259.836221] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 259.841189] ? fsnotify_first_mark+0x350/0x350 [ 259.845796] ? __fsnotify_parent+0xcc/0x430 [ 259.850150] ? fsnotify+0xef0/0xef0 [ 259.853842] ? security_file_permission+0x2bc/0x320 [ 259.858909] ? iter_file_splice_write+0x1050/0x1050 [ 259.863954] do_splice_to+0x12e/0x190 [ 259.867802] splice_direct_to_actor+0x31c/0x9d0 [ 259.872503] ? pipe_to_sendpage+0x400/0x400 [ 259.876876] ? do_splice_to+0x190/0x190 [ 259.880892] ? rw_verify_area+0x118/0x360 [ 259.885079] do_splice_direct+0x2d4/0x420 20:53:40 executing program 4: unshare(0x8020000) r0 = semget$private(0x0, 0x4007, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$GETZCNT(r0, 0x1, 0xf, &(0x7f00000000c0)=""/208) unshare(0x8020400) 20:53:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) r2 = dup3(r0, r1, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400201) r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$apparmor_exec(r3, &(0x7f0000000040)={'exec ', ':\x00'}, 0x7) [ 259.889262] ? splice_direct_to_actor+0x9d0/0x9d0 [ 259.894148] ? rw_verify_area+0x118/0x360 [ 259.898335] do_sendfile+0x62a/0xe50 [ 259.902106] ? do_compat_pwritev64+0x1c0/0x1c0 [ 259.906752] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 259.912311] ? _copy_from_user+0xdf/0x150 [ 259.916499] __x64_sys_sendfile64+0x15d/0x250 [ 259.921031] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 259.925661] do_syscall_64+0x1b9/0x820 [ 259.929572] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 259.934960] ? syscall_return_slowpath+0x5e0/0x5e0 [ 259.934987] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.935019] ? trace_hardirqs_on_caller+0x310/0x310 [ 259.949936] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 259.955004] ? prepare_exit_to_usermode+0x291/0x3b0 [ 259.960101] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 259.964997] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 259.970207] RIP: 0033:0x457679 20:53:40 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@v2={0x3, 0x0, 0x5, 0x10000, 0xf2, "327839c1333f41ce983f7f09cf7ad52170d8a0524506ce9ada306109cf7fbef9ebfc74b85c92c4560bbd88ce895f26b764bc51952edef28eeb1012cd4375e9a546f8023151f11ffe9c823cf65899a6de723612b5ab053f17f5531593fb6a7358682606249a98301ed9d4b6f8a43c92cf5c399eb8df4e66af1b3c09b62609e8817746dbc7cb70e0ace1628ee02c68305b6474e8ebac69ab7e267cbb7d33e2f8356b56d36bf219113869814cedb00a03ac6f69e601915baa30f3b94d0287f67bb7dfc3dd792f9c8c01b6ff59e0407c93344e663f0c230adfaac5e7a97673e157f2a942b330cb2c00a76ce89a131655715ae45b"}, 0xfc, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 20:53:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 259.973425] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 259.992350] RSP: 002b:00007f5eb5efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.000084] RAX: ffffffffffffffda RBX: 00007f5eb5efec90 RCX: 0000000000457679 [ 260.007372] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000003 [ 260.014661] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.021950] R10: 0079ffff00000011 R11: 0000000000000246 R12: 00007f5eb5eff6d4 [ 260.029265] R13: 00000000004c3e2b R14: 00000000004d6c40 R15: 0000000000000005 20:53:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000041000000"], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x3, "54daef63a1be6ee97379804dc32c515a5f8b06773f459c9f04e2b2fa10b4eb54"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="0494c16d15656fc30b46585fde1e", 0x0, 0xb2b}, 0x28) 20:53:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:40 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") pselect6(0x40, &(0x7f0000000040)={0x7f, 0x1, 0x80, 0x1, 0x9, 0x5, 0x9, 0x3f}, &(0x7f0000000080)={0x2, 0x0, 0xb7, 0x8, 0x7, 0x7ff, 0x2, 0x1}, &(0x7f00000000c0)={0x8, 0x8, 0xe7c, 0x7, 0x0, 0x100000000, 0x5, 0x3}, &(0x7f0000000100)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000140), 0x8}) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) writev(r0, &(0x7f0000000740), 0x0) 20:53:40 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x4000)=nil, 0x4000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f0000000040)=0x10) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r0) 20:53:40 executing program 5 (fault-call:2 fault-nth:4): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:40 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:40 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="03000000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000041000000"], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x2000, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x0, 0x1, 0x3, "54daef63a1be6ee97379804dc32c515a5f8b06773f459c9f04e2b2fa10b4eb54"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="0494c16d15656fc30b46585fde1e", 0x0, 0xb2b}, 0x28) [ 260.302935] FAULT_INJECTION: forcing a failure. [ 260.302935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 260.359304] CPU: 0 PID: 8646 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 260.367864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 260.377236] Call Trace: [ 260.379865] dump_stack+0x244/0x39d [ 260.383551] ? dump_stack_print_info.cold.1+0x20/0x20 [ 260.388773] ? perf_trace_lock+0x14d/0x7a0 [ 260.393057] should_fail.cold.4+0xa/0x17 [ 260.397156] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 260.402374] ? is_bpf_text_address+0xac/0x170 [ 260.406901] ? graph_lock+0x270/0x270 [ 260.410734] ? lock_downgrade+0x900/0x900 [ 260.414910] ? check_preemption_disabled+0x48/0x280 [ 260.419964] ? kasan_check_read+0x11/0x20 [ 260.424147] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 260.429466] ? find_held_lock+0x36/0x1c0 [ 260.433591] ? lock_release+0xa00/0xa00 [ 260.437592] ? perf_trace_sched_process_exec+0x860/0x860 [ 260.443091] ? __might_sleep+0x95/0x190 [ 260.447102] __alloc_pages_nodemask+0x366/0xec0 [ 260.451797] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 260.456923] ? default_file_splice_read+0x1db/0xb20 [ 260.461957] ? do_splice_to+0x12e/0x190 [ 260.465982] ? __alloc_pages_slowpath+0x2e00/0x2e00 [ 260.471047] ? check_preemption_disabled+0x48/0x280 [ 260.476116] ? rcu_pm_notify+0xc0/0xc0 [ 260.480054] ? __kmalloc_node+0x3c/0x70 [ 260.484051] ? rcu_read_lock_sched_held+0x14f/0x180 [ 260.489092] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 260.494665] alloc_pages_current+0x173/0x350 [ 260.499112] push_pipe+0x3ff/0x7a0 [ 260.502678] ? __kmalloc_node+0x4d/0x70 [ 260.506709] iov_iter_get_pages_alloc+0x938/0x15a0 [ 260.511679] ? check_preemption_disabled+0x48/0x280 [ 260.516743] ? graph_lock+0x270/0x270 [ 260.520585] ? copyin+0x100/0x100 [ 260.524065] ? rcu_softirq_qs+0x20/0x20 [ 260.528057] ? unwind_dump+0x190/0x190 [ 260.531990] ? find_held_lock+0x36/0x1c0 [ 260.536103] ? aa_file_perm+0x469/0x1060 [ 260.540191] ? lock_downgrade+0x900/0x900 [ 260.544362] ? check_preemption_disabled+0x48/0x280 [ 260.549413] ? kasan_check_read+0x11/0x20 [ 260.553576] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 260.558853] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 260.563866] ? iov_iter_pipe+0xbb/0x2f0 [ 260.567860] default_file_splice_read+0x1db/0xb20 [ 260.572732] ? do_syscall_64+0x1b9/0x820 [ 260.576807] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.582181] ? iter_file_splice_write+0x1050/0x1050 [ 260.587219] ? aa_path_link+0x5e0/0x5e0 [ 260.591236] ? lock_downgrade+0x900/0x900 [ 260.595409] ? check_preemption_disabled+0x48/0x280 [ 260.600447] ? kasan_check_read+0x11/0x20 [ 260.604596] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 260.609874] ? __lockdep_init_map+0x105/0x590 [ 260.614376] ? __mutex_init+0x1f7/0x290 [ 260.618360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 260.623923] ? fsnotify+0x50e/0xef0 [ 260.627576] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 260.632518] ? fsnotify_first_mark+0x350/0x350 [ 260.637131] ? __fsnotify_parent+0xcc/0x430 [ 260.641469] ? fsnotify+0xef0/0xef0 [ 260.645123] ? security_file_permission+0x2bc/0x320 [ 260.650177] ? iter_file_splice_write+0x1050/0x1050 [ 260.655205] do_splice_to+0x12e/0x190 [ 260.659112] splice_direct_to_actor+0x31c/0x9d0 [ 260.663789] ? pipe_to_sendpage+0x400/0x400 [ 260.668140] ? do_splice_to+0x190/0x190 [ 260.672123] ? rw_verify_area+0x118/0x360 [ 260.676269] do_splice_direct+0x2d4/0x420 [ 260.680424] ? splice_direct_to_actor+0x9d0/0x9d0 [ 260.685298] ? rw_verify_area+0x118/0x360 [ 260.689505] do_sendfile+0x62a/0xe50 [ 260.693233] ? do_compat_pwritev64+0x1c0/0x1c0 [ 260.697824] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 260.703359] ? _copy_from_user+0xdf/0x150 [ 260.707557] __x64_sys_sendfile64+0x15d/0x250 [ 260.712084] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 260.716701] do_syscall_64+0x1b9/0x820 [ 260.720600] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 260.725961] ? syscall_return_slowpath+0x5e0/0x5e0 [ 260.730904] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.735763] ? trace_hardirqs_on_caller+0x310/0x310 [ 260.740807] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 260.745823] ? prepare_exit_to_usermode+0x291/0x3b0 [ 260.750849] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 260.755701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 260.760924] RIP: 0033:0x457679 [ 260.764138] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 260.783059] RSP: 002b:00007f5eb5efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 260.790765] RAX: ffffffffffffffda RBX: 00007f5eb5efec90 RCX: 0000000000457679 [ 260.798036] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000003 20:53:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00003e1000/0x3000)=nil, 0x3000}, 0x1}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000000)) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r1, &(0x7f0000000400)=""/100, 0x64) syz_emit_ethernet(0x746, &(0x7f0000002800)={@broadcast, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, "b3df53", 0x710, 0x84, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x43050000]}, @dev, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x0, 0x0, "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"}}}}}}, 0x0) [ 260.805316] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 260.812580] R10: 0079ffff00000011 R11: 0000000000000246 R12: 00007f5eb5eff6d4 [ 260.819842] R13: 00000000004c3e2b R14: 00000000004d6c40 R15: 0000000000000005 20:53:41 executing program 4: r0 = socket$inet6(0xa, 0x1, 0xa3) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local}, 0xc) getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f0000000240)) clone(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x30) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r4, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x20}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x29}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5d}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4e}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0xd0}, 0x20000014) ioperm(0xde15, 0x0, 0x1) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000280)=""/136) dup3(r0, r1, 0x0) 20:53:41 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) rt_sigreturn() close(r0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0xc0000, 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000240)) openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x805, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x120) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0xee4}], 0x1) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) 20:53:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7400, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file2\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffffa) write$evdev(r0, &(0x7f0000000440), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x1, 0x101002) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000100)={0x0, 0x1, [0xfffffffffffffff9, 0x6e2c, 0x1, 0x3, 0x4, 0x6, 0x9b, 0x5]}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00['], 0x2) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) fadvise64(r1, 0x0, 0x0, 0x4) 20:53:41 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x8) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0x5000)=nil, 0x5000, 0xfffffffffffffffd, 0x10031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040), 0x4) 20:53:41 executing program 5 (fault-call:2 fault-nth:5): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x300, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 261.011040] sched: DL replenish lagged too much [ 261.037314] binder: 8685:8688 ioctl c018620b 20000000 returned -14 20:53:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file2\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffffa) write$evdev(r0, &(0x7f0000000440), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x1, 0x101002) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000100)={0x0, 0x1, [0xfffffffffffffff9, 0x6e2c, 0x1, 0x3, 0x4, 0x6, 0x9b, 0x5]}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00['], 0x2) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) fadvise64(r1, 0x0, 0x0, 0x4) [ 261.097273] FAULT_INJECTION: forcing a failure. [ 261.097273] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.133268] CPU: 1 PID: 8696 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 261.141795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 261.151155] Call Trace: [ 261.153767] dump_stack+0x244/0x39d [ 261.157422] ? dump_stack_print_info.cold.1+0x20/0x20 [ 261.162644] should_fail.cold.4+0xa/0x17 [ 261.166739] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 261.171864] ? is_bpf_text_address+0xac/0x170 [ 261.176378] ? graph_lock+0x270/0x270 [ 261.180197] ? lock_downgrade+0x900/0x900 [ 261.184363] ? check_preemption_disabled+0x48/0x280 [ 261.184846] binder: 8698:8702 ioctl c018620b 20000000 returned -14 20:53:41 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f0000000140)) chdir(&(0x7f0000000000)='./file2\x00') r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffffffffffffa) write$evdev(r0, &(0x7f0000000440), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x1, 0x101002) r1 = creat(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000100)={0x0, 0x1, [0xfffffffffffffff9, 0x6e2c, 0x1, 0x3, 0x4, 0x6, 0x9b, 0x5]}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00['], 0x2) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000200)) fadvise64(r1, 0x0, 0x0, 0x4) [ 261.189403] ? kasan_check_read+0x11/0x20 [ 261.189421] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 261.189448] ? find_held_lock+0x36/0x1c0 [ 261.189553] ? br_multicast_new_group.part.39+0xca0/0x1a20 [ 261.209274] ? check_preemption_disabled+0x48/0x280 [ 261.209296] ? lock_release+0xa00/0xa00 [ 261.209320] ? perf_trace_sched_process_exec+0x860/0x860 [ 261.219951] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 261.219973] ? rcu_pm_notify+0xc0/0xc0 [ 261.219997] ? __might_sleep+0x95/0x190 [ 261.220021] __alloc_pages_nodemask+0x366/0xec0 20:53:41 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 261.247464] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 261.252591] ? default_file_splice_read+0x1db/0xb20 [ 261.257625] ? do_splice_to+0x12e/0x190 [ 261.261622] ? __alloc_pages_slowpath+0x2e00/0x2e00 [ 261.266674] ? check_preemption_disabled+0x48/0x280 [ 261.271739] ? rcu_pm_notify+0xc0/0xc0 [ 261.275661] ? __kmalloc_node+0x3c/0x70 [ 261.279652] ? rcu_read_lock_sched_held+0x14f/0x180 [ 261.284683] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 261.284706] alloc_pages_current+0x173/0x350 [ 261.284742] push_pipe+0x3ff/0x7a0 [ 261.284758] ? __kmalloc_node+0x4d/0x70 [ 261.284786] iov_iter_get_pages_alloc+0x938/0x15a0 [ 261.284807] ? check_preemption_disabled+0x48/0x280 [ 261.312177] ? graph_lock+0x270/0x270 [ 261.316005] ? copyin+0x100/0x100 [ 261.319483] ? rcu_softirq_qs+0x20/0x20 [ 261.323468] ? unwind_dump+0x190/0x190 [ 261.327388] ? find_held_lock+0x36/0x1c0 [ 261.331485] ? aa_file_perm+0x469/0x1060 [ 261.335559] ? lock_downgrade+0x900/0x900 [ 261.339732] ? check_preemption_disabled+0x48/0x280 [ 261.344776] ? kasan_check_read+0x11/0x20 [ 261.348940] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 261.354233] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 261.359266] ? iov_iter_pipe+0xbb/0x2f0 [ 261.363269] default_file_splice_read+0x1db/0xb20 [ 261.368137] ? do_syscall_64+0x1b9/0x820 [ 261.372214] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.377602] ? iter_file_splice_write+0x1050/0x1050 [ 261.382634] ? aa_path_link+0x5e0/0x5e0 [ 261.386625] ? lock_downgrade+0x900/0x900 [ 261.390812] ? check_preemption_disabled+0x48/0x280 20:53:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) [ 261.395854] ? kasan_check_read+0x11/0x20 [ 261.400018] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 261.405313] ? __lockdep_init_map+0x105/0x590 [ 261.409845] ? __mutex_init+0x1f7/0x290 [ 261.413840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 261.419395] ? fsnotify+0x50e/0xef0 [ 261.423052] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 261.427996] ? fsnotify_first_mark+0x350/0x350 [ 261.432596] ? __fsnotify_parent+0xcc/0x430 [ 261.436936] ? fsnotify+0xef0/0xef0 [ 261.440600] ? security_file_permission+0x2bc/0x320 [ 261.445637] ? iter_file_splice_write+0x1050/0x1050 [ 261.445658] do_splice_to+0x12e/0x190 [ 261.445681] splice_direct_to_actor+0x31c/0x9d0 [ 261.445700] ? pipe_to_sendpage+0x400/0x400 [ 261.454537] ? do_splice_to+0x190/0x190 [ 261.454562] ? rw_verify_area+0x118/0x360 [ 261.454583] do_splice_direct+0x2d4/0x420 [ 261.454604] ? splice_direct_to_actor+0x9d0/0x9d0 [ 261.480670] ? rw_verify_area+0x118/0x360 [ 261.484853] do_sendfile+0x62a/0xe50 [ 261.488600] ? do_compat_pwritev64+0x1c0/0x1c0 [ 261.493214] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 261.498769] ? _copy_from_user+0xdf/0x150 [ 261.502945] __x64_sys_sendfile64+0x15d/0x250 [ 261.507465] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 261.512086] do_syscall_64+0x1b9/0x820 [ 261.515986] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 261.521378] ? syscall_return_slowpath+0x5e0/0x5e0 [ 261.526322] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.531174] ? trace_hardirqs_on_caller+0x310/0x310 [ 261.536195] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 261.541221] ? prepare_exit_to_usermode+0x291/0x3b0 [ 261.546252] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 261.551114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 261.556305] RIP: 0033:0x457679 [ 261.559505] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 261.578520] RSP: 002b:00007f5eb5efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 261.586235] RAX: ffffffffffffffda RBX: 00007f5eb5efec90 RCX: 0000000000457679 [ 261.593505] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000003 [ 261.600783] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 261.608053] R10: 0079ffff00000011 R11: 0000000000000246 R12: 00007f5eb5eff6d4 [ 261.615327] R13: 00000000004c3e2b R14: 00000000004d6c40 R15: 0000000000000005 20:53:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000080), 0x10) close(r0) sync() 20:53:42 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x20) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1e}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x17, &(0x7f0000000280)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, 0x108) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '/'}, {0x20, ']vboxnet0selfmime_type]selinuxvboxnet0GPL{lo-em0,&!user]$cgroupGPLselinuxvmnet0'}, {0x20, '#!'}, {0x20, '*vboxnet1wlan0'}, {0x20, 'vboxnet0'}], 0xa, "58762be6efa870f15f4cf02b7993a7c2073584ad33c7ae808750f47a574f51ccab76f8522964682afff1c943c0d94dbcb01e24cc1747834cf5a3f3468500b7f5899c2057ea4440f857bafb3574ed99c76e03117edb7c509fcce9104ffc9053a149ea714ddc740eadf558493d238d4cddb5306871b685df980a880c66eefc68"}, 0xf7) 20:53:42 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:42 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 261.703655] binder: 8723:8725 ioctl c018620b 20000000 returned -14 20:53:42 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="006450fa1208010000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x18}, 0x0) sendmmsg(r0, &(0x7f0000000040), 0x324fad809d5a9cf, 0x0) 20:53:42 executing program 5 (fault-call:2 fault-nth:6): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:42 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 261.858582] binder: 8736:8737 ioctl c018620b 20000000 returned -14 20:53:42 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0xfffffffffffffda5) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r0, r1, &(0x7f0000000040)=0x78010e08, 0x8001) 20:53:42 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x3ff}}, 0x8) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2f, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'memory'}]}, 0x16) listen(r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x0) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) mount$9p_virtio(&(0x7f0000000140)='systemvmnet0:[&wlan1]eth1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200000, &(0x7f0000000340)={'trans=virtio,', {[{@nodevmap='nodevmap'}, {@version_L='version=9p2000.L'}, {@access_user='access=user'}], [{@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r2}}, {@uid_gt={'uid>', r3}}]}}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/133, 0x85) prctl$PR_SET_PDEATHSIG(0x1, 0x4000000039) 20:53:42 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000080), 0x10) close(r0) sync() [ 261.962588] FAULT_INJECTION: forcing a failure. [ 261.962588] name fail_page_alloc, interval 1, probability 0, space 0, times 0 20:53:42 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r0, 0x65, 0x10000000002, &(0x7f0000000000)="c8d63f23", 0x4) bind$can_raw(r0, &(0x7f0000000080), 0x10) close(r0) sync() [ 262.035428] CPU: 1 PID: 8748 Comm: syz-executor5 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 262.043976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 262.053342] Call Trace: [ 262.055956] dump_stack+0x244/0x39d [ 262.059614] ? dump_stack_print_info.cold.1+0x20/0x20 [ 262.064822] ? perf_trace_lock+0x14d/0x7a0 [ 262.069090] should_fail.cold.4+0xa/0x17 [ 262.072373] binder: 8757:8759 ioctl c018620b 20000000 returned -14 [ 262.073170] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 262.073191] ? is_bpf_text_address+0xac/0x170 [ 262.073212] ? graph_lock+0x270/0x270 [ 262.092907] ? lock_downgrade+0x900/0x900 [ 262.097080] ? check_preemption_disabled+0x48/0x280 [ 262.102122] ? kasan_check_read+0x11/0x20 [ 262.106286] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 262.111593] ? find_held_lock+0x36/0x1c0 [ 262.115706] ? tcp_register_ulp+0xf0/0x1e0 [ 262.119984] ? check_preemption_disabled+0x48/0x280 [ 262.125024] ? lock_release+0xa00/0xa00 [ 262.129012] ? perf_trace_sched_process_exec+0x860/0x860 20:53:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2b, 0x4, 0x0, {0x0, 0x9, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r2, &(0x7f00000002c0)=@nl=@proc, &(0x7f00000003c0)=0x1000001e9, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x6, 0x400) clock_gettime(0x0, &(0x7f0000000100)) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x101000) dup3(r3, r2, 0x0) 20:53:42 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet_mreqsrc(r2, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@multicast1}, 0xc) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000000), 0x4) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(r0, r1, 0x0) [ 262.134484] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 262.140041] ? rcu_pm_notify+0xc0/0xc0 [ 262.143948] ? __might_sleep+0x95/0x190 [ 262.148029] __alloc_pages_nodemask+0x366/0xec0 [ 262.152728] ? iov_iter_get_pages_alloc+0x8ac/0x15a0 [ 262.157854] ? default_file_splice_read+0x1db/0xb20 [ 262.162888] ? do_splice_to+0x12e/0x190 [ 262.166888] ? __alloc_pages_slowpath+0x2e00/0x2e00 [ 262.171937] ? check_preemption_disabled+0x48/0x280 [ 262.176986] ? rcu_pm_notify+0xc0/0xc0 [ 262.180906] ? __kmalloc_node+0x3c/0x70 [ 262.184930] ? rcu_read_lock_sched_held+0x14f/0x180 [ 262.189966] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 262.195527] alloc_pages_current+0x173/0x350 [ 262.199973] push_pipe+0x3ff/0x7a0 [ 262.203532] ? __kmalloc_node+0x4d/0x70 [ 262.207533] iov_iter_get_pages_alloc+0x938/0x15a0 [ 262.212489] ? check_preemption_disabled+0x48/0x280 [ 262.217526] ? graph_lock+0x270/0x270 [ 262.221356] ? copyin+0x100/0x100 [ 262.224825] ? rcu_softirq_qs+0x20/0x20 [ 262.228825] ? unwind_dump+0x190/0x190 [ 262.232744] ? find_held_lock+0x36/0x1c0 [ 262.236828] ? aa_file_perm+0x469/0x1060 [ 262.240915] ? lock_downgrade+0x900/0x900 [ 262.243622] QAT: Invalid ioctl [ 262.245077] ? check_preemption_disabled+0x48/0x280 [ 262.245103] ? kasan_check_read+0x11/0x20 [ 262.245120] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 262.245141] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 262.245158] ? iov_iter_pipe+0xbb/0x2f0 [ 262.245184] default_file_splice_read+0x1db/0xb20 [ 262.245207] ? do_syscall_64+0x1b9/0x820 [ 262.245231] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.267783] QAT: Invalid ioctl [ 262.267944] ? iter_file_splice_write+0x1050/0x1050 [ 262.294354] ? aa_path_link+0x5e0/0x5e0 [ 262.298349] ? lock_downgrade+0x900/0x900 [ 262.302517] ? check_preemption_disabled+0x48/0x280 [ 262.307560] ? kasan_check_read+0x11/0x20 [ 262.311732] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 262.317028] ? __lockdep_init_map+0x105/0x590 [ 262.321550] ? __mutex_init+0x1f7/0x290 [ 262.325545] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 262.331102] ? fsnotify+0x50e/0xef0 [ 262.334766] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 262.339726] ? fsnotify_first_mark+0x350/0x350 [ 262.344326] ? __fsnotify_parent+0xcc/0x430 [ 262.348669] ? fsnotify+0xef0/0xef0 [ 262.352330] ? security_file_permission+0x2bc/0x320 [ 262.357375] ? iter_file_splice_write+0x1050/0x1050 [ 262.362410] do_splice_to+0x12e/0x190 [ 262.366234] splice_direct_to_actor+0x31c/0x9d0 [ 262.370918] ? pipe_to_sendpage+0x400/0x400 [ 262.375265] ? do_splice_to+0x190/0x190 [ 262.379263] ? rw_verify_area+0x118/0x360 [ 262.383435] do_splice_direct+0x2d4/0x420 [ 262.387605] ? splice_direct_to_actor+0x9d0/0x9d0 [ 262.392481] ? rw_verify_area+0x118/0x360 [ 262.396654] do_sendfile+0x62a/0xe50 [ 262.400397] ? do_compat_pwritev64+0x1c0/0x1c0 [ 262.405009] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 262.410656] ? _copy_from_user+0xdf/0x150 [ 262.414815] __x64_sys_sendfile64+0x15d/0x250 [ 262.419302] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 262.423883] do_syscall_64+0x1b9/0x820 [ 262.427787] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 20:53:42 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x280001, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) write$input_event(r1, &(0x7f0000000140)={{0x77359400}, 0x1f, 0xc29b, 0x10000}, 0x18) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0xff, 0x0, 0x1850, {r2, r3+10000000}, 0x4, 0x8}) [ 262.433164] ? syscall_return_slowpath+0x5e0/0x5e0 [ 262.438099] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.442945] ? trace_hardirqs_on_caller+0x310/0x310 [ 262.447965] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 262.452999] ? prepare_exit_to_usermode+0x291/0x3b0 [ 262.458040] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 262.462911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 262.468108] RIP: 0033:0x457679 20:53:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x995e, 0x758a}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)={0x7b, 0x600000000000000, [0x40000071, 0x0, 0x48, 0x820000c000000000], [0xc2]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x3, 0x0, @ioapic={0x10f000, 0x0, 0x9, 0x3, 0x0, [{0x8, 0x7, 0x4, [], 0x800}, {0x81, 0x7, 0x7, [], 0x7}, {0xa58703d, 0x5, 0x0, [], 0x200}, {0x7, 0x0, 0x8}, {0x0, 0x3, 0xd5, [], 0x8}, {0x7, 0x81, 0x1000, [], 0x2}, {0x5, 0xfffffffffffffff8, 0x7}, {0x1, 0x7a, 0x100000000, [], 0x39}, {0x8, 0x0, 0x3, [], 0x7}, {0x1, 0x10001, 0x6, [], 0x1}, {0x0, 0x3ff, 0x5, [], 0xffffffff}, {0x5, 0x2, 0x100, [], 0x80}, {0x1, 0x1f, 0x200, [], 0x7fffffff}, {0xad, 0x7, 0x5}, {0x80, 0xffffffff00000000, 0x4, [], 0x6}, {0x8001, 0x1, 0x9, [], 0x2}, {0x2, 0x4, 0x3f, [], 0x4}, {0x3, 0x8, 0x1f, [], 0x100000000}, {0x400, 0x1f, 0x80, [], 0x100000001}, {0x7, 0x3e, 0x6, [], 0x3c}, {0x7, 0xb9ff, 0x7539, [], 0x100}, {0x3, 0xff, 0x400}, {0x5, 0x1, 0x8, [], 0x10000}, {0x3, 0x1f, 0x2, [], 0x569}]}}) 20:53:42 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x74, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 262.471314] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 262.490223] RSP: 002b:00007f5eb5efec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.497938] RAX: ffffffffffffffda RBX: 00007f5eb5efec90 RCX: 0000000000457679 [ 262.497949] RDX: 0000000020000100 RSI: 0000000000000004 RDI: 0000000000000003 [ 262.497958] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 262.497968] R10: 0079ffff00000011 R11: 0000000000000246 R12: 00007f5eb5eff6d4 [ 262.497977] R13: 00000000004c3e2b R14: 00000000004d6c40 R15: 0000000000000005 20:53:42 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x9) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000001000)={&(0x7f0000000000)=""/4096, 0x208000, 0x800}, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000001040)="0a5c2d023c126285718070") mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 20:53:43 executing program 5 (fault-call:2 fault-nth:7): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:43 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) syncfs(r0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000004ff0)={0x2, &(0x7f0000002fe8)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 20:53:43 executing program 4: ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x3ff}}, 0x8) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2f, 'rdma'}, {0x2d, 'memory'}, {0x2b, 'memory'}]}, 0x16) listen(r0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0x0) r2 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) mount$9p_virtio(&(0x7f0000000140)='systemvmnet0:[&wlan1]eth1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x200000, &(0x7f0000000340)={'trans=virtio,', {[{@nodevmap='nodevmap'}, {@version_L='version=9p2000.L'}, {@access_user='access=user'}], [{@context={'context', 0x3d, 'root'}}, {@uid_gt={'uid>', r2}}, {@uid_gt={'uid>', r3}}]}}) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/133, 0x85) prctl$PR_SET_PDEATHSIG(0x1, 0x4000000039) 20:53:43 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000080)={0x2b, 0x4, 0x0, {0x0, 0x9, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r2, &(0x7f00000002c0)=@nl=@proc, &(0x7f00000003c0)=0x1000001e9, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x6, 0x400) clock_gettime(0x0, &(0x7f0000000100)) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=@dstopts, 0x8) connect(r2, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) ioctl$UI_DEV_CREATE(r1, 0x5501) syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x101000) dup3(r3, r2, 0x0) [ 263.085395] QAT: Invalid ioctl 20:53:43 executing program 2: timer_create(0x3, &(0x7f0000000100)={0x0, 0x4000000000000b, 0x2, @thr={&(0x7f0000000080), &(0x7f00000002c0)="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"}}, &(0x7f0000000080)) timer_create(0xa, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x7f, 0x400000100000003) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f00000000c0)=0x64c000, 0x4) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x2, 0xdeb, 0xffffffff, 0xffffffff, 0x9, 0x5}}, 0xa) 20:53:43 executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$TIOCCONS(r0, 0x541d) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigqueueinfo(r1, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x10000, 0x0) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000140)={0x0, "a689c92d960acf11c92b859ae1fc4b9140a91e02493b5318fdb5a13f5088b620", 0x0, 0x30, 0xc13, 0xfffffffffffffffd, 0x2, 0x2, 0xfffffffffffffff9, 0x1}) ptrace(0x4208, r1) ioctl$KIOCSOUND(r3, 0x4b2f, 0x5) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 20:53:43 executing program 3: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) syz_open_dev$audion(0x0, 0x0, 0x4004) 20:53:43 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:43 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0xffffff85, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0x80, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/178) 20:53:43 executing program 4: timer_create(0x4, &(0x7f0000000300)={0x0, 0xe, 0x4, @thr={&(0x7f0000000140)="87b139d1b6ccc6a5facddb74a8f153dc95e8fcb3d1019f8949", 0x0}}, 0x0) timer_getoverrun(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYBLOB]) r1 = getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) ioctl$sock_ifreq(r6, 0x8921, &(0x7f00000000c0)={'eql\x00', @ifru_names='ip6gretap0\x00'}) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000000)=r1) socket$packet(0x11, 0x3, 0x300) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x10000022b}, 0xca) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) sendfile(r3, r6, &(0x7f0000d83ff8)=0xd00, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) 20:53:43 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 263.628376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.635935] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 263.705429] IPVS: ftp: loaded support on port[0] = 21 [ 263.774436] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:53:44 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) move_pages(0x0, 0x2, &(0x7f00000000c0)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil], 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0x0, 0x6, 0x0, @buffer={0xd, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000100)="3c1a016b527d", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=r2) 20:53:44 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x2c, 0x32, 0x829, 0x0, 0x0, {0x2802, 0x40000}, [@nested={0x18, 0x0, [@typed={0x14, 0x1, @ipv6=@loopback={0x700000000000000}}]}]}, 0x2c}}, 0x0) 20:53:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x102, 0x4) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000300), &(0x7f00000000c0)=0xfe18) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vga_arbiter\x00', 0x3fc, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000180)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x106) exit(0x7fffffffbffefffd) readahead(r2, 0x4, 0x4) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000500)={0x3, r2}) r4 = getpgid(0xffffffffffffffff) setpriority(0x1, r4, 0x5) r5 = getpgrp(0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r1, 0x0, 0xf, &(0x7f0000000240)='wlan0\\}md5sum#\x00'}, 0x30) setpgid(r5, r6) vmsplice(r3, &(0x7f00000008c0)=[{&(0x7f0000000800)="50e005e6815dc6b00b10002c519c66795de0d52fc076f1eb6a9c58cde88a6eef0093b24a178e84740aa6d1618e2033d38d4aea0fb17cda768820a83864ac14405192e4549c3ad33fca5d187507c5a984d6a0c72683e7af2d4a070000000000000005b6d0dce139e4c627395426a1f6fc0b416f7163eb07000000d9e0203181735ccac1e530c361262a0a5e0a98e9ca3d17f2f2f0c116fa9fbdbe757d93e323d17f29", 0xa2}], 0x1, 0xf) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000580)=""/190) mq_notify(r1, &(0x7f0000000540)={0x0, 0x1c, 0x7, @thr={&(0x7f0000000440)="4c272be7ad31b92a7819bd4438656080ec27849a76ffa174b3fe114201140a34e5e6cb4d6a3ab9bcdc80a2717dd8542f33caa13b8c9cb9f5d11d4c66dc81779917000c05979ce491010f7259d0ecdb80fb30d6cba6e2b753ac23635fbb3d879cc2982fb4bbe1afcea02f12d11d43e1337c25411ae04bd8efc06636c455e15689c75b95c24f0dbdd30bdf91f2313a3e39b263ff5196302f1880765440d8b1", 0x0}}) r7 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000002c0)={0x4, 0x0, 0x5, {0x5, 0x0, 0x10000, 0x7}}) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0xa1, 0x40001) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @local}, 0x10) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0x6d, 0x7fff, 0x400, 0x44, 0x4}) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x1, 0x3, 0x3, {0xa, 0x4e20, 0x1ff, @loopback, 0x8}}}, 0x80, &(0x7f0000000d40), 0x35e, &(0x7f0000000d80)}}], 0x4000000000001b4, 0x40400d4) 20:53:44 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x1000020) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100), 0x3f) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) [ 264.206689] netlink: del zone limit has 4 unknown bytes 20:53:44 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) getresuid(&(0x7f0000001a40), &(0x7f0000001a80)=0x0, &(0x7f0000001ac0)) sendmsg$netlink(r0, &(0x7f0000001bc0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)=[{&(0x7f0000000100)={0x18, 0x27, 0x604, 0x70bd28, 0x25dfdbfb, "", [@typed={0x8, 0x10, @uid=r2}]}, 0x18}, {&(0x7f0000000240)={0x17fc, 0x31, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@nested={0x128, 0x1b, [@generic="bf819254c84706c44675430bd5701709a68540607acd4bb00177dc6971c9cbcc163f00b9e08088d537231519e656e916331c164fe8de03fbee42f92743fbbb379a2e13905979ee466dee31d05f0ddf9b0e594f19867303c1f75892820e390b87423d924c0f1b52a141ffecdc7f4dcfd751dce4095b7b56e8ac33f0ca3d3ab4e9a58150d4fe83c84219e4d6a536313c531bda2fd82b9f30898e3011d551", @generic="2b7f94842459dce06873bc0af00927ff4162ce60183528c39038d1b0b5a060e62a9c349de200badc49fbbd633fd2dac0646b0555d3607411644ed9541ca3dea9435e8ecd3698587c7fdaa1840d940ae0ed2da25f2490f973822666b7e210a66a341724443766c0d5165d090383d63a831910215f3dd896025599178cf646bef37eb43235b8c4"]}, @nested={0x1014, 0x7c, [@generic="ece777d2a0ad6d32ba35450514788704abae8a9ea5841333e30a58c0817b31d31f7377b21d8140ca4871f6c51509256b17472d118437f87220b875ed92d8d7ea6539b6f23b11f4dd30eabea02e719814eca2c909fc76e16f649ef608bfd884b97b764e90fb3205938ef1ef9e1f0ed9c8a152d2a3bb6c416e2f751604ff36994f92e4edf52fa668e19340cf902dfc1abcf3e1bfa6a898bd48f3b45c4be533bbb3b23c7799c7531f35f23b109e3af17824410a5e7a0d4043faeb4f79b3fb1b04bebc6379de79587439867b4b0f8087c0d3ec5acfc4da65db32d892d2ad73ae34d49b1c15d0726657300f72f708e7948d5af7ed930ffd3fc2197524b4574cf9014a746a9753113cc4d0627fe5d8bc7675bc306e55e800e59dbbb3a90b70f291e31365d472cb332448cfdc80cada52d54378d9e4b9edf62956b1e152177b057584f2b6c748a4eeeea8c13eeccfb5ed4bb857733a70d90855f84bc7461ddab67d597717e8900b0323badd2b9c39251b5032fda7c1e43cc2cb9113722aff48ee39944dcb634a2a363d7a7a79b7b853974c46b5a13426ede10b26b5b06b92ac7437589613dc8df39773d5f7fcdc59dd9bb9313e7cf5555b706d8a51714557eace121c1854cb988f8ce2925145727bf8477f3f5e9a9cccec9a84487e6186bdaddde19ff5fcb0ea08968b1b7b92bebc6fe11191348e7765118dd5a6290acfd6630e3c68edce0851e1e9525c65f81f6713e61a2f99a3f1ea72f5964959da426d137b1b9b05b5a3f07c4fb8c7ad621dde239537c949d33aeacfd536a81e0a5f99dafbb2121c0fdc395304831f9c6fd5d0ccae3b2d48fd260595f8808782fcc03fc58ef78da53feb0c10867588b2800c4c32523e820526a186358f16579de7835cbaa04c2351711f7401be0395d98468ef145213a4ac94f974ce622eb09a33efa44a2b6e37abee572761ffd6e856a06f0bc11d0d4c4538dce58a6979e23a95f3e419b62073acb5ca85518d7500194261e376f8a8dabd6b266e53fbcd50c1c75c777a2fe1ced2438892fb930366dcbe3016eaaaf79e93d7bb5793a053d30e2fef09a2a29cc5437106102d64ad0b98651b6e11548760a9f82d825f212c4c48b571d2622eebd9ecfd1ccf64ca6acfd0d52551ed9a3bee875f8468cae12aeaa04034ca52d2c90b6465e90b5d362c67b7910268816e880c0909a2eb3793c69c95c1242d1cc6af85a2b3957a16d2bd50e902e298fb3c04b4bd1395d40df624313b5c8c7d3fc43551e7d9996db95ad8e5331eb15daf8fe4c5fd362b0c6b2b15b4772b9ce4f58ad7065b73dc9d62bc0bf0ee8702a59295e4c6abe65f312fb6f821af9dbd49c23f7785632dc8e8e8ad23560ed6ce18006ae81e1a6d9907471c1f88734341aad2af8df5a621b551a5917648ca797faf0ec77597700769767307bab9174751dd8b22028db26f65aeee06764ad0ea89cca55bd3db4138c762819beefe7dddbc053c23709fb47490bd0f41b37e92ba30691ae26e4a7389ca096ae913e8305692d32fcf3a31ea37498cfe56fda67d5efca4ac6463fe99dbcbfa9932dc567186676577bdd676db125b83d48aef2c94b429371337f64928939d076fad1b162a2c6ff51416d7096a61031123c5bed193593bb012768e7f2522c46943f002f6f093b88b5961a200d4d9707f11ee4ab2244dfb689230b8200381787296e3448eecaec6c7348a23890596f36fb7a43eaaa1bceaf09c00c17cac05b4fe78fe05c13d923288b94c8d3a8f3ae29bc64ab2f80ddc3356fde65439899f9583b4d341107bba1ec9db7dfe2186c72eca7649f01059865312fb996e47c68e54ef1867e9b1dfc3cfa383c5ce80900cbe18f0f69c0841dfc133fee4fe2e0adbe3e4b8dc927545ee31ab99fcb0418dfc1bc69d6d4fefa7616d7d7d276dcd08a68edd2d512a0bd66c679f464929a66fa0ecf95e463e74bc8cf478bafe1d806e0895baa501d638e106878b66fe10e247456201d2d97cecec507e5d9050055e69efc9cef34daf5e12c8238d82dc81f2e40e2e219f7057b988f2fc39fae26eac0a76c5a812d88bdf73487a182f42b55ad398fb8f4453342e90cf47c103383ee19c9b6a0066dbd57a072e3929b4d152a95645736d5950e438dfeeefe2189e118a70bb464dc6dbff2a23a9c028e1d4ecafad663df840c0c430977e60b05fbf43aa08e5f95d816e6aa0ae16cf1651731ed2758f773c9d3cbdf787aedbcf0d6be4e9ed2a1406340f7f0f4b838993e38cd9a550c02d88762f255defc59e40720f932148f6728ecd57266637f83ff89f80b51f3c6e557de3a49cfaf65f380dfa1a246bdf37026d944d44bb527892319c2b9dd2f4ffc5a4fc597f69f21270a26dd449846c114fcceae5c2ad427e23ad2ccb81f096b37bc824f0f32cbc0f6cd0f1e5db1bceb008c7547bc6c940ef5773f6d15849be65f99a32020520949c808e4f258bdeee71a06b3c606a5f5a00c45bd7db42a842a0ac8dc624ad69d342de4ba0425177cc1aaeb65e5b47d4cc977a4943bb9ee663e03a583c118e23771f11525899f4ef3125d9d4dc854eb1de5e45943a82484940fb55b002c0190c5c99076b1712efcad8298def3aa2fdfa89ba37951c9ba67423cfc5db51e6078cec7eda867937c66345e544e15bb83fa1180d8e7abd713119e977c1e9d8bd687fed8a0a3b910ec77bae915d6de4cc557bbdc503bcd3c99ab5789e4ff2643155869a13ac91159b5aa8aed7e47e818fcfc55724bd099e1e16d68087d7ec3a3ad5690faffba0d59a998a962590a9194efcc99924aeb3191b8c4bbbbbaa670d92f08255356812711451c75254209f9b093ae6271b28e68d5f08d22350737245b94c56afd95e55acdc39ab970c6e9fdb7682c032f7cf602821353585fa3c4d27b615cfc6c8d1752cb267a95c29884c31c7f1016cf23840940df4c8882db51e2810b3df80261f49cd7963e5e4abfcbb8cd83a203a95c3bb3d69bc46104b97e63f1edbdde9799c50332e25172f6a1c8cb651102b35aca6bb5b66e673c982de84a21fe8d71f78bded3a011b39ffe2d44357435d1696bca05baeb0e03c0a25cdfaaaa2c3dc2a99951027b7b388df8da58301e441a10924a78f1eef40aa68dc605aada6ecbe8af6642f18323f5ecdf316a54360a10c614fa89b208ab9d6f8eba2734db549f229d231a9ce3e866c82bd293fb5524e42fbe866053d0fe745c618f91cf81b722df997bd96bbd6e474e4721d5e5807678fd5d2878b202dcdd05f13d49390cfa23ecf9ec7c145033d04e68ec190c9ed7f56bf1e3cc74684fc260e56c3bb4f36e8859eec80876620ece2392898f27e926f0ee04482f7241022a6859139c2df3a420e6219e063fe8ee08860be02f54287f2a77564c3e00bd21489f769c3599d4475884b47ffff554f551799a256ba09f0d0c736650cf870824a5b355492d7047150b9b09d28b76e9e7bb8669815089ca79d4d97612eb1abce2bd658a568f66a09702d20e3ab21c6e452868facbdbc13ed4704cb187022a1494c29d68fdcef62abdf8e966b8a3aa9e80568675659873fa33106b82c8e047368f4ff0ad1b08d700bd8e956a87a7ca097b8961daa977aabc7e0ca51b6a05cb5d1ac64fcbc5f57982e70773fd0735c25bab863f5efbdeee28c993b627d52e1dcd14ef8bf90f5cf23ba70d58b2830addc974b4e7a2ef55ec4891d0fa1c6d30de76ef31033ad9addabcbe91ee73e9a2ed45ebbbab3f430143861fa74053279098534c465839d0c29ac5856b97046d9ef92737b70b280b6f4208e46e17a8388940d4918de444ec07ecabdcf51ed55aeda72d4682f07310f1faf3f928b4e735966202ae48b04fd7e5527778587c733b262dfd1e55a4174321e487b34a6d9c79e0687ad581b086e315fdcfbc5667c8906aa23bc834b0babd23432c0c2764b37c739eb89250f8e3450032903805ca04d3db5bb26f0d48caf55b171b1ace10dfe37986be14120727d05442198866ac0b6e6b98ff53079581261a2b83a3ad2c6e86b94e6df90b14f97620ba42b7ec20d94262020623dd1b6e8cfaa2172fd6cbef22d6ebdc3dc1267744bee7936b616a75f5d8ee3cbe2d883510bf3e5135bbef16fcabb5ca12e1ace8888c1e4dba0c912ccf3bf0cc238abf3442ed6172bae16d7ac0e1f738f9989c6763c052a0914e4cefa0beeb4f92c5206dd403f113acbaf96704dd3ea947beec040f4ef5af14df4a42fd658f500b3454a06f3c1dc1a1ffaeb8a14bd34f35bddc404cdcf63bd0380eed8c6f356ddc5f1be5f293a50adc3fbcc8981772d6e18b8a09e82d6a5827a721373ee35d766428ba7a33dedabc65117becffee983e7fd4879f4a6c0bae2deccc4b81ffe7dbe67d1cd2f391832689c518331d88703db1e06083401c44e97c8d13e5122157cec47f707a81ea2aed63236ef9c999988146248a366763fb6f95b5314386ecd057559fabcfeeef7b6590007cd48bc125f9030de94e2a8a421568a9a8f65cbef751404240a8c766b4d7d17034765aed0905bbaf73be913529088013a3e085aeab6bfdd14b8bcd4008f4819b6aba108f25ca8095fffa1bbec0afb58b3ee309e2131a64f2ee3f1542d50556552271e385b8cb96636e256309f1933d38f41c579a630af640e5d7bf8ee5eaa9e7d03766cd33d6ebb09407edef3f720feb0517a64f34c969d1feaafbd3215370dc9e56dda0e60bbf2478926f96465304d184b7031deba68423ebdac13ee3bef89b89463bea7abd5da7040fe8f1513f8cf19db8adbfc43862729b1db693484110e1308058a0e9fa2fcd62c58ac48a62f32d3842d5155c079e8eef8f918e8f162db68514cd1daaf4796cb78c1430f8f3cc4c1beb3014b078f0a88f1f58561de5c295082fbf9b2cf05c654bc6c971b97cc4025976e85ce32ce2c71e00b9435c48df4bf2c6b7617ae93d2458804aa4e36465ec115082fecbe3f808db00b94a0ff66ba4a22b8ebfac360c11db76cb23808f11f781f1bdd451dc4655a7b102c48cac849ab3b4fe4ed35ca392a849a8123f8738e6d780e6421cc69c0c1e781bef02ec3cf94219e4e4e88c7845d5fde9e1824622cb2f8bcc5cf0f14003c4e7ce8d67e842b39a25f2e66d2164506438b7b76ab3f6f77915a57148470c798cf6939e0c2d6f49ca35c01096a5b3fc7c733b20fb6fe842187f73b6274e12ea47a6945570ef746f1a28216d53cbdc262e29fb9d2cad02fa021714a4e98161963fbb1d975782b8e47f2963b0527259613bdf3b9d4f9a72d67a2a510769f17fccdfcdb0f46f2c90330c130080ee29517d0d8564b4a2f1fe109f79a397c8d088e8e4377fb60a8374e2b09d11b8f7cef1e146f59b0b6f78a004aafeea8610fc785cba92ed700b620f466decdeb6ea0d8bca0438f62bdd0cb0288b395399bac13def2e7599a106b12293a0e8001c1cad6c9c063a26dc9eb8776bec4c0c080f4d7f6684eb30cef6d8ab554d031175289754ae3937e1b010a51136cfe1b065f153624a3813c7ada204abc72eefe2d9583407a0717ae5d3100c187451607504d9f087b29778566c747c4c76a8f62059c1d6728b7ca73cdaa875c109261d461d03e7efc800ef58ef5c25488c303df18f524738659618bc7ed6e484569d1ce927f8b4e4e47ef27283ee507bb366c2cb3af189bed2925a823b575249d875d1385c888cb830fc9f03e3cad0a883255c975e8c323d3065086868a9d6cf80cdf0b1c221f8778100af5ba8f1220db8345a9a17766d51c413841496fccf6468cd4649b1e3dcd4a9cacd8c4264ac58b2ef32aace72f7f5867f6", @typed={0x8, 0x59, @u32=0x3}, @typed={0x8, 0x33, @u32=0x7ff}]}, @nested={0x128, 0x19, [@typed={0x8, 0x6f, @ipv4=@remote}, @typed={0xc, 0x1f, @str='vmnet1\x00'}, @generic="4e61a83d025f734dafb73581531ffaff43026188d59e8bf4d055a9e46556d9152465da08169d8a2a74", @generic="553115b01ea37633b24a4c2fb295b2f1903a33e684843f0c8a6c3a3431cc191d5bf49d66eb0b", @generic="6c8ac462e4e8c6d3d8fddbcb16167ba136de3d6a29422da88e2891473f67926b0031adbc163f0a73e9c2864b2d66af82c3090cdcaaa9a4a0180effdd86cfb82afcffb62bb4eba21a104348b59a3503c4c9b33640877d29561f408e63a3181c47873b38cf2607bcdc737eb3549d22f3f722f3462cce83c92ca63aefbd0d9cdef1f24f08a4f5dc105ecee9af1f60d3d37cae3af730f081871e11ca", @typed={0x8, 0x13, @fd=r0}, @typed={0x8, 0x2a, @u32=0x7}, @typed={0xc, 0x6f, @u64}, @typed={0x8, 0x29, @uid=r3}]}, @generic="8e1969a4e54bb10c8cb48d14060a14dfc847f23ea7bb8afa0136f54fb4549e431e93cef8ef4f690b28067c87648d84f1a4ba174bf077dee0f2220520cb6c4b4ba7fbf01621780556f48e9be1687ea304d4b8a43344ac8fbafe0adb6015878dbd4e77146b44274082cb3c", @generic="865e949fae89bd953c818637e75b80186a48fb9485ba35999c9297fd895c2b02afbaf176f4aadd0638db7c8cc8c13ffdfd60d657831b42a5fb49366467123134cffdce5f244c3e156a5dc3c45e23657c8fbc00b0d5e82d81ed71272f6ac88d0bc15bd2b4362a289678a067a7b9e1251bcd997b61c7453e", @nested={0x380, 0x84, [@typed={0x8, 0x28, @fd=r1}, @generic="37daa9a8699559b42d04224216353442d05d4763cd31e40305ca2428c601a7b961b57a2ae79717b438f46973bfaa5ac1f5f6bc367ea89b92da75d734199ecab36609dcfab13d3c26260d3745efbbe0427bf8a4abbf3da0f58c6047ef369c6a30fda4386b93f21ac5fb0ed648f4cb3331", @generic="ac453a237040084e9e2bacc5c2d8c6c877acb72aaebd0a7d5bfc288dddfa81c70adccd2de45a", @typed={0x14, 0x76, @ipv6=@dev={0xfe, 0x80, [], 0x20}}, @typed={0x8, 0x93, @u32=0x8000}, @typed={0xdc, 0xe, @binary="3b40aca87803c4644d1448e3937c881f6532ba70ec53eff871c9a30c5c332e92414201e350dd8c496825dc4380c4016961549dbf831ea4b8bc2cad837a64330e0cc3f42bc0c3fc82cbcc6b42454e28ccf9b10e8b36c58cd30cf1369608154c0c825afe21658b24dcee732c8246950db71d5fbc89f95793108181933a6e164c7453e84a854c76cef48d8422df13b53e1ca780272702dca8232216b8c0464671962fbe2acbba5e304592a142291fbe12ab438073bb61b739b692d3efcd6a2782717a4a8859b63e38f79e0836d4cc3e5f2b56fc9d5ce4c5"}, @generic="39dc1ab0e21a4d3456287529d5717a0a37cb5c3748599311ae44ee9cd9d7e1e595527e25c0804949ff6909ee29cd3b2c45ae12b4f951615c99d54c5701c05aa0ce9a7fcaeffca08aad2e4ff6a68989950361a195b95f3041fc3378d8faba938243a1690b4104ff66c12af5439f6149b4066311ea8d9667de0a92534f0c0212ec28902fa068b4a55cb5b1bf601ef20dc17d196500d0a257cddd2db2578fb3ba548edbd43c28ba2985b6db1e513e950c6866d904765a2fc93caf2645542808aba1c12d9216ed5ee7863dd9dc5507ffeb39574bfa90a48ed46460a22ed18582580c9348fc8bd5383c92da9827f35621ac753c2eb0c261", @typed={0x4, 0x77}, @generic="3bd51b59dd9338c383f2fd4eeab1191e96a886c60c71f71d01891c61b1a7a2fc59db80c52704c909e9abaf1fd6b1c983b1e2e62c8e8322d949f6786c66d80b70ea7bc2c80d14c38409627f1b56c85c77794cb6077d57db12aa4f39bbfefcac0e19c14d6a705be0681d7533c02a015e85883f0375ab203840573aa36574fb7d0025d463d1a88ab30a5714715026340c24ac298719d717269e12501663d7658976992f63e499cfc17d8fe4d91be030d25b983e911c7d23765f3cf5f7513816ea5369aa693c8d30dae70851aad3780d0472e13fba579894c90fa2e1da0cdd6fee530fdcb0102f628108b9f5"]}, @generic="38168e92988d569c4e64917f8666a22e08769cc60fd537a13ba833910220a2f2331be79f7af1c2da04bb3ba02b161f65a2715f65073fb584373db27b31cfaf02f3d1c2ba6b87c4469abf2ac1236141f2c57e33aa3354617716ddd81882ee16749cadd7af49a618c5aa71a84a125d745533e30c599399eb5ea5cd04e81bc944f3ca58e45673545f19b44a7d41f45619567d80844608894c74142926692475d0ab220d31fa7635c06b7ed60b0c176f121fc0b3d613a9ca12c705661c449bdaab6738061f2ff960a5e0cd489977", @generic="5f8199de9c9c3df7dda818bafe9d3eac589b27d5e0ff11474720832af40b6397fc083ca5db95e4160d4a532a2e94ef9c8af6d5ee24b2347eee5c15d9976cb0b5ffa70d53b64dc2120c776db5d01492cf09070dedf7f6d811e7c880"]}, 0x17fc}, {&(0x7f0000001b00)={0x18, 0x3f, 0x100, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x13, @uid=r4}]}, 0x18}], 0x3, &(0x7f0000001b80)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x28, 0x40}, 0x80) r5 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) fallocate(r5, 0x0, 0x0, 0x3) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000001c00)=@assoc_value={0x0, 0x1f}, &(0x7f0000001c40)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001c80)={r6, 0x2}, 0x10) dup3(r0, r5, 0x0) 20:53:44 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000000)=0x80) openat$dsp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dsp\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) r4 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f0000000340)={0xa0, 0xffffffffffffffda, 0x4, {{0x4, 0x0, 0x1, 0x0, 0x5, 0x0, {0x4, 0xffffffffa4b2942c, 0xa3, 0x10000000, 0xc44a67, 0x8, 0x3, 0x200, 0xe1d, 0x9, 0x2, r3, r4, 0x15f, 0x80}}, {0x0, 0x4}}}, 0xa0) sendfile(r1, r2, &(0x7f0000000440)=0x5d, 0x79ffff00000011) 20:53:44 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x1000000000004) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008041}, 0x8011) writev(r0, &(0x7f00000a8000)=[{&(0x7f00000000c0)="580000001400192300bb4b80040d8c56fa6932324ba7e680129643c218fe59a2e04a03ca8164243e890000000a215a0004fbf50dfff90003a5000004000000005e0000001d30221f1000010007008a96ff0000ec6b0f536e", 0x58}], 0x1) 20:53:44 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r0 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000740)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000600)={0x0, @sliced={0x1, [0xffffffffffffff3a, 0x89, 0x3, 0x6, 0x6, 0x4, 0x5, 0x2, 0xfff, 0x6, 0x7, 0xbc4, 0xca, 0x7ff, 0x1, 0xcee, 0x7d58, 0xffffffffffffffcb, 0x0, 0x0, 0x5, 0x0, 0x401, 0x0, 0x0, 0x1, 0x8000, 0x1, 0xfffffffffffffffa, 0x7c52, 0x101, 0x193cbb87, 0x6, 0x401, 0x6, 0x7, 0xfffffffffffffffd, 0x1c871d2d, 0x7, 0x8, 0x400, 0x6, 0xc9, 0x3, 0x8, 0x7, 0x2, 0x100000001], 0x2}}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="040000000000000008000700", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r7, @ANYBLOB="08000200", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=r10, @ANYBLOB="10000300000000002000060000000000"], 0x5c, 0x1) sendfile(r2, r3, 0x0, 0x100000001) 20:53:44 executing program 5: socket$inet6(0xa, 0x80000, 0xa31) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0xffffffff, 0xb3, 0x0, 0x9, 0x0, 0x7, 0x400, 0x1, 0x6, 0x7, 0x2, 0x0, 0x1, 0x4, 0xc9, 0x4, 0x10001, 0x5, 0x100000001, 0x9, 0x6, 0x7, 0xaa, 0x7, 0x0, 0x9b, 0x20000000000000, 0x0, 0x7, 0xf67, 0x2, 0x20, 0x8000, 0x3, 0x7ff, 0xfffffffffffffffb, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x10, 0x100, 0x5, 0xc, 0x4, 0x9, 0xa3}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$KDSKBLED(r1, 0x4b65, 0x0) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000580)=0xe8) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='fuse\x00', 0x2000000, &(0x7f00000005c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@subj_role={'subj_role'}}, {@fowner_gt={'fowner>', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']selfbdev^'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fsmagic={'fsmagic'}}, {@dont_measure='dont_measure'}]}}) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000001c0)={0x1, 0x0, [], {0x0, @bt={0x101, 0x1, 0x1, 0x2, 0x6, 0xff, 0xe454, 0x3, 0x100000000, 0x8, 0x1ff, 0xbab, 0xfa, 0xfbe, 0x19, 0x20}}}) 20:53:45 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000000)={0x9, 0x4}) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:45 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nullb0\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000240)) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) [ 265.273215] device bridge_slave_1 left promiscuous mode [ 265.279446] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.411426] device bridge_slave_0 left promiscuous mode [ 265.431805] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.603735] team0 (unregistering): Port device team_slave_1 removed [ 265.617381] team0 (unregistering): Port device team_slave_0 removed [ 265.634692] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 265.717553] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 265.848958] bond0 (unregistering): Released all slaves [ 265.940854] mmap: syz-executor2 (8885) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 265.956836] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 266.608755] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.616570] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.624516] device bridge_slave_0 entered promiscuous mode [ 266.690146] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.696690] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.704579] device bridge_slave_1 entered promiscuous mode [ 266.749005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.795853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 266.932895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 266.980080] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 267.026038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 267.033324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.081465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.088331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.225903] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.233942] team0: Port device team_slave_0 added [ 267.277425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 267.284896] team0: Port device team_slave_1 added [ 267.329647] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.377076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.407758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 267.414808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.423558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.449658] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 267.456768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 267.465410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 267.801408] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.807768] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.814449] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.820803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.828820] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 268.001083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 268.744619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.854304] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 268.942455] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 268.948587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 268.955733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 269.042338] 8021q: adding VLAN 0 to HW filter on device team0 20:53:49 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:49 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x3, 0x4) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:49 executing program 4: timer_create(0x4, &(0x7f0000000300)={0x0, 0xe, 0x4, @thr={&(0x7f0000000140)="87b139d1b6ccc6a5facddb74a8f153dc95e8fcb3d1019f8949", 0x0}}, 0x0) timer_getoverrun(0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2080, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) syz_open_procfs(0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000700)=ANY=[@ANYBLOB]) r1 = getpid() getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000400)={0x0, 0x81}, &(0x7f0000000440)=0x8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r6 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) ftruncate(r6, 0x2007fff) ioctl$sock_ifreq(r6, 0x8921, &(0x7f00000000c0)={'eql\x00', @ifru_names='ip6gretap0\x00'}) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000000)=r1) socket$packet(0x11, 0x3, 0x300) write$P9_RXATTRCREATE(r6, &(0x7f0000000140)={0x10000022b}, 0xca) write$P9_RSETATTR(r6, &(0x7f0000000040)={0x7}, 0x7) sendfile(r3, r6, &(0x7f0000d83ff8)=0xd00, 0x800000000024) creat(&(0x7f0000000200)='./bus\x00', 0x0) 20:53:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r1, 0x545d, 0x0) 20:53:49 executing program 1: syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000080)) 20:53:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) r1 = dup(r0) write$evdev(r0, &(0x7f0000057fa0)=[{}, {}], 0xfffffd24) write$binfmt_elf32(r1, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) read(r1, &(0x7f0000000040)=""/170, 0xaa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 269.578500] binder: 9159:9160 ioctl c018620b 20000000 returned -14 20:53:50 executing program 1: alarm(0x0) syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x3, 0x1, [0x3f, 0x8, 0x4, 0x8, 0xfffffffffffffe00, 0x5, 0x5, 0x20]}) ioctl$void(0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="66642f330096abb57b02c3fbf6473bbe2c5e47139359199f4f83000095e8e2363634a95c6fcd96e6121c4200e94413b847117ebffd1935a2a3c6bc174f72c546e19d8a46ab9eda8ac83f5e48523147cec03241579d34023d2bcb3ec223d4bf4a21ccc53e8f12819d44961f693961e6a28795b875b22e1924b152e75174dfb942b2a589b8e4c44b1f4cc43fe57e3f517f43c5ba56e2875b607272161ef411602ef1c21d24edc8208a2d3596") preadv(r1, &(0x7f00000017c0), 0x1a4, 0x0) 20:53:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {}, 0x0, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @random="7eb1d5afe48f"}, 0x0, {0x2, 0x0, @remote}, 'veth0_to_team\x00'}) prctl$PR_SET_UNALIGN(0x6, 0x3) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @local}, 0xc) [ 269.684304] binder: 9177:9178 ioctl c018620b 20000000 returned -14 20:53:50 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 269.816200] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:53:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {}, 0x0, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @random="7eb1d5afe48f"}, 0x0, {0x2, 0x0, @remote}, 'veth0_to_team\x00'}) prctl$PR_SET_UNALIGN(0x6, 0x3) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @local}, 0xc) [ 269.865068] binder: 9198:9200 ioctl c018620b 20000000 returned -14 20:53:50 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='environ\x00') ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = fcntl$dupfd(r0, 0x0, r0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r4, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r5 = socket$inet(0x2, 0x0, 0x200000000000000) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='yeah\x00', 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e24, @remote}, 0xffffffffffffffb3) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000100), 0x4) r6 = getegid() fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000440)=[0x0, 0xee01, 0x0]) r9 = getegid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000780)=[r6, r7, r8, r9, r10, r11, r12]) recvmsg(r5, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r5, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000200)={0x14e, 0x0, &(0x7f00000001c0)}) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000480)) r13 = syz_open_procfs(r1, &(0x7f0000000900)="a43333c6d6e9f2f6dfae95158c101edc73ff15ddcd5028fc9d2370a47719c8ec924c137043fee0f41c86a4da4ded5c04280391c6dc2a8301794277e52fff37752a43060800afb9da5d5f9f406f9c13fd2edb2b52dc9b9189e9cd4d5e965c2aac305c3b7737d15a0a8d9f9b3751b4644db669b41da57d61bf13d671a38fda7392c4fb2605df9a10ba85e47a12fc0abd3fb5e4c5c3b329abdc69bdf13b07c19ca803cf937e600063578ad10090760843aee02d577d833388914d7da5a7a80e10912d21aec374647e02f6bc261858d9b38da9dc4f349fcbc6fc8e0578a390b426aa5d3c6363da1e369e575b3c331cb8f69eec4cd4f4d2ac2277aa7c157693667ee4c9962a0053d3c81454a040c0f47a0ca9e760") sendfile(r0, r13, &(0x7f0000000100)=0x5d, 0x79ffff00000011) fstat(r13, &(0x7f0000000080)) 20:53:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 269.970280] binder: 9205:9206 ioctl c018620b 20000000 returned -14 [ 270.120606] binder: 9217:9219 ioctl c018620b 20000000 returned -14 20:53:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getuid() r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{}, {}, 0x0, {0x2, 0x0, @local}, 'veth0_to_team\x00'}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000006000)={{}, {0x0, @random="7eb1d5afe48f"}, 0x0, {0x2, 0x0, @remote}, 'veth0_to_team\x00'}) prctl$PR_SET_UNALIGN(0x6, 0x3) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@local, @local}, 0xc) 20:53:50 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x2, 0xffffffffffffffff, 0x1000, 0x4e, 0x8, 0x1, 0x81, 0x6}}}, 0x60) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, r2) dup2(r0, r2) [ 270.494683] binder: 9235:9239 ioctl c018620b 20000000 returned -14 20:53:50 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='oom_score_adj\x00') ioctl$TCSBRK(r2, 0x5409, 0x2) sched_setattr(r1, &(0x7f00000000c0)={0x30, 0x0, 0x0, 0x2, 0x0, 0x71, 0x400, 0x4}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0xa0000, 0x30) sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) 20:53:50 executing program 2: io_setup(0x3, &(0x7f0000000240)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) close(r1) signalfd(0xffffffffffffffff, &(0x7f0000000200), 0x8) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) signalfd4(r1, &(0x7f0000000000), 0x8, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) 20:53:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) r1 = dup(r0) ioctl$sock_bt(r1, 0x8907, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000000c0), 0x400000000000254, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RCREATE(r1, &(0x7f0000000000)={0x18, 0x73, 0x2, {{0x0, 0x0, 0x2}, 0x80000000}}, 0x18) 20:53:50 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x178, 0x4) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40002) sendto$inet6(r1, 0x0, 0x153, 0x0, &(0x7f0000809000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffffffffff7}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000080)=""/49, 0x31, 0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x709000) 20:53:50 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:51 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0x0, 0x7, {{0x2, 0xffffffffffffffff, 0x1000, 0x4e, 0x8, 0x1, 0x81, 0x6}}}, 0x60) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) dup2(r0, r2) dup2(r0, r2) 20:53:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:51 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000080)=0x5d, 0x79ffff00020011) [ 270.642948] binder: 9253:9258 ioctl c018620b 20000000 returned -14 20:53:51 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$clear(0x7, r0) 20:53:51 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000480)={@rand_addr=0xe44e, @dev={0xac, 0x14, 0x14, 0xe}, @remote}, 0xc) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = getpgid(0x0) fcntl$lock(r1, 0x27, &(0x7f0000000040)={0x2, 0x0, 0x2, 0x3, r2}) r3 = syz_open_dev$usb(&(0x7f00000004c0)='/dev/bus/usb/00#/00#\x00', 0x203, 0x800000000009) ioctl$FS_IOC_FSGETXATTR(r3, 0xc0185500, &(0x7f0000000000)={0x20323, 0x2}) umount2(&(0x7f0000000400)='./file0\x00', 0x8) recvmsg(r3, &(0x7f0000002c00)={&(0x7f0000001a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/3, 0x3}, {&(0x7f0000002b00)=""/119, 0x77}], 0x3, &(0x7f0000002bc0)=""/49, 0x31, 0x1}, 0x0) bind$can_raw(r0, &(0x7f0000002c40)={0x1d, r4}, 0x10) r5 = msgget(0xffffffffffffffff, 0x9daa8a7dd2fb983e) msgctl$IPC_RMID(r5, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f00000003c0)=0xe8) ioctl$sock_bt(r6, 0x541b, &(0x7f0000000680)="1dd23a92c922935109268a114cd14da0137c403f993c0d3d47e920b7510e13e9a3acb4848d65891c23ed70e204c64ef7d2e3a5cbc51d945cfdd80c82b75994aa8d8af4b1a2ef44f972d9e2d040e167f5eb866901cf607c43e937cbf2482f85188ae5cecba4fdf6090b1cd87b52ce15dd2597c5dad3750c5db14da1c0bdb94ef5278fa32cf5a50a98ba4ccc1c818df4f78d8cdd616181f64fad9ec1927b48b7ab8046050833b2ef0091014667ea103009c9591ee8ee11750de16f03fa6ec5e16fac4fb49564d378b0fe3532b2c64f46b28a86828cd05baa9dffeaeac5789d44") ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0), &(0x7f0000000780)=0x8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x9, 0x3000000000000, {0x8, 0x6}, 0x1}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000240)={0x0, 0x80, 0x30}, &(0x7f0000000280)=0x18) ioctl$KVM_SET_XCRS(0xffffffffffffffff, 0x4188aea7, &(0x7f0000000500)=ANY=[]) ioctl$SNDRV_CTL_IOCTL_PVERSION(r6, 0x80045500, &(0x7f0000000540)) perf_event_open(&(0x7f00000000c0)={0x5, 0x70, 0x5, 0xb7, 0x3, 0x1, 0x0, 0x3f, 0x0, 0x8, 0x4, 0x2, 0x400, 0x73, 0xffff, 0x7fffffff, 0x100000000, 0x9, 0xd993, 0x5, 0x7, 0xe00000000000000, 0x100000001, 0x200, 0x8, 0x3, 0x400, 0xffffffffffffffff, 0xfffffffeffffffff, 0x3, 0x1f, 0x0, 0xfffffffffffff3ad, 0x7, 0x9, 0x38, 0xc1d, 0x5, 0x0, 0x4, 0x6, @perf_config_ext={0x9c, 0xfffffffffffffff9}, 0x10a04, 0x1038d764, 0x9, 0x0, 0xe753, 0x7, 0x1f}, r2, 0xc, 0xffffffffffffff9c, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@mcast2, @in=@remote, 0x4e22, 0xd2, 0x4e24, 0x4, 0x0, 0x20, 0x20, 0x3b, r4, r7}, {0xa23, 0x100000000, 0x6, 0x8001, 0x4, 0x6ca7, 0x40, 0x79}, {0x7, 0x0, 0x2, 0x40}, 0x2, 0x0, 0x3, 0x0, 0x1}, {{@in6=@loopback, 0x4d6, 0x32}, 0xa, @in=@remote, 0x3500, 0x0, 0x2, 0xffffffffffffff00, 0xa, 0x73a660df, 0x400}}, 0xe8) 20:53:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x8eea7993) r3 = syz_open_dev$sndseq(&(0x7f0000000900)='/dev/snd/seq\x00', 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) fchdir(r0) getgid() write$FUSE_ENTRY(r3, &(0x7f0000000a40)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9, {0x0, 0xffff, 0x1, 0x0, 0x0, 0x67, 0x8e94}}}, 0x90) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, 0x0, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 20:53:51 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 270.818383] binder: 9273:9276 ioctl c018620b 20000000 returned -14 20:53:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7a, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 270.972150] ISOFS: Unable to identify CD-ROM format. 20:53:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x2c, 0x29, 0x1, 0x70bd2d, 0x0, {0x1}, [@nested={0x18, 0x0, [@typed={0x14, 0x0, @ipv6=@ipv4={[0x0, 0x0, 0x0, 0x14], [], @remote}}]}]}, 0x2c}}, 0x0) 20:53:51 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000009aaaaaa0086dd60453ec600080000fe800000000041a612000000a2fe8000000000000000000000000000004e24000000080100"], 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') ioctl$TIOCEXCL(r0, 0x540c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000240)=0x1c) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="040526bd7000fddbdf250f000000640003001400020073797a5f74756e000000000000000000080007004e23000008000500ac14141d14000200766c616e30000000000000000000000014000600ff01000000000000000000000000000114000600fe80000000000000000000000000001308000500620800000800050006000000080004007f000000140001000800010002000000080002007f0000000800040006000000"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x804) 20:53:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:51 executing program 5: syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7fffffff, 0x10000) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x5) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) fcntl$getown(r3, 0x9) [ 270.992749] binder: 9296:9298 ioctl c018620b 20000000 returned -14 [ 271.001970] binder: 9296:9298 ioctl c018620b 20000000 returned -14 20:53:51 executing program 1: r0 = socket$inet(0x2, 0x5fffffffffffffff, 0x8) splice(r0, &(0x7f0000000000)=0x8000000, r0, &(0x7f0000000140)=0x2000, 0x80000000, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000180)=0xfff) r2 = socket$inet(0x2, 0x800, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x400000, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000001c0)={'sit0\x00', {0x2, 0x4e24, @remote}}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x15, "75f28d156eda96b06ba19ff3d15ce608b1402a1b7a21348fb07d72cf7c55d93d430d92d0ee93b90be94d36efb99eeab60737331f314ca18107ac7eb7ee03f58cdaa6e7a81c9084ddce58d2ac7a88b9dec4b15cd8f57b8e2674def4711cc5b8a56362812a429698c50790ba2537b7565d4885b545de148ddbd244700828300e55590310f39c7ec4b989d0ef0df3c826ca22087aade47ec62eb0535a695fdb77f44bf8da766c6beed960"}, &(0x7f0000000300)=0x23) 20:53:51 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000280)=""/47, 0x2f}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000480)=""/96, 0x60}], 0x4}, 0x7}, {{&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/38, 0x26}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x3}, 0x46}, {{&(0x7f0000000640)=@sco, 0x80, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/206, 0xce}], 0x1, &(0x7f0000000800)=""/240, 0xf0}, 0xed5}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/150, 0x96}, {&(0x7f0000000a80)=""/62, 0x3e}, {&(0x7f0000000ac0)=""/229, 0xe5}], 0x4, &(0x7f0000000c00)=""/178, 0xb2}, 0x9}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/65, 0x41}, {&(0x7f0000000d40)=""/125, 0x7d}, {&(0x7f0000000dc0)=""/10, 0xa}, {&(0x7f0000000e00)=""/200, 0xc8}, {&(0x7f0000000f00)=""/67, 0x43}], 0x5, &(0x7f0000001000)=""/164, 0xa4}, 0x10000}], 0x5, 0x40002102, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) request_key(0x0, &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000340)='/dev/sg#\x00', 0xfffffffffffffff9) request_key(&(0x7f0000000380)='trusted\x00', 0x0, 0x0, 0xfffffffffffffff9) lstat(&(0x7f0000000440)='./file0\x00', 0x0) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x4601000000000000}, &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) 20:53:51 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 271.161704] binder: 9321:9322 ioctl c018620b 20000000 returned -14 [ 271.194909] ISOFS: Unable to identify CD-ROM format. 20:53:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$setsig(0x4203, r3, 0x100000001, &(0x7f0000000280)={0x1d, 0xffffffff, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000005add972e300160001000080ab1f749d27160a460786c4c09af38f190dbb85a1060f50615243ce2e4fb76f14633fbe636f85ae9e9bd6688c634f45a25383a41d79d687b8886a4f04a5b7b7e9e04a0a3f7063fb7e9a4a8871e2"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x100000000000002, 0x0, [0xc0010140]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:51 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0xfff, 0x103400) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000240)=0x8, 0x4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f00000001c0)={0x1, 0x62, &(0x7f0000000080)="20d56fd99d3a36bdf487a032a028e9dbf64997b1068b5eba9f24d6406969989eff23d8c7cf94e7abd69cce8644acd358eb4dc757a5fcf90635a0ee7e4811e110c094edeb7194225f5d183ddf95f5dddaa574d4506a5e8b26b321de5c39528c5baaa6"}) [ 271.295779] binder: 9336:9337 ioctl c018620b 20000000 returned -14 20:53:52 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x8c60, 0x90000) write$P9_RLCREATE(r1, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x69, 0x2, 0x2}, 0x7}}, 0x18) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x5, 0x400, 0x2, 0x9}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000180)=""/242, &(0x7f0000000280)=0xf2) fstatfs(r2, &(0x7f00000002c0)=""/94) write(r2, &(0x7f0000000600)="270000001400ef06030e0000120f0a0011000100f5fe001205010000078a151f75080039000500", 0x27) getsockopt$inet6_dccp_int(r1, 0x21, 0xf, &(0x7f0000000100), &(0x7f0000000140)=0x4) write$P9_RLCREATE(r0, &(0x7f0000000000)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x3}, 0x10f}}, 0x18) 20:53:52 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:52 executing program 1: r0 = socket$inet6(0xa, 0x80005, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f000022a000)=0x100008001, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f00000002c0)=0x10) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x400000000000, 0x319082) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r4) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r1, 0x1f}, &(0x7f0000000080)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='em0\x00', r2}, 0x10) 20:53:52 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e21, @multicast2}}, 0xfffffffffffff658, 0x34b4, 0x0, 0x0, 0xc8}, 0x98) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x800) sendfile(r2, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$setsig(0x4203, r3, 0x100000001, &(0x7f0000000280)={0x1d, 0xffffffff, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000005add972e300160001000080ab1f749d27160a460786c4c09af38f190dbb85a1060f50615243ce2e4fb76f14633fbe636f85ae9e9bd6688c634f45a25383a41d79d687b8886a4f04a5b7b7e9e04a0a3f7063fb7e9a4a8871e2"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x100000000000002, 0x0, [0xc0010140]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:52 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 271.831974] binder: 9363:9372 ioctl c018620b 20000000 returned -14 20:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$setsig(0x4203, r3, 0x100000001, &(0x7f0000000280)={0x1d, 0xffffffff, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000005add972e300160001000080ab1f749d27160a460786c4c09af38f190dbb85a1060f50615243ce2e4fb76f14633fbe636f85ae9e9bd6688c634f45a25383a41d79d687b8886a4f04a5b7b7e9e04a0a3f7063fb7e9a4a8871e2"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x100000000000002, 0x0, [0xc0010140]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:52 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x408000000000007, &(0x7f0000000000)={0x0, 0x20000}) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) [ 272.008257] binder: 9388:9389 ioctl c018620b 20000000 returned -14 20:53:52 executing program 4: setrlimit(0x40000000000008, &(0x7f0000000000)) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x0) mlock2(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) 20:53:52 executing program 1: r0 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7ffffffffffffff}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000300)=""/168) 20:53:52 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes256, 0x1, "7ad2fda83c52195e"}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000180)={0x7b, 0x0, [0x400000b7, 0x41], [0xc1]}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r4, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:52 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$setsig(0x4203, r3, 0x100000001, &(0x7f0000000280)={0x1d, 0xffffffff, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000005add972e300160001000080ab1f749d27160a460786c4c09af38f190dbb85a1060f50615243ce2e4fb76f14633fbe636f85ae9e9bd6688c634f45a25383a41d79d687b8886a4f04a5b7b7e9e04a0a3f7063fb7e9a4a8871e2"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x100000000000002, 0x0, [0xc0010140]}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:52 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigtimedwait(&(0x7f00005a1000), 0x0, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)="7461736b005ac8aa93906f0e15cee6058ee5c84a54bb8bb69b68f55a4f0f12e5454a6faeba8ceb5d882fe767ab300eae9f0845abac1b2d8b101e838f71e649ea431df172f829105ef291e407f83e70b82fe9a95696639a4b5f402b3806235ee1ce7e6171d30b260e2a512ee57504eabd0356dac65c53406544e6095675c12c9ad32c5fe8d5485a66556c39b9e886f6e1f04bed12d728ca5af8903dc9107b19f6c506ae898c17cb2c85257cbb78dfa32175") getdents64(r1, &(0x7f00000000c0)=""/134, 0x86) write$binfmt_elf32(r1, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0x40, 0x0, 0x4, 0x3, 0x3e, 0x7fff, 0x25d, 0x38, 0x267, 0x2, 0x2, 0x20, 0x1, 0xae9e, 0xae}, [{0x0, 0x2, 0x1, 0x400, 0x3, 0x1ff0000000000000, 0x2, 0x943f}, {0x5, 0x20000000000000, 0xfffffffffffffff9, 0xd58, 0x27, 0x100000000, 0x200, 0x8001}], "0ea87960bebc1eebb65a3424461b6569aeb4530222d96b3b8874c2267352f683"}, 0x98) [ 272.195280] binder: 9410:9411 ioctl c018620b 20000000 returned -14 20:53:52 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:52 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000000)) ioctl(r0, 0x2, &(0x7f0000000040)="0a5c2d02402b6285717070") r1 = socket$netlink(0x10, 0x3, 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, r2, 0xe0be0da762d9d5e5, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8}]}]}, 0x20}}, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f00000004c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000600)=0xe8) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x40, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname'}}, {@msize={'msize', 0x3d, 0x7ff}}, {@access_client='access=client'}], [{@pcr={'pcr', 0x3d, 0x20}}, {@euid_eq={'euid', 0x3d, r4}}, {@obj_role={'obj_role', 0x3d, 'IPVS\x00'}}, {@euid_gt={'euid>', r5}}, {@uid_eq={'uid', 0x3d, r6}}, {@obj_type={'obj_type', 0x3d, 'IPVS\x00'}}, {@uid_eq={'uid', 0x3d, r7}}]}}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UI_SET_SWBIT(r8, 0x4004556d, 0x5) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r9, 0x201, 0x70bd27, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) [ 272.244953] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 20:53:52 executing program 1: r0 = getegid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() getgroups(0x3, &(0x7f0000000040)=[r0, r1, r2]) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="58cceabaac810000005e", 0x1}], 0x7f01b761a7a1926) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_adj\x00') getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x0, 0x80, [], 0x0, 0x0, &(0x7f0000000180)=""/128}, 0x0) writev(r3, &(0x7f00000000c0), 0x20000000000003fa) 20:53:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$setsig(0x4203, r3, 0x100000001, &(0x7f0000000280)={0x1d, 0xffffffff, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000005add972e300160001000080ab1f749d27160a460786c4c09af38f190dbb85a1060f50615243ce2e4fb76f14633fbe636f85ae9e9bd6688c634f45a25383a41d79d687b8886a4f04a5b7b7e9e04a0a3f7063fb7e9a4a8871e2"]) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:52 executing program 4: r0 = socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000440)=@in6={0xa, 0x4e24, 0x0, @mcast2, 0x4}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000b80)="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", 0x579}], 0x1}, 0xe803) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x80c0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x19, 0xfffffffffffffffe) ioctl$RTC_UIE_ON(r2, 0x7003) sendmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="12275a0a5bfec07777ad92a5c0", 0xd}], 0x1}, 0x0) 20:53:52 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 272.338067] binder: 9427:9429 ioctl c018620b 20000000 returned -14 20:53:52 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) fcntl$getown(r0, 0x9) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f00000003c0)='coredump_filter\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) pread64(r0, &(0x7f0000000080)=""/68, 0x44, 0x2b) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x280, 0x0) pread64(r0, &(0x7f0000000000), 0x0, 0x0) 20:53:52 executing program 1: futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) r0 = gettid() remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x5, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000100)={0x0, 'bond0\x00'}, 0x18) tkill(r0, 0x12) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) nanosleep(&(0x7f0000000340)={r1, r2+30000000}, &(0x7f0000000380)) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xb8, 0x200) r4 = getuid() getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000003c0)) setresuid(r4, r5, r6) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) clone(0x102200, &(0x7f0000000640)="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", 0x0, 0x0, 0x0) tkill(r0, 0x1000000000016) 20:53:52 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6c, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) unshare(0x8000000) r2 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_notify(r2, &(0x7f00000001c0)) read(r2, &(0x7f0000000040)=""/251, 0xfb) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_getaffinity(r3, 0x8, &(0x7f0000000140)) 20:53:52 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0x4) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3ff, 0x80) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x5) mq_open(&(0x7f0000000000)="2173656c696e757805006c20538ad13fa9944df4e436687d53c97f696e757800", 0x8c2, 0x0, &(0x7f0000000040)={0x0, 0x80004, 0x7fff}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x2}) fremovexattr(r1, &(0x7f0000000180)=@known='user.syz\x00') [ 272.492059] binder: 9449:9451 ioctl c018620b 20000000 returned -14 20:53:53 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() fcntl$getownex(r0, 0x10, &(0x7f00000001c0)) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000240)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:53 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$getown(r1, 0x9) ptrace$setsig(0x4203, r3, 0x100000001, &(0x7f0000000280)={0x1d, 0xffffffff, 0x1}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) [ 272.634382] binder: 9466:9468 ioctl c018620b 20000000 returned -14 20:53:53 executing program 4: r0 = socket$inet6(0xa, 0x8000000000000802, 0x100000000000088) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f000073bffc)=0xfffffffffffffffe, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000959fc8)={&(0x7f00000011c0)=@in={0x2, 0x3}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="40637ab8b92fe5a0d02d769914956e901f46", 0x12}, {&(0x7f0000001200)="d3603091cca7384f06b2725ae988b34f6d374f5e539d8d8935274798fb1d6942dde57671bf57f836e2cc984852bcf18926b19537a136a81c25445beb00", 0x3d}, {&(0x7f00000010c0)="25025fff9b857427a8c2168d9587e74c3c66a0c7071d14dd34b7f9467cc01117c395358a331a7c2c3ac715dd3a9cb16c5800f66fdf70bfabb80e2c5591bfdfda5383547db26aa4e8d148cbf348138ec8ed522e67c5afb3e42e62d62881b8049606631b05af347ccb622c8975b82ef9cb44cf5c234ccbecb08ceb4f363d4c8b8b428bce1082d9daee59cfaa316dbce2172e336949ae4baf39548fd8d7f88f31104f8629ff0863367986a324", 0xab}], 0x4, 0x0, 0x0, 0x4}, 0x20000000) 20:53:53 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r2 = gettid() perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3, 0x35, 0x80000001, 0x2, 0x0, 0x4, 0x10000, 0x1, 0x0, 0xffffffff, 0x5, 0x3, 0xcb8, 0x6, 0x9, 0x80000001, 0x13, 0x7, 0x8, 0x100000000, 0x3ff, 0x8, 0x5, 0x6, 0x9, 0x7ff, 0x0, 0xffff, 0x1, 0x3, 0x4ac4, 0x2, 0x9, 0x1, 0x0, 0x9, 0x0, 0x4, 0x5, @perf_config_ext={0x800, 0x9}, 0x20000, 0x587, 0x3, 0x0, 0x7fffffff, 0x9, 0x6281}, r2, 0x6, 0xffffffffffffffff, 0xa) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000100)={0x4, 0x7, {0x51, 0xeaf7, 0x6, {0x1ff, 0x753}, {0x56, 0x7a}, @const={0x1, {0x1000, 0x0, 0x0, 0x80000000}}}, {0x57, 0x100000001, 0x1, {0x0, 0x6}, {0x0, 0x3f}, @ramp={0x1, 0xd7e, {0x9, 0x5, 0x1af, 0x2}}}}) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x100000001, {{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x4f53b488}}, {{0xa, 0x4e20, 0x401, @loopback, 0x1}}}, 0x108) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r4, 0x103, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xed}]}, 0x20}}, 0x70094efe346fa5d4) sendto$inet6(r3, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x2000)=nil) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x1, 0xd1) close(r3) 20:53:53 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x12d) r2 = open(&(0x7f0000000280)='./file0\x00', 0x8041, 0xe4) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000001c0)={0x8, 0x80000000}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x8}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x0, 0x0, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @loopback}, 0x7fffffff}}}, 0x90) ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f0000000180)={0x3, 0x0, [0x7fff, 0x3, 0x2, 0x0, 0x7, 0x4, 0x100, 0x2]}) [ 272.813967] binder: 9487:9489 ioctl c018620b 20000000 returned -14 20:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$getown(r1, 0x9) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:53 executing program 1: r0 = socket$inet(0x10, 0x3, 0xa) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000307031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x8) 20:53:53 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:53 executing program 5: gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) r1 = getpgid(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x7, 0x77, 0x0, 0x8, 0x0, 0x9, 0x4000, 0x2, 0x751aa793, 0x101, 0x8, 0x2, 0x8000, 0x1, 0x9, 0x100000000, 0x9, 0xbae8, 0x7, 0x10000, 0x61, 0x2, 0xff, 0x8000, 0xfff, 0x3, 0x7, 0x8, 0x9, 0xfffffffffffffffd, 0x3, 0x5, 0x3ff, 0x9, 0x69, 0x6, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x109, 0x1a0, 0x80000001, 0x9, 0x69dc9a0, 0x400, 0x5}, r1, 0x2, r2, 0x8) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r5 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept4$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) r8 = dup(r7) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000200)={0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @empty}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) accept$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) getsockopt$inet_mreqn(r4, 0x0, 0x210617582fe7fb67, &(0x7f00000005c0)={@empty, @broadcast, 0x0}, &(0x7f0000000600)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0xa4}}, 0x20000000) sendfile(r3, r4, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:53 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000440)={@link_local, @random="4884dd76e0a1", [], {@generic={0x88a2}}}, &(0x7f00000004c0)) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x2) personality(0x4440019) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000140)={@dev, 0x0}, &(0x7f0000000180)=0x14) connect$can_bcm(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) ioctl$NBD_DISCONNECT(r0, 0xab08) write$P9_RWALK(r0, &(0x7f0000000200)={0x57, 0x6f, 0x1, {0x6, [{0x4, 0x2, 0x2}, {0x55, 0x4, 0x5}, {0xffffffffffffffff, 0x3, 0x3}, {0xe8, 0x4, 0x5}, {0x0, 0x3}, {0x38, 0x0, 0x6}]}}, 0x57) renameat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00') 20:53:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06055c8, &(0x7f0000000100)={0x4, 0x7, {0x51, 0xeaf7, 0x6, {0x1ff, 0x753}, {0x56, 0x7a}, @const={0x1, {0x1000, 0x0, 0x0, 0x80000000}}}, {0x57, 0x100000001, 0x1, {0x0, 0x6}, {0x0, 0x3f}, @ramp={0x1, 0xd7e, {0x9, 0x5, 0x1af, 0x2}}}}) r2 = openat$cgroup_ro(r1, 0x0, 0x0, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x100000001, {{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0x1e}, 0x4f53b488}}, {{0xa, 0x4e20, 0x401, @loopback, 0x1}}}, 0x108) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) ioctl$TIOCLINUX7(0xffffffffffffffff, 0x541c, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x20, r4, 0x103, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xed}]}, 0x20}}, 0x70094efe346fa5d4) sendto$inet6(r3, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffc000/0x2000)=nil) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) poll(&(0x7f0000000040)=[{r3}], 0x1, 0xd1) close(r3) [ 273.577169] binder: 9524:9529 ioctl c018620b 20000000 returned -14 20:53:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x13012, r1, 0x0) 20:53:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x458601, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x21, &(0x7f0000e62000)={@broadcast, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast2}, 0xc) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x80000, 0x0) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x2d000}], 0x1, 0x0) 20:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x8000000008) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="88a07413a5f8210ca9414fea1678a457cf0dab616b8a22da47ef0b88185c7bbc374a805fc94d089fd00ac49db548b0ac4b2d6ef67ce3c31e2d4815c8bb9d434c5f0143c81a4c54d068fc0681812c4165319395bb432ad460f7383fb420083ff26b0a6c05cc99273c2ce57325d0b4f3469df17c3607199909940398961c637ebfe28bbc4a02b6f38adf43040355f625b20c1604f362b98267df9149d6e7d75c9f3cd3bddf4a9ff5a8c873d5508f4319bb66", 0xb1}, {&(0x7f00000000c0)="1ebc8bac10a8f74a4ea48a5614e7b8e5db6b7a10ed327210a013031f5ac92273d1b26726", 0x24}, {&(0x7f00000001c0)="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", 0xfe}, {&(0x7f0000000100)="7dec98671819ada8b0fd4d12beac0ac8be9d79af12421ab36c9947a5cac053adc65e455eb8e79f29b54908d8ceb47199839f0a", 0x33}, {&(0x7f00000002c0)="41633826fc108f00b2b813617ad1fed14f50d8e4a65a10fff19d04856b7227ee6d37b8d80ae7e5", 0x27}], 0x5) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000380)=0x8) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000100001000a2b0c00410400000000fcff", 0x58}], 0x1) 20:53:54 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:54 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x1) 20:53:54 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 273.805465] binder: 9555:9556 ioctl c018620b 20000000 returned -14 20:53:54 executing program 4: gettid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000200)=0x0) r1 = getpgid(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0x7, 0x77, 0x0, 0x8, 0x0, 0x9, 0x4000, 0x2, 0x751aa793, 0x101, 0x8, 0x2, 0x8000, 0x1, 0x9, 0x100000000, 0x9, 0xbae8, 0x7, 0x10000, 0x61, 0x2, 0xff, 0x8000, 0xfff, 0x3, 0x7, 0x8, 0x9, 0xfffffffffffffffd, 0x3, 0x5, 0x3ff, 0x9, 0x69, 0x6, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x109, 0x1a0, 0x80000001, 0x9, 0x69dc9a0, 0x400, 0x5}, r1, 0x2, r2, 0x8) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r5 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept4$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0) r8 = dup(r7) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000200)={0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @empty}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) accept$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) getsockopt$inet_mreqn(r4, 0x0, 0x210617582fe7fb67, &(0x7f00000005c0)={@empty, @broadcast, 0x0}, &(0x7f0000000600)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa4, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x40, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0xa4}}, 0x20000000) sendfile(r3, r4, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:54 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:54 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x60, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 273.906194] binder: 9569:9570 ioctl c018620b 20000000 returned -14 20:53:54 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x8a00) 20:53:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x1000)=nil, 0x1000}) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xc, 0x13012, r1, 0x0) 20:53:54 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:54 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1cb0d3000, 0x1000000}], 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) fallocate(r0, 0x65, 0x31a, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000002700)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x24, 0x400) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000800)=""/151) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r1}, 0x14) 20:53:54 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:54 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:54 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 274.221667] binder: 9602:9604 ioctl c018620b 20000000 returned -14 20:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:54 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:53:54 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:54 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:55 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x8a00) 20:53:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:55 executing program 4: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000180)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x201ef1c0, 0x1, &(0x7f0000000180)=[{&(0x7f00000001c0), 0x2, 0x1cb0d3000, 0x1000000}], 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) fallocate(r0, 0x65, 0x31a, 0x0) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000002700)) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x24, 0x400) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000800)=""/151) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@mcast2, r1}, 0x14) 20:53:55 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:55 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r2, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000011c0)=""/45) poll(&(0x7f0000000000)=[{r2, 0x20}, {r3, 0x2000}, {r3, 0x8}, {r2, 0x401}, {r2}, {r2, 0x192}], 0x6, 0xffff) mq_timedsend(r3, &(0x7f00000001c0)="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", 0x1000, 0x3, &(0x7f00000000c0)={0x77359400}) 20:53:55 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r2 = add_key(&(0x7f00000000c0)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="2969e1896f6e162a7e2b377ee9412c551e38848b4ee8ec6dca460e7e7069f56788c98b95dddd35b7d476699cc8ad64d1450db87e5793bf669cec0633fd63d2933f6d77d003001a0874a5b9f35a1a6c9553eb5600cd65aab98ebed92597e62a723a710f259e39038ce905ae5a707230032836e534b2a610b2854d3150c353b04d63fd4f9deaded32f9cc3a79df30358cc47b50e6ed551f9ed1e064243332a4f488ace1f818bfb9f039e403129cbe750c8563b87ff80bada01be5eb6b38b9f28626e25f70c239e35f566d02a637dadf1ce7ffddc63094b435a6ceec7df2aa3f21148d55a4dff061f9515a96f7f2ae2e4a363f20d46b563a39596d4d80d2e839d1899d50db8a9ea001cd74c24340b1dbd2ed3ecf0024126112efdc6e18d45e1709d2eedf2d43cb0d407c84280a5710456e9cbf4b1706eda1e6e0578d1f143e01780b8a324b863b6324cac96fdb0ea5a6ce653197b9938d4de3d0dc2e0ea26278ed008d5dbd52608bc97b57a37d37fe9f51d5159ce257a7b2d7107a3284b2ee7d41691651bb3c606e65da80ada2eede5f9d5a2b9a56d28a38f0b85d2450ef09c6a454aa1b1cf0d6e3eb5fb9618baf9fba720ae54eb0b8fb151361421b32aaf28165b3e5431381452ee35fe92dc2385d6a482a356e6be4c9ca23f2c3940646f79bfff12920d28899d4f612656a9e2854e6db3d0fd66067fca2c3c37d38e93df2da384719b303586009ffdb2d944865ccd2f9d49e686b1862f4356fddfcec39199340cc2e6864ca04c5b0332b6da347f162e9a8cb8f9b1e75d7d660b2c598ad39f0ec0a886141bf167ff4c49023acbf23d0ccba4eec7b28767c2c2fde1d5eee61aa3955035a3ea084efe5d684441ca2b527dac088d602abd127686dec3f9a73c75517de6dcefac03af3201e87140f1f992b91a234ae47347856d834aae3dd892bf7838421a89a96e42ac04b13fc6a0295c31bd30a0a27f35b727cc73d4bbb0a0236de291be798a45923e3b3cc37c239ddf2b3e912389e3de250573832fe29f7636230880f3f3d09d1fcb3f03d3d63467c74606b42001e279838a6d686999dd0cd497f881ef7ef2011ecdca7d68fc5a7b30f6fabff99bb0ef60015e5c698cd026852f9dc341f2aa50bb25aa2628434b708267b4099e499098e3a6c8f1f99504d872277670e705f9b806f3930f7bac836cb74271b2b5ccca7f95fc9521220f684f8f56a6a0b1a6719d87839a0e2116e00ba34877824137e4111a7cfc234ad187ab9cf0ac9afa619dda92193ec85f696aac935e1c72974d5d86211e387aba6283d1101371bd4802472979d11919475f2833fea6cc52beb3c17d4c7fb9c79129edc8b72c39920c76c887f14fdc46aaa83b9a9540be3c60e3f406720445de650fab0b71f5bda4add64feac583ad7d5e5dd0846f0bc6c126611c742d2b501148e2c7d0d20d90a865f00e50b7388603812392d8b4f5464d6cfa0ea35355e2ec3093ac82918b344ef131af03de96fff0388c12a7ca07d3f3aa003f46f2fb51e3678cb2c53081794616c7d32de745cc1e9bdb1a534525f773d7ed85c3e5432a669e0e8cb1103bb40de2eb52ca1e92af6f66a96c357e2da08c27632da1e0de8079dce5a77a3fb00a5d098dd8306c1daeb2fe7f519dd9377d6494ac48fa58f8256b21e93c09ba5307a286b33ec5856e673ab48555c1dedbb76085fa89aeec3ccffaef354542d794f601f6a8bc0f7caae8fd085b5440456434c7f33733dafd772ea03f52e4b0eb13279b2b0ce7a43973edb71f56083ec48c190788201dd45749cd5cba36ef90fda84ee04acfcf5f2031dc8fd8e80b2301903e314ae425c67884ac5abf31c4b646968704c7f73fa0e28e92a66954308baed01d58d7d410d50951192ed3d80348cad287c7e77b9d5e1131fe25ba9bf47a0b37359a48f94056b854ad36b878e8efeb3ea7e7f2c9efa391b0c09263f88abca70afbaea893dab3cb7dee18fc37cff1651cf1e17fd1b3e9c68a04a9bc28562ae2f3b9a9a79925bcd6340ea8470357c3c550a7646a8d654feeec08a017a456f34c2c06bd6e5033d4c11b8f8a4a1dd4e417847c6906f6971131864af111d040e98a4e163739dab9d68c78cd32ce9007f131f1ff2f299112c6f43b3f8e09aafe780f0785bfe8899308c271eda719a22818513549610acf4a97a6706315bbe369ed36c9fb0c940b4d1cdfd9f96eb8c6b0c3503b234ba7126c171654ca5702fbcc5af705d2e7e8bbfdb2a5276df7b5145fa2816c74cb2e26bfd658b6cf778ba45c73549194ad2804efca8a62434707816bc6889cdf9b8a564af88f3f582f594a519de4318b13e2006d43f9739cf1250f7b1c47dc59ece05896b949cb6e27a50ede9af938109be1be17a6e4186e6b356fee87ab5b3ad0707ac70d02a353aa8362569de9bdc37e52ef504a931852a6afa356662f013ae9a8c11a5266708af533b6525312b711a3cc349778efb2ff27d7b84a809a95ac1fc5110b26f33b2bccb21f2de128ae5693dc718c6bbe19a6617846b4b9cc16aa0b73274e18772aaba22d6e6406f40895ce5c937e36d3766b534b012540812dcbf1b5501bc9c6c7d602c90d06f62885031683dbed698e44f50aa9e7acb76d1ea0fef4cf60362592de8c4ebe52232e9a73fdec4cfb162026138aae7a345a1ba271de7df76310fc66f21c3013a56d56c6ce2a80b01dc27c3b9918601d0197336b35530b22a14fd18b1a0545569a29ec653530c0f12da00b63f941ffa857a86c8100f8167f1d29d8e33d280729e9fabee1f682cab1d07f61b0d90b226c5141dc90a4b5474193e1fb54abb69f395ffe712ab0e27c8375e6cf5589862c02a8b87003999174801d5e03f45bbc502de22d74533e54b9ebcee25b02e372cf0ae3f231cf12c02141c17a57c7babe06ce3a01e6d2d3185ba6fb103306b4f6bf01537b8b70729cc5f3a5b0bd1e677d248bebb08f986404cc6f26a84294faa592d1fe38e727b52ca895a1e2a5ced2feb5a860bbbff2de888787d822a8133af82f76d7a35878fc7dcd36e4a287843bcf6d17686b2417af06eaca1442e9f6d4aae2e0d7f5a87911753decc7331747939c132c77f89c06531e0f09d446773e82d01aa4f91b966130645780c88656dadb85e55c1cab39002f28fc064aa78b1c2b45a972f072969e7d80d914a960bebadf33567409367367a486b5b4858c559745d1c51a55a7dbcb16903b133cbeb13d7c2f950b9ca1f1819e7a4f8c2602767160912b3eb48e88ae24afce80f8d085aeac67d526a7ccaff54d65b0718c5593aa6e69625c35690220bb7cda76f86180befce8ac125565339d143fd05c6b9462bd463f356f0c85463cb82915d7961ae36d60adc5c0b326e63ebb919e340160fb4c2f4a4469612cd269fd51afd6a04f4d54b66767937dccacee4758114b6db818f3d786d09258ea98ef0964570694da0ac0f99eb8e9d7007bac9094512a5656780c523c84bfe4e5173c0447ed6f40fad955cbd08e6cc727b6095e1cb05396e8ac6a6489001ab7384dabdfac205f16470e7d385b594edf473864c8fd31f6d7259b58d33f51570b3da2a9bbafa8560356176f9d8a286044420d10fbd78269b34722aa7f7cd8ecb40922f179b5fa6db6fee5b49967bb1539736f7f30ee609f005a805fb9cfd42768835c54aa94a7435387a93f610da3c25ba793b20338ff4f5dc7b70a4429ea54cac669cc2e89bfedbb6e89be79976c189c80d984907215e4b9f11dc7e02fb7a9b2e4f5f9fedcd35faf5827b60b36197e6a47ffa68259f8aae6d355014a7569bb0e083d1e8b0c4bb6fb2bd68070fb12bc43e883fcf3d5d47eaed76e05668b70b721bf2730d8382af20cfb244b0b07e4e47ba3d7f5c48ccfc592e80e134efa46661020a0b2872b5395f51e6de839d1a06885db4ffdb2ca7734a2003ee2281b3c314488c04ada05eaf82aee6d2ff5e66cc94fa743f5c7cab87d9d7b95993fb82e217bdaa33e7453574aef0a21fd3064d8f497ed0a511a76bc4514421b11fa42daac88cf11edff090209ffbf145f921043dd5ddbeb01da60492ccfa91fee112628f96a3672aa433e4b3b0e0e05343ada3487f6bb4707467e16e6ef31e0e950a5d621a6252efe345ff20db43fa0c92fb5565e7562d9435eae4e5fb4430395206d924ee86d67bb225cd0f00c679152e9f687be2141a6515d5b68b74b5ee81dbfa66a1e4289243b2609ad6a989244ceb22b4b23dd08fde2c2766d2b5308475496507046114d0dd54774626f14df3cc47bb68ec432bd0fe70a9977c14d0d12446f0a64f9521dca586109d00c0facc03781e1051431bf3451df2c30404ea2fbbf6b7aa651ae67e4483db43af97777d0616ace25f64932e4025b25a6ee339c748686307e902ce599eafe3ad6d38c22bf536d5491b9f3c034d9ea3000da2f9b18e89fe4674f1aff84a7b083b74d83e618bd7939866d3b78466e81c6a7ff8330b984b012c6e89119acc1bd41ebcce4d5e679510cbb0f9516a45fec94fef367359f5a9903dcbee2d2b684d706f1a1e75e8264a3c330edf67c206af322ac2db8c371d67bd44b51858a0ed5db1d492326d41d62b42cbe079f1b0eb5ae3bed675cb65a24fe69d4fe07d301fcbf95d61c847bbf528aafcfdb8d10f48f2f3f1f48436ae18639e4719dcc6fdc9af3565073ec248d824081c6a7e1d61abe2e36877fe37db127c2f19827d359f00d8a091f3d3b72ee06c6505f21f5855ca9d40c79cce1858a1f5bb1343517e9e46c2eaeba9c0ca085ad582798046b7be24bb4756f78d3ca05e86faa85d642b40b0fdfd4292ac89cca0ece0cadb7f65ef54b71690055c818805875a85a0248dfb6bac1d8119709a52ee9e989065ed69c6ac6387986000effe7e1bc2bb843dea603a369ef9efeb27c95326adde13a99ced391e52132c14a064c938bccbc9b24682664a93f5eba3cbdf8abb0b05c420dcd925553f103395506be6e078a4e642ccd194215a049a2a7fc7f8ad954c84a61e11660aa0df58b5f8810dfc01dfeb748f5cc16ecff2f2bafd5bcca7dc0a393df73c03af65c0e9cd2d4414c28aba00830051241c7dca02011274c64530e147630d03cb283f735724583c785573797706f025ba31d377b8eab1d4905d6e97566f326d0ef06a57007a91fe5f4b8bc20eb2236d4445584827e25940187ca75beb6957705ea3b0f1478cdc45c3688755e5b1edba732ffab6278cc9979eb269a9ea4342ce111df68c644347e2bb41967193244708668010e4c1323ce5354354ee5ab041380eed469c9ce9acb643416d12cfb391e7584159c6eb5a763c4c6cd1239f8136ad6a72a513fe1ebf542a8be7798ed5bba8e4f963fbde80f3c800f7ac39ae37ad02d06d71394b0d74656198db613ab1d1866ee669cafdce9e2edb4a2f10bf4336860c039982de8ef21ab379fc912281ded489b57407f3471ef36f679e7b23f243ebbc07db543fcd66c4c4bcd280d1c4931ccfb475914b9ed05d651342612258163928ae23c7fbff88ca483ea488742d5cfc1c44556185c2b37a126757e6301c13cf4037adc0465fcd7bbc478629c910f85848ff35a4c50ebbcca2287e79653e17a847b3e797744fd57b9d59c5bd0b68d19990fc09a04d3e5b92c83dbb26c85ae27bc3bde718620dd29b6c3feba2427600f2360c2fe94926b65d93341c389235a2e69e7ed15f237ce28bb396e281482d7c92598803be9498719df2b32c4d66f8ac681c6c91d40cbe8f61d3d3b3307798a7e7496f57512462d6c78c0f66ef0ac79f0aa4c10985df9e3367678815f8c2f5c5acd0900", 0x1000, 0xfffffffffffffffc) r3 = open(&(0x7f0000001300)='./file0\x00', 0x0, 0x10) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000001340)) fgetxattr(r0, &(0x7f0000001200)=ANY=[@ANYBLOB="62694a9609b72054f2eb00002e"], &(0x7f0000001380)=""/199, 0x337) keyctl$unlink(0x9, r1, r2) r4 = fcntl$getown(r0, 0x9) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r5, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000001240)) 20:53:55 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:55 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:55 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:53:55 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x8a00) 20:53:55 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:55 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x5c5002, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0x8, 0x4) r2 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x30f) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'ifb0\x00', {0x2, 0x4e20, @broadcast}}) 20:53:55 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff7fff, 0x800) r1 = gettid() openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000001c0)={{0x0, 0x6, 0x7, 0x92f5, 'syz1\x00', 0x3f}, 0x5, 0x3, 0x9, r1, 0x2, 0x2, 'syz0\x00', &(0x7f0000000040)=['net/psched\x00', 'net/psched\x00'], 0x16, [], [0x5, 0x1, 0x80, 0x1]}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgrp(0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x8000) getpgid(0xffffffffffffffff) r3 = fcntl$getown(r2, 0x9) r4 = syz_open_procfs(r3, &(0x7f00000000c0)='net/psched\x00') sendfile(r2, r4, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 275.386899] kernel msg: ebtables bug: please report to author: Wrong len argument [ 275.439159] kernel msg: ebtables bug: please report to author: Wrong len argument [ 275.523125] IPVS: ftp: loaded support on port[0] = 21 [ 275.531470] device bridge_slave_1 left promiscuous mode [ 275.537004] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.605313] device bridge_slave_0 left promiscuous mode [ 275.610860] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.694074] team0 (unregistering): Port device team_slave_1 removed [ 275.708607] team0 (unregistering): Port device team_slave_0 removed [ 275.726025] bond0 (unregistering): Releasing backup interface bond_slave_1 20:53:56 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7cf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000280)=0xffffffffffffff81) ioctl$VIDIOC_STREAMON(r0, 0x40045613, &(0x7f0000000000)=0x1) 20:53:56 executing program 1: r0 = dup(0xffffffffffffff9c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'syzkaller1\x00', 0x2}, 0x18) dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:53:56 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:53:56 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x6) fdatasync(r0) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000004000000254e72d5d345018a35e678fdf2fd40a37d61c0c7ef4938a6daf421a7846ad9748fd98a87ec6994b620253b36303bbb6f1581001000000000000004fb65082b3b24134ae9af28cf5631f661ef5b03b67e6cdd6ba0bb7beb2ad76c1c50aa5f6157b7bf8ed0000c1dce16010d27e466fe577a67af84f3c9bf02a7f5ed0841f92cbcea3f8e2a89623cd272027915198785bc51e4f7c9c4ffd6f303a82a682dcc0ca4d358a2160c4cd36a3cb157a3c4df06f255ba22b293b48ae18c8ecc6be2b605903b6ab"], 0x1}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r3 = socket$inet6(0xa, 0x800, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x6) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f00000003c0)="e28f04b140908a197e447737da5fdb6c16c42913848ab7cc4e78bee61c0fb9cd1d5f7c66fa38e8ff86d37219049161943c1ca0288976bc4b70102390f38393390c04a1df57b86df79d2c5db431f6e25607593a3e9543d8b3dc18ea50a56cbb01e99185637d256a23869da0c387bd2620236cd2", 0x73) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r5 = accept(r3, 0x0, &(0x7f0000000080)=0xfe0f) sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000980)="3cf5048e7163ea27da961b58abc6fdd726a3e3c95cad1de31c363355c8e1713e51fe7f59651cc3ac45abe4d057f5137c675ed1994a77351dee893cd34df281c9a23f002a9478039ed67f7b156245f27916f826813ec250d85c0192c16f21dd81efe95b0b969ce99dbf198ee2555098027269016440658583e3662d46fe23e2f3d45c0bc9e61731c225d30af8b12b7608313d88f7a0bdcc6fbdb3c103d6c7ecb56197a96d2c5bdeb8105bab16f495a2016c4eac846d256f43ecfe3604edd6e6c3166a78125ac00878f6e74eebf28e9f31e2eea3ae45c16456ddee6203708bad5a11d90a06dad500942c3c7de6c7e2e6ea754ffce452d745214d4e010f4be714a9ece73e14d28ed7cf52fcebaf48deff2638488d1eddcbdc9aea0d5750bc0b88a8ee86f08747e8817fd62d0c5dccd4006c529949725bbfcca2686601f5d220eb6312ee9b5a4550ad2b7e635cc741cf3981965a252825924fd94f0f0f187653512e74217df2d079465950ab782c00861fd93814a32b59cb33213e2e12f790a331a8cc402208b9da2079efa3e880f69c2836b713245e3c4d0aa7c241469ae701e88c3db83f24a7fe1af322f8821fb3fec1497fb9c6f1ea1c0732d8d9f7c6e1e671a7f4eecc4391bb1d4cbaed353d3e56d6ffd2f21b8bc5368bb85ec382ce13f92aa9f1b242a19db0ce84c822a246a949156187fe0176c3d58f8e012aa17fa0988cbcd85e8d928a3f491e81e2f943f2dad5c1f5c9a7890bf05d78a2be476c52aa75569f28c1144a7bac3465cba51b81b034fca3a9034c64ded7615e8a3a0712c45e0eb0f936ea6bbe35deae994ca8a5e48d74520900e295e55af7c5f893249a230a76779ae8978b10ba296f6a68bbdf732b77d258ebda9fed5d628f8401400e72c471d8b76e08471c7778cc22ff69eca42099069eda6d80eff70e032c7735727866ca75b83db9d740ece0263d56a9dfda7bff84643a7de6f7d677f5b5baf1409080b132dac45d8dd4b9c64b66bc4d177ae8e311f6520ca8173e01b3e8343461214aaa5cddbc01a3f6f9b18c68bb33f98a025ce67aaae25e69208b378925780d96fe76f8306b2dd1a28ea0eaad4095144399f80a85e2fbb8f982361cb7e7e61ad89deb2c6ddc014a14685360f1aa39fbf2dc574543d606d6afd18922c8cf16a62e0a45d6adafde216473039edc7001e9f8aed45eaddd89c2b1df832dafa9988fba8e795c911ed2706db4adf3b1a7db02994a43be04b9c66268aba436c6ba24c6671b19fec3e032c2216d33909ce1cd140fde160a222acac813bfdfdecd18d289d8073287a2f920bd2e1a75725ff4b805acf9fc249be0634c26193bf03555ccfc3008ef2001570bf72d5127236de2bb776069b9c5d6051e28c0f5f7f55d5e4cf04822b52434ff0ce7c9912ea49b692bd1895701be813cf94fad9dbbf3d303a234e2164014259e51e1795d4383baa8d977cfe07e2fbf215549d9d4667ae273227b85ea8de7d7c874b6d5463d2451f4253df0d86fde47f8a138d6cdc616e2bfbd32269bcd0a87e473b7a4349aacc40e795fbc909143d72472b4b1f3742e3f5b119a75b48632eb3f67c90bcf606526f39b72647c8343031b29c2cde6576c3a1dfa8677efea6c7f1904410f9c1170dce23bd4fb64bec2010f44109a83cbbdcaa3f391731e8e0f410c9588fef26e792b76beb6174d5a3b87848f051825e06d06838edc102271970d326c74065089a658f0354027a8da470bdcf7f9548fe1ab24adf12d3bd1427134de4c3aa039c11af4c74bf111e12953ffa17ffbded8945b1cd1dba33753cdb9fc3a14393b8ec4f8497ce27cafe19ba44fa38549b8f052f83dace969f7801358f41caf2a02a01fcd362f8a9c6469fb843ae4718cf5d7f92558865546879b344d9a489c983187592fd116b94835828247b46a43ddd8306c23d23c1b0f5e3388c1af04f5144252dd216fd56f54336ebf0c15e6f7614c42eb184c0d0e741050a8f01f05663e2b214649167419ec62cf342d4286f0b31398bfd93ff2896ade403a6b72e031a9839d21a82ecc8cec3f477c3cedcacf466881201d22c305794491a9ec595af5fcbac6189114e285282753e17651d395d51fab8750607db79c5b41a69d273d9f186688207e8cf1c2000b52db649bfea760fa80178f33c65123f84369cb4c1f5ead16544af44fd5d7889d347868995f873b53777ff94e167813859f019cfb5a9bb29bdf14bfdbf82349d2b146e95e1245701ffa957d2b8320d3bf198e2f8346cb3a1d237c958f8357df9e8859b68a94974a36ed7b2c32744b9b5e7597a7e5064bbd3a1bb326ccabb4ebefdd6348e3054dcfe9a8ccbf959151f43fc15697d4899dcda889663d0d724afe4c802ff0e9c13d3c0bf2372909d4a640882fd9bc12b63d94e7ad4583e8b95245fa7084118fe594e39cf8cb61033f6602a1c679687b5594db16c9e74611be366af5c8d4ad07831dc3e2123253af0f68fd1711bf608f5515a471301b64329c51b2011a03a8ad6c4e399b3245eb218083351e9a621d713187a65368f94205f17d6870527ff14fdc2577d2f6c15077deb2e7ab0ecc869a05d48d8cdc1dd7ea8456a0bb60e70d78f253ef417d8a386dcc255f1b14227ac7ab4de5a9e0158945767431b5e86c8dd00342aa12b27f98676a278f326b4256f19ecdd3d8fae6c4a815f1fb7df919e74b6a5003ae8d14f1d2b614ac6b02355765922f506f097602ee202eb55e3b45907b461692a4a1afbec463b9d19a81cdc93885596ec465220840c21cdbc30a778e26569416c454d117c003c8b0788332341685fad7357a1a3a3672949a7161d28f4f73b7e01d01e133541f3246bb9eb8f4b26dc149e4295b49c7c8fbcacd4c3e02e77f08283d310a5b56bc0630f33b857589de15d2d6bdda73b7ae6dc37d9bd64fe84178f02873861b060b6ac2f91a3ed84c44d8e03deb87d632fd06d93b8c841d5a2fdaf338142d7e54a120b2e162fe0e4b170bb97762fb172a30cc31b1f679be796f0b4865c0704850969a6c741eb3b9ad2fb059fe5da6cf6d3ef3c4c4aad4dbb578da214a57f334db2128769a7f961542e61cece3c24cefe9f6ffe75db1ec936aaa034e4a0486a1850ff4edceed6ac9d6468033b620373e421b42575af337585ed0d08f5b3f91557c8b5e7b515bb15c957213ce31787a9ec274eeb88ddbcc15396355e37f0239b0cc8867d35bc7f8a719ec415f69833feea59e1d7ec6ea8ea2b5efaacd3b1b53651e6e0983faa60950b92514f0d582b4f214a80101a0784d155b1dc2b2cba21fddb31eb10e8af70352a47c1c8eb90fba97d93d75608acdc8465c6907bbf36f3f36e59bfb1eeafbed14726fd34c2354785f1aa65422cce50bac7a9a51a7ecbd4d1d97ae65ebcc1414eaf000165fb15e037539cdfe0bbff3100395d2a6834fbfae1dad1f269ed290316ee18a0666fe682fdeb832c2e4d7818c0f0896d55e696dfababb0f561afc802cb43fb88fac2f5f8ecc18fa40a9d53b7a3bcc19f193e535b89ea96aab74c39c4928f72ba3a88941043a6a6e87db746b42fcc7e575c25c45694d54d6205abbc33331a869b4c4ecf50528d0fa3dc50ea15873ed2f7ee500194203525f70b70094b4c7280e5e6e325d2493273b4acc8d71352fa64d3bd944a79975f5dd597a85d2ad639b55f5f72ce6dd554f48b9236f5d8652c65b5c3a909b420eb60b8330fe43c17ab31eb2ebe54fb906ffe166c86b29fed4947a97117d2eafce1b20d6485d525b948a906c2864c63005cc0571e386a263fc2b68f03ed2377a0a81a48ff726fecc5c476eb3e36fd796e11bb4f8612b57ad8b9ebc7d3e7a2be68380d9e4a447d590d82713504dc0658525ea88400811753fa6234a01f46d9fa7df62b266b5c889f5286b7c72eff18b0425dd9c2e6f1f9778ffa1d14ceeff7d76e05c93e5215a0b8084e2e4d25984a835534453bd7e0ca7579edbabb8fec973978b37c4e70cb2796a2fba6e6235063857851f94b7cbab38ec1297f89dbaaec4b3a11f86b69b273fcecaa1ba1c6c52bf455be9e495e75651e8e6c7f03874f96596a9deb61c14eb68049f3f07bac5becf8ae8add48a4a1b8ce5776a5debee0738b4d7750865606e747ab7f9a86b6d933220c4771d2277c1ab68b6b24d4238ca83a3e4247d13fcda8af5087848f7aa4d8ccf5347f7041ac5ee4429c64f2aa653ae0e7b7c16d2e35d186b20fa7109a193f38a002ad5fbb18a52810b7278ba3c0a0d831dd350730c1c255f2fa639aab2537115e1ac60be26a9d88c8bfa1100c2ae9fa9b245033b010050065a89a7384a572f5b2f121e77bca3e71a881ab8433bc77f63f0629a6eb9ff395b96576a57e75e583fb085786ebd482db53648ab02486abfd600efca097a68f561e43d3ba027fcb2fe1d0fa6612b066a3c95b0177c78b2bb0c99310a3f51ab8a8290507bb5256afe8e67a31b7c2bb643dbf2cfbeedbbde00d3dc481d8c8bdfcf540e85c9cc1d4c2bccdb13bfd5f3d2a4a320043582af152ca716a1d097a7496e0e040ba7446e1ea8d9f22cdda1835960ddbc64d4828745909b865fcb28025d8769f847783b10f50db50e5de2de3e0c5bedff9b928387cf43c1a621001d5903e5e60c9bdfa01f023b134f224533faaf7f218b9797787ceacd7b96853c58e4247634d4faadf56f9a4480c4673d656758aedca41707e6b3753db3db09f7c3be9233bf429c6a0603a14ca44d78a3a3802e3edf7fe1595fc5870637a262eb2e36473e5520b3ba9af4d46fe5b49d1e3a2812e1f502b58a2aa0a472925ab1f4c8bc3687ef1f7a82700021e70f50edef894bf902285e3c087a7f980289c62c8b282fa52072966131f3f3f33686f270ffe938c3cce1eb0623837ae1ffcceb62c95bfc33a06e45db21a2d46e5a8891fa37b8edf93255d6f4441c3ed4b551b7a949f28cec5e001cc31f9a4057cf79485bea15438f42fed35633674249a9e52b17c2434db28612", 0xdc0}], 0x1, &(0x7f0000000440)}, 0x800) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0xffffffffffffffd8) r6 = syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x101, 0x40000) r7 = fcntl$getown(r6, 0x9) getgid() getpgid(r7) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000002240)) fcntl$getownex(r3, 0x10, &(0x7f00000004c0)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000002c0)=0xffffffffffffff94) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000002300)) fstat(r4, &(0x7f00000000c0)) fcntl$getown(r1, 0x9) getgroups(0x3, &(0x7f00000023c0)=[0xee00, 0xee00, 0xffffffffffffffff]) getpgrp(0xffffffffffffffff) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f0000002440)) sendmmsg(r4, &(0x7f0000005700)=[{{&(0x7f0000003900)=@l2={0x1f, 0x2, {0x3, 0x2, 0xfffffffffffffd5d, 0x48000000000000, 0x2a4, 0x1}, 0x100000001, 0x20}, 0x80, &(0x7f0000000500)=[{&(0x7f00000024c0)="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", 0x1000}], 0x1, &(0x7f0000003bc0)}}], 0x1, 0x0) sendfile(r5, r2, &(0x7f0000000180), 0x10000014e) [ 275.807097] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 276.014852] bond0 (unregistering): Released all slaves [ 276.713160] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.719632] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.727122] device bridge_slave_0 entered promiscuous mode [ 276.772151] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.778610] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.786098] device bridge_slave_1 entered promiscuous mode [ 276.831335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 276.876076] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 277.009497] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 277.056583] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 277.270216] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 277.277776] team0: Port device team_slave_0 added [ 277.322942] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 277.330240] team0: Port device team_slave_1 added [ 277.375562] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.413436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.444071] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 277.452039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.459925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.504082] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 277.511448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.519406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.832085] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.838465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.845241] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.851622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.859013] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 278.161174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.774623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.862382] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 278.950128] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 278.956393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.963929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.081741] 8021q: adding VLAN 0 to HW filter on device team0 20:54:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:00 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='mounts\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:00 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:00 executing program 1: r0 = dup(0xffffffffffffff9c) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(r0) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:00 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x4, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7cf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000280)=0xffffffffffffff81) ioctl$VIDIOC_STREAMON(r0, 0x40045613, &(0x7f0000000000)=0x1) 20:54:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000180)={0x44, 0x0, [0x40000072]}) [ 279.603511] binder: 9963:9964 ioctl c018620b 20000000 returned -14 20:54:00 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x402) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000000080)=0x10000000008001, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_elf32(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x1103, 0x0, 0x38, 0x0, 0x0, 0x0, 0x2}}, 0xfe38) 20:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:00 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 279.783618] binder: 9987:9989 ioctl c018620b 20000000 returned -14 20:54:00 executing program 5: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) r1 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendfile(r0, r1, &(0x7f00000000c0), 0x5) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r2, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:00 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r2 = syz_open_procfs(r1, &(0x7f0000000000)='mounts\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:00 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:00 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 279.980312] binder: 10006:10014 ioctl c018620b 20000000 returned -14 20:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:00 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x2c0, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:00 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"766574000000000000000000bd6800", 0x43732e5398416f19}) 20:54:00 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0xffffffff, 0xc0000) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x80100, 0x0) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x424200, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x89, 0x400080) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x800, 0x400) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000300)=0x54) 20:54:00 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) [ 280.175143] binder: 10028:10030 ioctl c018620b 20000000 returned -14 20:54:00 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) [ 280.216749] IPVS: ftp: loaded support on port[0] = 21 20:54:00 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:00 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10200, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0xffff}, 0x8) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f00000001c0)={0x701, 0x8, 0xd8c, 0x8}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={&(0x7f0000000240), 0xc, &(0x7f0000000180)={&(0x7f0000009f80)=@delpolicy={0x5c, 0x14, 0x231, 0x0, 0x0, {{@in6=@loopback, @in=@loopback}}, [@policy_type={0xc, 0x10, {0xf0}}]}, 0x5c}, 0x8}, 0x0) 20:54:00 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000001740)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001780)={0x0, 0x5b09633b, 0x20}, &(0x7f00000017c0)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001800)={r2, 0x1, 0xea4}, &(0x7f0000001840)=0x8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 280.400651] binder: 10064:10065 ioctl c018620b 20000000 returned -14 20:54:00 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:00 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:00 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x5, 0x3, 0x2) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x4000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='syz_tun\x00', 0x16) sendmsg$unix(r1, &(0x7f0000000a40)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000000980)=[@cred={0x20}], 0x20}, 0x0) 20:54:00 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 280.560846] binder: 10079:10080 ioctl c018620b 20000000 returned -14 [ 280.598292] binder: 10082:10082 ioctl c018620b 20000000 returned -14 [ 280.817514] IPVS: ftp: loaded support on port[0] = 21 20:54:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0405b4525090420ce5840700b97b66d51105cd60"], 0x14, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) socket$tipc(0x1e, 0x2, 0x0) 20:54:01 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x1, 0x0) write$P9_RLERRORu(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='4c'], 0x2) syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)='./file0\x00', 0xae9, 0x0, &(0x7f0000000180), 0x802082, &(0x7f00000001c0)='$cgroup\x00') ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000180)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) lseek(r0, 0x2b, 0x7) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000080)={0x9, 0x100000000, 0xa0, 0x102}) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x9) close(r2) socket$vsock_stream(0x28, 0x1, 0x0) 20:54:01 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x0, 0xd, &(0x7f0000000000)='ppp0-trusted\x00', 0xffffffffffffffff}, 0x30) tkill(r1, 0x26) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000001c0)={[], 0x2, 0x3, 0x9, 0x0, 0x1, 0x4, 0x5004, [], 0x3c2}) 20:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:01 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:01 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x700, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:01 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:01 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 281.067088] binder: 10110:10111 ioctl c018620b 20000000 returned -14 20:54:01 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 281.121946] binder: 10121:10123 ERROR: BC_REGISTER_LOOPER called without request [ 281.146683] binder: 10121:10123 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 20:54:01 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:01 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000000)) [ 281.265193] binder: 10121:10130 ERROR: BC_REGISTER_LOOPER called without request [ 281.341249] binder: 10121:10130 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 281.358790] binder: 10147:10149 ioctl c018620b 20000000 returned -14 20:54:01 executing program 3: getgroups(0x2, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff]) setregid(r1, 0x0) getgroups(0x8, &(0x7f0000000040)=[r1, r0, r1, r1, r0, r0, r0, r0]) 20:54:01 executing program 4: clock_nanosleep(0xfffffffffffffff2, 0x1, &(0x7f0000000040)={0x0, 0x1c9c380}, 0x0) setxattr$security_smack_transmute(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0xc3, 0xffffffffffffffff) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x101100) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000140)={0x2, 0x1, [0x1e29, 0x100000001, 0x7ff, 0x1, 0x9434, 0x9, 0xc58b, 0x100]}) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) 20:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x4, 0x3ff, 0xfff}]}) 20:54:01 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80800, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0xfffffffffffffff8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:01 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:01 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) 20:54:01 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001c80)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="580000000000000014010000060000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x58}, 0x0) 20:54:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, 0x0) 20:54:01 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xe8, 0x109000) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000080)={0xd, "47c5cf845cde20de257faf67c9"}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000001c0)={0x10000, 0xf, 0x4, 0x2000000, {0x77359400}, {0x3, 0xe, 0x3a, 0x51164cd3, 0x8, 0x86, "6fc4129e"}, 0xfec, 0x6, @offset=0x81, 0x4}) getpeername$tipc(r1, &(0x7f0000000480), &(0x7f00000004c0)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast1, 0x5}}, 0x8, 0x6b35d6b, 0x1, 0xd, 0x3304}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x5010}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r4, 0x0, 0x5, 0x0, 0x1f, 0x7, 0x3, 0x8000, {r5, @in={{0x2, 0x4e24, @broadcast}}, 0x3ff, 0x8, 0x0, 0x80000000, 0x100000001}}, &(0x7f0000000440)=0xb0) socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r0, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000040)="0a5c2d0240316285717070") ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r1 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000280)="2400000021002551071c0157ff0ffc0202f0ffffff100f000ee1000c08000b0000000000bc0000008f3943793a5ea67658cb22b79489bbdd14f6fd59b97dc8f8b5e2908fd40eaeea4492bf50e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c483daabb7e919e204853dcae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7e060f4330000000000000000", 0x25f) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11800000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800f88f", @ANYRES16=r2, @ANYBLOB="08022abd70bbc75751a3670a79c55f00fedbdf250100e1ff000000000b000000000c001473797a3100000000276b5422a4a121a158ab43f222208515f1b08b5b55c078f0ec36590fda712ae6ef842b11418389a081755874c989c697e0d5fa7d2d308339169bb6f90a7fb80cf9fe1b0a26cb94"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) [ 281.612950] binder: 10171:10172 ioctl c018620b 20000000 returned -14 [ 281.647171] atomic_op 000000002d0067c7 conn xmit_atomic (null) 20:54:02 executing program 1 (fault-call:4 fault-nth:0): clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6800, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x0, 0x108000}) [ 281.739746] atomic_op 000000001f124780 conn xmit_atomic (null) [ 281.798444] FAULT_INJECTION: forcing a failure. [ 281.798444] name failslab, interval 1, probability 0, space 0, times 0 20:54:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x6, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}]}) 20:54:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) 20:54:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 281.842300] binder: 10203:10204 ioctl c018620b 20000000 returned -14 [ 281.907350] CPU: 1 PID: 10199 Comm: syz-executor1 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 281.915979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.925433] Call Trace: [ 281.928047] dump_stack+0x244/0x39d [ 281.931696] ? dump_stack_print_info.cold.1+0x20/0x20 [ 281.936985] ? get_pid_task+0xd6/0x1a0 [ 281.940899] should_fail.cold.4+0xa/0x17 [ 281.944981] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 281.950104] ? __f_unlock_pos+0x19/0x20 [ 281.954094] ? lock_downgrade+0x900/0x900 [ 281.958253] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.963829] ? proc_fail_nth_write+0x9e/0x210 [ 281.968338] ? proc_cwd_link+0x1d0/0x1d0 [ 281.972417] ? find_held_lock+0x36/0x1c0 [ 281.976517] ? perf_trace_sched_process_exec+0x860/0x860 [ 281.981984] ? __lock_is_held+0xb5/0x140 [ 281.986078] __should_failslab+0x124/0x180 [ 281.990321] should_failslab+0x9/0x14 [ 281.994132] __kmalloc_track_caller+0x2d5/0x750 [ 281.994153] ? strncpy_from_user+0x5a0/0x5a0 [ 281.994169] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.994184] ? strndup_user+0x77/0xd0 [ 281.994202] memdup_user+0x2c/0xa0 [ 281.994219] strndup_user+0x77/0xd0 [ 282.019772] ksys_mount+0x3c/0x140 [ 282.023335] __x64_sys_mount+0xbe/0x150 [ 282.027334] do_syscall_64+0x1b9/0x820 [ 282.030729] binder: 10212:10214 ioctl c018620b 20000000 returned -14 [ 282.031232] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 282.031252] ? syscall_return_slowpath+0x5e0/0x5e0 [ 282.031268] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.031290] ? trace_hardirqs_on_caller+0x310/0x310 [ 282.057896] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 282.062920] ? prepare_exit_to_usermode+0x291/0x3b0 [ 282.062943] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.062972] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 282.078007] RIP: 0033:0x457679 [ 282.081211] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.100120] RSP: 002b:00007fdf88f01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 20:54:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:02 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) ioctl(r0, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x8}}) close(r2) close(r1) [ 282.100136] RAX: ffffffffffffffda RBX: 00007fdf88f01c90 RCX: 0000000000457679 [ 282.100145] RDX: 000000002015bffc RSI: 00000000200000c0 RDI: 0000000000000000 [ 282.100155] RBP: 000000000072bf00 R08: 0000000020000000 R09: 0000000000000000 [ 282.100164] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf88f026d4 [ 282.100174] R13: 00000000004c2dcd R14: 00000000004d5158 R15: 0000000000000004 20:54:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x6, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}]}) [ 282.174849] binder: 10225:10226 ioctl c018620b 20000000 returned -14 20:54:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000040)='smaps\x00') bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r2}, 0x10) sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) getsockname(r2, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000440)=0x80) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r3}}, 0x18) 20:54:02 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4a2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000001c0)={0xa, @sdr={0x32525942}}) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x9, 0x20000) 20:54:02 executing program 1 (fault-call:4 fault-nth:1): clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xb3c, 0x4c, 0x5, 0x7fffffff, 0x0, 0x0, 0x7, 0x4, 0x6, 0x0, 0x101}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x10000, 0x800) recvmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/252, 0xfc}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000001740)=""/135, 0x87}, {&(0x7f0000001800)=""/180, 0xb4}], 0x6, &(0x7f0000001940)=""/215, 0xd7}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x8, 0x800000002, 0xffffffff, 0x1}, {0xa, 0x800000002, 0x7f, 0x6}]}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x8000000000, [], @raw_data=[0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800f, 0x0, 0x10001, 0x0, 0x0, 0x2fa6]}) [ 282.355499] binder: 10235:10244 ioctl c018620b 20000000 returned -14 20:54:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x6, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}]}) 20:54:02 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:02 executing program 5: r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)="6f38f4beae6f6d5f7b636f72655f") sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:02 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}}}, 0x20) socket$kcm(0xa, 0x1, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000540)={0x0, @in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x1000, 0x0, 0x71}, 0x98) r1 = semget$private(0x0, 0x3, 0x140) semctl$IPC_INFO(r1, 0x4, 0x3, &(0x7f0000000600)=""/188) accept$unix(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000003c0)=0x6e) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000140)}, 0x20) connect$llc(0xffffffffffffffff, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r3 = dup2(r2, r2) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @remote}]}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x100, @mcast2, 0x383}, r0}}, 0x30) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000000), &(0x7f0000000140)='GPL\x00', 0x0, 0xf4, &(0x7f0000000280)=""/244}, 0x48) 20:54:03 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x68, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 282.644362] binder: 10266:10268 ioctl c018620b 20000000 returned -14 [ 282.680056] FAULT_INJECTION: forcing a failure. [ 282.680056] name failslab, interval 1, probability 0, space 0, times 0 [ 282.713434] CPU: 1 PID: 10271 Comm: syz-executor1 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 282.722064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.731426] Call Trace: [ 282.734036] dump_stack+0x244/0x39d [ 282.737690] ? dump_stack_print_info.cold.1+0x20/0x20 [ 282.742911] ? __kernel_text_address+0xd/0x40 [ 282.747422] ? unwind_get_return_address+0x61/0xa0 [ 282.752377] should_fail.cold.4+0xa/0x17 [ 282.756486] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.761738] ? kasan_kmalloc+0xcb/0xd0 [ 282.765642] ? __kmalloc_track_caller+0x159/0x750 [ 282.770502] ? memdup_user+0x2c/0xa0 [ 282.774232] ? graph_lock+0x270/0x270 [ 282.778046] ? do_syscall_64+0x1b9/0x820 [ 282.782122] ? proc_fail_nth_write+0x9e/0x210 [ 282.786635] ? proc_cwd_link+0x1d0/0x1d0 [ 282.789527] binder: 10274:10275 ioctl c018620b 20000000 returned -14 [ 282.790713] ? find_held_lock+0x36/0x1c0 [ 282.790765] ? perf_trace_sched_process_exec+0x860/0x860 [ 282.790781] ? lock_release+0xa00/0xa00 20:54:03 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:03 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2240, 0x0) llistxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/80, 0x50) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x100000000, 0x5, 'queue1\x00', 0x2}) ioctl$TIOCEXCL(r2, 0x540c) name_to_handle_at(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="93000000200000009c4d8912cf934237ffea07c7b5e3bca142628d127314ce220700000000000000580efc24c8741b422e8f2893d81013a84092a691a591c18ae3cacc6b2d68f9021a28bab9e172b3de76829cd4c092ad0dd2a6409eda8c83d308e846997e3f29219d8abe6b5ff4d7eb7d2d1631bc3e6c88e88c716764b27652ec06c0d82d195963e8782f41e43b101a4dcf2c"], &(0x7f00000002c0), 0x400) [ 282.790800] ? perf_trace_sched_process_exec+0x860/0x860 [ 282.816290] ? usercopy_warn+0x110/0x110 [ 282.820373] __should_failslab+0x124/0x180 [ 282.824625] should_failslab+0x9/0x14 [ 282.828440] kmem_cache_alloc_trace+0x2db/0x740 [ 282.833126] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 282.838673] ? _copy_from_user+0xdf/0x150 [ 282.842833] copy_mount_options+0x5f/0x430 [ 282.847165] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 282.853215] ksys_mount+0xd0/0x140 [ 282.856768] __x64_sys_mount+0xbe/0x150 20:54:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x0, 0x4, 0x3ff, 0xfff}]}) [ 282.860761] do_syscall_64+0x1b9/0x820 [ 282.864657] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 282.870034] ? syscall_return_slowpath+0x5e0/0x5e0 [ 282.874977] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.879839] ? trace_hardirqs_on_caller+0x310/0x310 [ 282.884868] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 282.889893] ? prepare_exit_to_usermode+0x291/0x3b0 [ 282.889917] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.889942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 282.889954] RIP: 0033:0x457679 [ 282.889973] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 282.927087] RSP: 002b:00007fdf88f01c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 282.927103] RAX: ffffffffffffffda RBX: 00007fdf88f01c90 RCX: 0000000000457679 [ 282.927113] RDX: 000000002015bffc RSI: 00000000200000c0 RDI: 0000000000000000 [ 282.927124] RBP: 000000000072bf00 R08: 0000000020000000 R09: 0000000000000000 [ 282.927134] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdf88f026d4 20:54:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000540)={0x0, 0x0, @pic={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xb3c, 0x4c, 0x5, 0x7fffffff, 0x0, 0x0, 0x7, 0x4, 0x6, 0x0, 0x101}}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x10000, 0x800) recvmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000200)=@tipc=@id, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000440)=""/182, 0xb6}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/252, 0xfc}, {&(0x7f0000000280)=""/87, 0x57}, {&(0x7f0000001740)=""/135, 0x87}, {&(0x7f0000001800)=""/180, 0xb4}], 0x6, &(0x7f0000001940)=""/215, 0xd7}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x484b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000340)=[{0x8, 0x800000002, 0xffffffff, 0x1}, {0xa, 0x800000002, 0x7f, 0x6}]}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[], 0x0, 0x680}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000140)={0x0, 0x8000000000, [], @raw_data=[0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xea46, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800f, 0x0, 0x10001, 0x0, 0x0, 0x2fa6]}) [ 282.927143] R13: 00000000004c2dcd R14: 00000000004d5158 R15: 0000000000000004 [ 282.991446] binder: 10279:10284 ioctl c018620b 20000000 returned -14 20:54:03 executing program 3: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x68, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:03 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:03 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x0, 0x4, 0x3ff, 0xfff}]}) 20:54:03 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000000c0)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0xe, &(0x7f0000000200)='oom_score_adj\x00'}, 0x30) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='sched\x00') sendfile(r0, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000000)=0x1) 20:54:03 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x8) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x160000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x10c, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9af}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x800}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x100}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040), 0xc) ioctl$int_out(r0, 0x2, &(0x7f0000000100)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0xffffffff, 0x9, 0x3, 0x6}]}) [ 283.232044] binder: 10303:10306 ioctl c018620b 20000000 returned -14 20:54:03 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='n/s\x00', 0x0, &(0x7f0000000000)) [ 283.286863] binder: 10313:10314 ioctl c018620b 20000000 returned -14 20:54:03 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:03 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r0, 0x80000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L+', 0x5}, 0x28, 0x3) 20:54:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x0, 0x4, 0x3ff, 0xfff}]}) [ 283.440022] binder: 10325:10327 ioctl c018620b 20000000 returned -14 20:54:03 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:03 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, 0x0, 0xfffffe1a) r2 = socket$inet6(0xa, 0x803, 0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') timerfd_gettime(r3, &(0x7f0000000080)) ioctl(r2, 0x1000008912, &(0x7f0000000540)="0a5c2d023c126285718070") socket$xdp(0x2c, 0x3, 0x0) ppoll(&(0x7f0000000940)=[{r0}], 0x1, &(0x7f0000000980)={0x0, 0x1c9c380}, 0x0, 0x0) 20:54:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x32, 0x11d, 0x0, 0x0, {0x3}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000600)={{}, {0x1, 0x7}, [{0x2, 0x4, r1}, {0x2, 0x0, r2}, {0x2, 0x1, r3}, {0x2, 0x1, r4}], {0x4, 0x1}, [{0x8, 0x3, r5}, {0x8, 0x0, r6}], {0x10, 0x4}, {0x20, 0x6}}, 0x54, 0x1) 20:54:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x0, 0x3ff, 0xfff}]}) 20:54:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:04 executing program 3: socketpair$unix(0x1, 0x4004000000001, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) clone(0x0, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setownex(r0, 0xf, &(0x7f0000704000)={0x2}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) [ 283.657074] binder: 10348:10351 ioctl c018620b 20000000 returned -14 20:54:04 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:04 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) [ 283.839072] binder: 10365:10366 ioctl c018620b 20000000 returned -14 20:54:04 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='n.s\x00', 0x0, &(0x7f0000000000)) 20:54:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x500, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001, 0x0, 0x0, 0xfff}]}) 20:54:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x32976b7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 20:54:04 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0xfffffffffffffffc, 0xfffffffffffffeff) 20:54:04 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000bd0a0000000000689400000000000000c5d8767606"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x9, 0x0, 0x9, 0x9, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r1, 0x80, 0x4}, &(0x7f0000000140)=0xc) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'team_slave_1\x00', @random="bd149632c43f"}) [ 284.091455] binder: 10387:10389 ioctl c018620b 20000000 returned -14 20:54:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:04 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x53, 0x2}, {0x8845, 0x279}, 0x20, 0x5, 0x100000000}) unlinkat(r0, &(0x7f0000000180)='./file0\x00', 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xe, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0fffd000000b7060000000000012d6405000000000065040400010000000704feffffff0000b7050000000000006a0a00fe000000008500000009000000b700000000000000950000000000000016db03d1fa586552e4c03822a5884dc03e966401251269f5acc2b383e04a9e9600ca0adfde7f5f2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) 20:54:04 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f0000000080)="0a5c2d0240316285717070") r1 = socket(0x40000000015, 0x805, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x7, @loopback, 0x2}}, 0x4, 0x100000000, 0x0, 0x1, 0x78f8}, &(0x7f00000001c0)=0x98) getsockopt(r1, 0x114, 0x2711, &(0x7f0000af0fe7)=""/13, &(0x7f0000000000)=0xfcfe) 20:54:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x7, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000009, 0x7fffffff, 0x400, 0x3f, 0x5}, {0x80000001}]}) 20:54:04 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r0, &(0x7f0000000080)=0x5d, 0x79ffff00000011) socket$tipc(0x1e, 0x2, 0x0) [ 284.247259] binder: 10409:10413 ioctl c018620b 20000000 returned -14 20:54:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:04 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000280)={0x0, 0x8000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) listen(r2, 0xcbd) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="00000f7f"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) 20:54:04 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:04 executing program 3: io_setup(0x3b, &(0x7f0000000180)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x800, 0x0) close(r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101405, 0x0) sendmsg(r2, &(0x7f00000003c0)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x3, 0x4, {0xa, 0x4e24, 0x7, @mcast2, 0x8}}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="83a840ff64000feb9f950d7dc7b895bfc48dde603f14e44a0d5cd191f94c2e60a5b060bba7d1345572c4c7414e1c6e30c943869adb2c1c5c067430abcea1a93511698f61204ae49a43025a3914fee3641a78e93881004d9d4118ae398ed398bca29739cf3f4a89f7aedf69f3abe717986c55a3eb1a396e65409c7f", 0x7b}, {&(0x7f0000000000)="0aae", 0x2}, {&(0x7f0000000300)="34f0f9383761e65bf61e536da2f2ab090d6dda4be3dd63391ece5c35906240df1bdba4a1b48869d120d0d1448a29d4389d578391b368ad927d871dcbe3573b9dc35b11eb3ba7cc9737a3bcb279d50ce13707cc90de7fc4c0a748f16042b97fc13cf48723a44453dba812178afdf41efb8ae368c245636fd37f20992cd55d84245f3195cd37b3d670d2061eb82632ae7cf4964e3cce8f026f5b41250cefe6cc", 0x9f}, {&(0x7f0000000080)="ebf9ae5c5a37942d6474fa47cdbcfa6b44", 0x11}], 0x4, &(0x7f0000000280)=[{0x30, 0x109, 0x4, "20a26cea361e22b6942e6bdb6681ab8770e37b8a5232733f2c"}], 0x30}, 0x20000001) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 20:54:04 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100)=0x5d, 0xa060) 20:54:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x6, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {0x80000001}]}) [ 284.481491] binder: 10433:10437 ioctl c018620b 20000000 returned -14 20:54:04 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x48, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:05 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) r2 = memfd_create(&(0x7f00004c1000)='/dev/autofs\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00005eaff8)) syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') 20:54:05 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:05 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffffe8) 20:54:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x6, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {}]}) [ 284.760666] binder: 10460:10463 ioctl c018620b 20000000 returned -14 20:54:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) getsockopt$packet_buf(r2, 0x111, 0x2, 0x0, &(0x7f0000000040)) r3 = getpgrp(0xffffffffffffffff) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0xa901aad2dacdd147, 0x2, 0x10000, 0x3, r3}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000100)) 20:54:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) clock_gettime(0x0, &(0x7f0000000900)) r3 = accept$alg(r0, 0x0, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000500)=0x3) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000180)="6d7645358a1289a70c869c28d48eebdefd77fc76d34b275a68dcdb36d1", 0x1d, 0x7ff, &(0x7f0000000280)={r4, r5+30000000}) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) ioctl$TIOCSCTTY(r2, 0x540e, 0x2d1d) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) recvmmsg(r3, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xf}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f0000000600)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000040), &(0x7f0000000140)) 20:54:05 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000380)="000000809d001ffffefb50cb055c60a8fc3faa2e0759df42a19532c49819addde673ca9521b934e754b238edee26651ced44eb95df68843b76eb0b3ffc14cf59dec6a7bf9b530ed4c04ea934c41821248723af36ef8fbdaaf59f02cd96b4f18ed4d9", 0x5) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='ip6_vti0\x00') r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r2) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) write(r0, &(0x7f0000000280)="2e70d50feecc1f019b977624e5baa5ce5fafb793254c71c37780a1b31aba9967ea6c0b5b3ceca44382ea35f6a1f8e9ce9d0930cd1969b4b1eebabe8d869ee03fa4b3557de2a1f58f6e4d1d38d43f2f68a45d252215953a4b9d19830a201db8ed8d465ad0175bde90a78cb7392e315c1ad68290825e525e69ce1b4f46ad51bc84", 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) sendfile(r0, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:05 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x6, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {}]}) [ 284.986090] binder: 10482:10487 ioctl c018620b 20000000 returned -14 20:54:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x400000000001, 0x0) write(r0, &(0x7f0000000280), 0xba6c1c86) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='s'], 0x1) ioctl$int_in(r2, 0x5452, &(0x7f00005ebff8)=0x3f) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000040)=[{r3}], 0x1, 0x0, 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f0000704000)={0x0, r1}) epoll_create1(0x80000) dup2(r2, r3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf6) tkill(r1, 0x15) 20:54:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x4800, 0x0, 0x0, 0x0, 0x0, 0x0}) 20:54:05 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)="6e6673ff", 0x0, &(0x7f0000000000)) 20:54:05 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x5, 0x400) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) fcntl$getflags(r1, 0x40b) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000080)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r2, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x6, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0xa, 0x8001, 0x7, 0x18f6fee2, 0x8}, {}]}) [ 285.227580] binder: 10508:10510 ioctl c018620b 20000000 returned -14 20:54:05 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:05 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)="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") prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:05 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x7400, 0x0, 0x0, 0x0, 0x0}) 20:54:05 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xfffffdec) recvmsg(r1, &(0x7f0000005f40)={0x0, 0x0, 0x0}, 0x2) fcntl$setpipe(r1, 0x407, 0x3) 20:54:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x5, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {0x80000001}]}) [ 285.605391] binder: 10542:10546 ioctl c018620b 20000000 returned -14 20:54:06 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)="6e667303", 0x0, &(0x7f0000000000)) 20:54:06 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0}) [ 285.818170] binder: 10559:10562 ioctl c018620b 20000000 returned -14 20:54:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RGETATTR(r2, 0x0, 0x0) 20:54:06 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0xe61, 0x8004, 0x800, 0x40, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0xdc, "d09d0e1c008a456754b25d7ce1b85aac9c7ce434b0c8ce9ea5289af80d2873af03b82ec2bb215eb34e8d8c155b8051795da095f0b5edd514a03c45ea144a91da0ac7b701ba76f74c53db554a64af57febf091e36905ec41f25c343dfa4b5ac198909cb6e95e03e6b54d1f55a0398358282da234827db5064511cff96913c3e8ef0ceb480feebfce73468ea2535a1d23170c5e5afa27b293f9b3e6e25ec6a8c591bf7eb50f87c3beb06a2dd9faba4e01266d22567c0972486639b8688eb5b4d4c10f57799e703973b5b949d1162de6103810733bc533967e7954061b3"}, &(0x7f00000000c0)=0xe4) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x5, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {}]}) 20:54:06 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:06 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0}) 20:54:06 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0}) [ 286.142848] binder: 10573:10578 ioctl c018620b 20000000 returned -14 20:54:06 executing program 3: sched_setaffinity(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"0000000000000000000000000200", 0x5002}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000180), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) write(r2, &(0x7f0000000440)="484c414caf3262f79d56565231fda122a366ea", 0x13) write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7) write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7) sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024) creat(&(0x7f0000000540)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000000c0)=0x202, 0x0) 20:54:06 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:06 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket(0x10, 0x802, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='~', 0x1}], 0x1) write(r1, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020e80000001009ffeb0800010010000100", 0x24) 20:54:06 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000000c0)={0x0, {0xffffffffffffff81, 0x8}}) keyctl$get_security(0x11, r2, &(0x7f00000001c0)=""/178, 0xb2) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x5, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {}]}) 20:54:06 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)="6e667386", 0x0, &(0x7f0000000000)) 20:54:07 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 286.569094] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 286.594589] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:54:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x5, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x0, 0x5, 0x3ff, 0xb1, 0xef9}, {}]}) [ 286.730296] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 20:54:07 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:07 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x7fffffffff, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000240), 0xfffffffffffffee8, 0x4007ffa, 0x0, 0xfffffffffffffe49) 20:54:07 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x3, r1}) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x3, 0x3) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 286.849581] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 20:54:07 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0}) 20:54:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) 20:54:07 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x4, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {0x80000001}]}) 20:54:07 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000000)=0xc472, 0x4) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:07 executing program 4: syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]}) pipe2(0x0, 0x80800) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x44000) 20:54:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x4, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {}]}) 20:54:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4e2c9975842c4c27d794e0066420fe2e33e0f1110c442019dccd3196f") setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@window, @window={0x3, 0x18, 0xffffffffffffffc1}, @timestamp, @timestamp, @mss={0x2, 0x5}, @mss={0x2, 0x6}, @timestamp], 0x7) rt_sigsuspend(&(0x7f0000000100)={0x6}, 0x8) [ 287.575438] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh" [ 287.613374] gfs2: fsid=dh: Now mounting FS... 20:54:08 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102005ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x2000000000000001) read$FUSE(r1, &(0x7f00000001c0), 0x1000) syz_genetlink_get_family_id$tipc(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:08 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)="6e6673ff", 0x0, &(0x7f0000000000)) [ 287.660410] gfs2: not a GFS2 filesystem [ 287.707448] gfs2: fsid=dh: can't read superblock [ 287.733695] gfs2: fsid=dh: can't read superblock: -22 20:54:08 executing program 3: syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 20:54:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x4, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {}]}) [ 287.852766] IPVS: ftp: loaded support on port[0] = 21 [ 287.957013] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh" [ 287.988747] gfs2: fsid=dh: Now mounting FS... [ 288.004454] gfs2: not a GFS2 filesystem [ 288.031087] gfs2: not a GFS2 filesystem [ 288.035930] gfs2: fsid=dh: can't read superblock [ 288.042624] gfs2: fsid=dh: can't read superblock: -22 [ 288.101154] gfs2: not a GFS2 filesystem [ 288.152622] device bridge_slave_1 left promiscuous mode [ 288.158164] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.213079] device bridge_slave_0 left promiscuous mode [ 288.218593] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.294399] team0 (unregistering): Port device team_slave_1 removed [ 288.315733] team0 (unregistering): Port device team_slave_0 removed [ 288.331401] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 288.365530] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 288.440662] bond0 (unregistering): Released all slaves [ 288.942106] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.948566] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.956548] device bridge_slave_0 entered promiscuous mode [ 289.002076] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.008516] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.016600] device bridge_slave_1 entered promiscuous mode [ 289.061546] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 289.104817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 289.251274] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 289.341278] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 289.559039] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 289.566823] team0: Port device team_slave_0 added [ 289.609124] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 289.616738] team0: Port device team_slave_1 added [ 289.659931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 289.666979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 289.683928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 289.722383] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 289.729245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 289.746228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.784596] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 289.792234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.808471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.847228] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 289.854575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.863038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 290.213021] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.219383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.226074] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.232450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.239528] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 290.601458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.189424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.278194] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 291.372550] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 291.378682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.386689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.470264] 8021q: adding VLAN 0 to HW filter on device team0 20:54:12 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}) 20:54:12 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:12 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x44) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x4, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0xc0000001, 0x2, 0x7, 0x400, 0x81}, {}]}) 20:54:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) 20:54:12 executing program 4: syz_mount_image$gfs2(&(0x7f0000000340)='gfs2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, 'dh\x00'}}, {@suiddir='suiddir'}]}) pipe2(0x0, 0x80800) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x44000) [ 291.990038] binder: 10978:10979 ioctl c018620b 20000000 returned -14 20:54:12 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(0xffffffffffffffff, r0, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:12 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x7, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)="2f67726f3c23fb57e6c60f1f4b45b74d999a9a8c2ce15b26e518a4cb3a9cd12dcea440d899c22c652b3a471b4a7db7f3fef6e02e2be389de133945a385bd81e9bdeeee03000000000000005b540745df4b1dee483b157624c5bc719a099e6a3509000000398c34", 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x4000001) prctl$PR_SET_TSC(0x1a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x4002091, 0xffffffffffffffff, 0x0) gettid() [ 292.079606] gfs2: fsid=dh: Trying to join cluster "lock_nolock", "dh" [ 292.140037] binder: 11003:11005 ioctl c018620b 20000000 returned -14 [ 292.151321] gfs2: fsid=dh: Now mounting FS... 20:54:12 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:12 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0}) [ 292.188805] gfs2: not a GFS2 filesystem [ 292.215109] gfs2: fsid=dh: can't read superblock 20:54:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x3, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {0x80000001}]}) 20:54:12 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) ioctl$RTC_UIE_ON(r1, 0x7003) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000080)=""/47, &(0x7f00000000c0)=0x2f) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000001c0)={0x8000, 0x7, 0x0, [{0xfffffffffffffffa, 0x20, 0xffff, 0x6, 0x0, 0x3, 0xffffffff80000000}, {0x3, 0x400000, 0x220, 0xf6d, 0x6, 0x3, 0x800}, {0x6, 0x1, 0x7, 0xe64d, 0x2, 0x5, 0x9}, {0x874d, 0x401, 0x4, 0x8e20, 0x39, 0x800, 0x5}, {0xd87, 0x80000001, 0x5, 0x2, 0x2, 0x5, 0x9d3}, {0x7f, 0xfffffffffffffffe, 0x5, 0xfff, 0x7, 0x7, 0x40}, {0x8, 0x0, 0x81, 0x0, 0x0, 0x1, 0x5d2}]}) sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 292.248771] gfs2: fsid=dh: can't read superblock: -22 [ 292.316525] binder: 11017:11025 ioctl c018620b 20000000 returned -14 20:54:12 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0}) 20:54:12 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfsb', 0x0, &(0x7f0000000000)) 20:54:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x3, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {}]}) 20:54:12 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:12 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x8, 0x3, 0x2, 0xffffffffffffffe0, 0x4, 0x401, 0x9}) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f00000000c0)=0xe79d, 0x4) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 292.522213] binder: 11043:11047 ioctl c018620b 20000000 returned -14 20:54:13 executing program 4: open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file1\x00') 20:54:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0}) [ 292.699524] binder: 11063:11064 ioctl c018620b 20000000 returned -14 20:54:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:13 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x4a, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0x0, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x3, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {}]}) 20:54:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0}) 20:54:13 executing program 3: socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000380)) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000001, 0x12) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x20000006, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@ll, &(0x7f0000000280)=0x80, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x1, 0x1000) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000340)={0x4}) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000240)={0x0, 0x2000000001, 0x2, &(0x7f0000000080)}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x4001) 20:54:13 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x1}], 0x58) 20:54:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x7a, 0x0, 0x0, 0x0, 0x0}) 20:54:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 293.164281] binder: 11087:11088 ioctl c018620b 20000000 returned -14 20:54:13 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080)=0x2, 0x8) fstatfs(r0, &(0x7f00000001c0)=""/239) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r1, 0x0, 0x3}, 0x10) 20:54:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x3, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x828a7821de6884f, 0x5, 0x1, 0x5}, {}]}) 20:54:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0}) [ 293.299512] binder: 11102:11104 ioctl c018620b 20000000 returned -14 20:54:13 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:13 executing program 4: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x400200, 0x0) eventfd(0x7f) r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000200)="b8010000000f01d965660faeb603000000b8358556370f23c80f21f8350400d0000f23f8640fc7ae02000000ea00600000fa00c4c18566220f20d835080000000f22d8360f01cf66baf80cb83bd30c85ef66bafc0cb06aee0fc7b49f0a000000", 0x60}], 0x1, 0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000300)=[@in={0x2, 0x0, @remote}], 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fchown(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x42, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 20:54:13 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000080)='\x00', 0xffffffffffffffff}, 0x30) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000000100)='statm\x00') sendfile(r2, r2, &(0x7f0000000000)=0x5d, 0x79ffff00000011) 20:54:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {0x80000001}]}) 20:54:13 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0}) [ 293.514501] binder: 11123:11125 ioctl c018620b 20000000 returned -14 20:54:14 executing program 3: r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x1}, 0x0, 0x0) [ 293.608031] binder: 11144:11145 ioctl c018620b 20000000 returned -14 20:54:14 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0}) 20:54:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {}]}) 20:54:14 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) [ 293.807680] binder: 11157:11158 ioctl c018620b 20000000 returned -14 20:54:14 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0}) [ 294.030580] binder: 11181:11183 ioctl c018620b 20000000 returned -14 20:54:14 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(0x0, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x2, @multicast1, 0x4e20, 0x4, 'lblc\x00', 0xc}, {@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x44) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ptrace(0x4207, 0x0) 20:54:14 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x14, 0x141000) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000340)={0x9, 0x40, 0x800000000000}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/xfrm_stat\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x1, '\x00', 0x3}, 0x18) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r2, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f00000001c0)={{0x1, 0x44f}, 'port1\x00', 0x20, 0x100012, 0xbba5, 0x9, 0x2, 0x80, 0x5, 0x0, 0x4, 0x7}) 20:54:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)="6e667303", 0x0, &(0x7f0000000000)) 20:54:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {}]}) 20:54:14 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0}) 20:54:14 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x6}, 0x2c) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00003e4000/0x3000)=nil, 0x3000}, 0x1}) modify_ldt$write(0x1, &(0x7f0000000000)={0x3ff}, 0x10) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) socket$inet6(0xa, 0x0, 0x0) dup3(r0, r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) [ 294.380641] binder: 11192:11193 ioctl c018620b 20000000 returned -14 20:54:14 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0}) 20:54:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0xa, 0x6, 0x4, 0x8, 0x7}, {}]}) 20:54:14 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs ', 0x0, &(0x7f0000000000)) 20:54:14 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xffffffffffff8000, 0x101000) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000001c0)="cad5f7b805a39e7d6188de7a71eef322d3b1e4f0a1343475276c0aa3f4d936453fbcd57eec6483778d81e47e0d9e8073684100eaaab44a13632813b2f2b2b913ed50a3c43f61d5a271f43abe55f5266ad8139bf6820896108b26fa13452a27008b1c866095d18cb7188d6740e5853bd03fea9af8f0b762f4fb8c2058351406f73f4fccce41abb189c5d7a1a31e62a489ee8b03", 0x93}, {&(0x7f0000000280)="c9259962b3d973a9144ef2184c21738229cfac0eed64a6370d9b470687a48728bb9f56adc2bcf2a4bbaa1c23aeff8c4b4ffa3dd9552f930c4a24622e11c436d250b143793e7d62a72f86e81f0387d82992fd33972707a7ee69098849c02b74e8cf274e1de852a64df9a07e35b6ae5616ccb172e0131981ef2542114b8dc1423e06a37ac923e5abc0d4ae9a0e70875ef7c8d903cc1a440e7c8038ffd6e8f137025b5ece58785f", 0xa6}, {&(0x7f0000000340)="8b52053f484503a1068fcfac4d9f12eab623b14f8e236553d502712c4f9c41ad1114f84517a8b88db05e1b27daa756b1ca6ae60b41138927506622ab7e2b8f24f3a51990da64d389d72997f72224682fa5f2ec745850ad4c43d763773b9cf9b56302f0f905f8abd63d830cb1856da98ea8e330d0aad7bba8840e60901c95a9642e8e61ddad2a2609d33192019d06e3ce02d5c048541ac86d05bd437c78a3df3ed9b1a6f6468c2a716d7e8f278c8e232d726cf0cd4ae6b410d66e8ef6dbead091f0635e00bfa9889920eb", 0xca}, {&(0x7f0000000080)="d94f582bac649726d3d1db1b44fb6227c85cf8df57aad624f8aa0f692078a8b22feed1648a389cd95d38d4dbcb796a32224247da546e0fe1dfe5e4eed188ca01a195d1f9addc656698bfc4a8db9e01132cf3a6b58c1a695431c1e3b45de0ec9e3d906481c3f9e9e74cdc", 0x6a}, {&(0x7f0000000440)="69be1bb3de9bf1874064f7a69600b5d24aa1b91dac038c35a6043b8eae", 0x1d}, {&(0x7f0000000480)="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", 0xff}, {&(0x7f0000000580)="882fe837559274ee493f30b576bbac8be8fdbf949fce4523d3190efa522f6461be0eded57887bcb58e349a3f1a7d8b59c74d625f1401d0aaa3efa3b5d9e3bdf4cc05c6c41ebda903bea1ee64449b57740f9fe2b3ccfac6fbdf374c0e2895549a849491ab6b1d5dba8c12c393d31782b7d544c44a55505c63e9fc7494931d767789467726fb3ad4982daef0375882d04bf1addd97cf3598ae7eebdf28895c7013ced673eb320104affb", 0xa9}], 0x7) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r0, &(0x7f0000000100), 0x79ffff00000011) 20:54:15 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0}) [ 294.593981] binder: 11222:11224 ioctl c018620b 20000000 returned -14 20:54:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(0x0, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x2, @multicast1, 0x4e20, 0x4, 'lblc\x00', 0xc}, {@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x44) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ptrace(0x4207, 0x0) 20:54:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x80000001}]}) 20:54:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f0000000240)=0x60) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000280)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) socket(0x3, 0x6, 0x1) 20:54:15 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0}) [ 294.705068] binder: 11245:11246 ioctl c018620b 20000000 returned -14 20:54:15 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0x0, 0x6}, 0x2c) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00003e4000/0x3000)=nil, 0x3000}, 0x1}) modify_ldt$write(0x1, &(0x7f0000000000)={0x3ff}, 0x10) r1 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) socket$inet6(0xa, 0x0, 0x0) dup3(r0, r1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 20:54:15 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 294.873524] binder: 11261:11262 ioctl c018620b 20000000 returned -14 20:54:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x2, 0x63, [{0x9, 0x0, 0x471d}, {0x1, 0x0, 0xff}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x80000001}]}) 20:54:15 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:15 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0}) 20:54:15 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(0x0, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000040)={{0x2, @multicast1, 0x4e20, 0x4, 'lblc\x00', 0xc}, {@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x44) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) ptrace(0x4207, 0x0) 20:54:15 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0}) 20:54:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000000)=0x4) [ 295.123303] binder: 11291:11292 ioctl c018620b 20000000 returned -14 20:54:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x80000001}]}) 20:54:15 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:15 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) 20:54:15 executing program 3: r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$eventfd(r0, &(0x7f0000000080), 0xfffffe5e) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) [ 295.280340] binder: 11304:11307 ioctl c018620b 20000000 returned -14 20:54:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x6, 0x4, 0x8, 0x7}, {0x80000001}]}) 20:54:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0), 0x0, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$search(0xa, r2, &(0x7f0000000200)='cifs.spnego\x00', &(0x7f0000000240)={'syz', 0x2}, r3) write$P9_RRENAME(r1, &(0x7f0000000000)={0x7, 0x15, 0x2}, 0x7) 20:54:15 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:15 executing program 4: [ 295.433209] binder: 11323:11324 ioctl c018620b 20000000 returned -14 20:54:15 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0}) [ 295.529900] cgroup: fork rejected by pids controller in /syz1 20:54:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x0, 0x4, 0x8, 0x7}, {0x80000001}]}) 20:54:15 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r1, r1, 0x1f, 0xffffffff00000000, &(0x7f0000000000)="f5d2e3361db2f485e4cb328d55fbeafa58f8a110ceb7ba63732cfe8b5c5cb03380a35b1bc08d11fb7f32499be654511049bcb357eb793a607fcd3fc30b115b75", 0xd78, 0x1, 0xffffffff, 0x1f, 0x2, 0xffff, 0x4, "66d2cd0da6fab05ee56eb30b23c1220096100dcd3e0781bacef0857e93c4ffd939ab9c752ea91e70a7debf930d625ae9a282abffc6caca02e0df6a84b18303481864fd89f2e01eded9e7275343ec1e0f91ef1e7da6e0b354e5af6ca35afa5866a75981c8a07fc2aabeada2237d5fe45a8b09c41feae572f7f7b9fea68e1a4b41ed2377124c588a4ac647325f5cabe08bd66ff03e5a11e18b51aeec96d5dca9e2cce5622cb7bd7e925945a5cd199fd38cd690cf4f611427dd954b319fcb23"}) r2 = gettid() ioctl$NBD_SET_SIZE(r1, 0xab02, 0x3) prctl$PR_SET_PTRACER(0x59616d61, r2) 20:54:16 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)="6e6673f6", 0x0, &(0x7f0000000000)) 20:54:16 executing program 4: [ 295.664089] binder: 11343:11346 ioctl c018620b 20000000 returned -14 20:54:16 executing program 4: 20:54:16 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket$xdp(0x2c, 0x3, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x8, 0x7}, {0x80000001}]}) 20:54:16 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0}) 20:54:16 executing program 4: 20:54:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @remote}, {}, {}]}) 20:54:16 executing program 3: 20:54:16 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:16 executing program 4: [ 296.351838] binder: 11378:11382 ioctl c018620b 20000000 returned -14 20:54:16 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:16 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x121000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000000c0)={r2, 0x80000, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r3, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:16 executing program 4: 20:54:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{0x0, 0x0, 0x0, 0x0, 0x7}, {0x80000001}]}) 20:54:16 executing program 3: 20:54:16 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}) 20:54:17 executing program 4: [ 296.611166] binder: 11407:11409 ioctl c018620b 20000000 returned -14 20:54:17 executing program 3: 20:54:17 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) prctl$PR_SET_DUMPABLE(0x4, 0xbf5d16b67ecf5469) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x9, 0x4) 20:54:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{}, {0x80000001}]}) 20:54:17 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:17 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}) 20:54:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') sendmmsg(r0, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)}, {0x0}, {0x0}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x4) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='highspeed\x00', 0x23c) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 20:54:17 executing program 3: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") sendto$inet(r0, 0x0, 0x0, 0x1be4, 0x0, 0x0) 20:54:17 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:17 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000080)={0x0, 0x5, 0x4, 0x1000, {0x77359400}, {0x3, 0x0, 0x5, 0x1, 0x6, 0x14, "948f2faf"}, 0x20, 0x3, @userptr=0x7, 0x4}) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000000)={@empty, @remote}, &(0x7f00000001c0)=0x8) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:17 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)='9p\x00', 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose='cache=loose'}]}}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:54:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) 20:54:17 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:17 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:17 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') socket$inet_smc(0x2b, 0x1, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x5d, 0x79ffff00000011) 20:54:17 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create(0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) r2 = open(&(0x7f0000000000)='./file0\x00', 0x90000, 0x8) dup3(r2, r2, 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={r1, 0x3, 0x1, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) 20:54:17 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/94, 0x5e}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6669625f7472696573746174008ea11d5cb17a802d95701f19f29e848337320ccf9b1c87c5968d4a7205f5cdaf64ba765dc21c3ea3fd6131a8b6575c44b4dea9097bb384894ba847f69b8b618605633c7ea19f492f8dfc5c257f8ccb9a7d2e61e4f2af0a73dabb26b7e43dfa") preadv(r0, &(0x7f0000000480), 0x1000000000000162, 0x0) 20:54:18 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0}) 20:54:18 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000080)=0x8) sendfile(r0, r1, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:18 executing program 3: msgrcv(0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) msgsnd(0x0, &(0x7f0000000040)={0x1}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000380)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 20:54:18 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:18 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102005ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x2000000000000001) read$FUSE(r1, &(0x7f00000001c0), 0x1000) syz_genetlink_get_family_id$tipc(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:18 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={r1, r2/1000+30000}, 0x10) 20:54:18 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) [ 298.100789] IPVS: ftp: loaded support on port[0] = 21 20:54:18 executing program 1: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:18 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102005ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') exit(0x0) sendfile(r1, r1, 0x0, 0x2000000000000001) read$FUSE(r1, &(0x7f00000001c0), 0x1000) syz_genetlink_get_family_id$tipc(0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00000001c0)="645e4021d5e9fab43e77f86df1a1bae266d2ed1f7b867b9093d87163bb7026aa9e1bffe7e81352b0715fb596ac447becc6e0f7e49e601070c3395d494e5c7b9b45354afcae6a12126de340860d364d423757039cc83883afddfd18b843e996251f183094fcabb5fec3b266d14f91bbcf46c931b1540e59fa3d56762788979117313df341a213acbb125ea50a3ae0c14340489f02864c8bbe2fb076cb0953") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r1, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) 20:54:18 executing program 4: clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 20:54:18 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{}, {0x80000001}]}) [ 298.456392] FAULT_INJECTION: forcing a failure. [ 298.456392] name failslab, interval 1, probability 0, space 0, times 0 [ 298.512069] CPU: 1 PID: 11526 Comm: syz-executor3 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 298.520696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 298.530076] Call Trace: [ 298.532684] dump_stack+0x244/0x39d [ 298.536338] ? dump_stack_print_info.cold.1+0x20/0x20 [ 298.541553] ? debug_smp_processor_id+0x1c/0x20 [ 298.546236] ? perf_trace_lock+0x14d/0x7a0 [ 298.550506] should_fail.cold.4+0xa/0x17 [ 298.554587] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 298.559721] ? __lock_acquire+0x62f/0x4c20 [ 298.563988] ? graph_lock+0x270/0x270 [ 298.567804] ? lock_unpin_lock+0x4a0/0x4a0 [ 298.572060] ? find_held_lock+0x36/0x1c0 [ 298.576148] ? __lock_is_held+0xb5/0x140 [ 298.580243] ? perf_trace_sched_process_exec+0x860/0x860 [ 298.585707] ? perf_trace_lock+0x14d/0x7a0 [ 298.589979] __should_failslab+0x124/0x180 [ 298.594234] should_failslab+0x9/0x14 [ 298.598054] kmem_cache_alloc_node_trace+0x277/0x740 [ 298.603186] ? graph_lock+0x270/0x270 [ 298.607091] __get_vm_area_node+0x130/0x3a0 [ 298.611467] ? vmx_set_cr4+0x7c0/0x7c0 [ 298.615389] __vmalloc_node_range+0x19d/0x8d0 [ 298.619932] ? kvm_vcpu_ioctl_set_cpuid+0x1d8/0xa00 [ 298.624975] ? vfree_atomic+0xe0/0xe0 [ 298.628804] ? lock_downgrade+0x900/0x900 [ 298.632974] ? lock_release+0xa00/0xa00 [ 298.636959] ? kvm_vcpu_ioctl_set_cpuid+0x1d8/0xa00 [ 298.641993] vmalloc+0x6f/0x80 [ 298.645205] ? kvm_vcpu_ioctl_set_cpuid+0x1d8/0xa00 [ 298.650239] kvm_vcpu_ioctl_set_cpuid+0x1d8/0xa00 [ 298.655104] ? kvm_update_cpuid+0xbe0/0xbe0 [ 298.659453] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 298.665014] ? _copy_from_user+0xdf/0x150 [ 298.669218] kvm_arch_vcpu_ioctl+0x10d3/0x3b10 [ 298.673801] ? kvm_arch_vcpu_put+0x420/0x420 [ 298.678203] ? lock_unpin_lock+0x4a0/0x4a0 [ 298.682429] ? lock_is_held_type+0x210/0x210 [ 298.686852] ? mark_held_locks+0x130/0x130 [ 298.691090] ? print_usage_bug+0xc0/0xc0 [ 298.695144] ? check_preemption_disabled+0x48/0x280 [ 298.700152] ? print_usage_bug+0xc0/0xc0 [ 298.704204] ? print_usage_bug+0xc0/0xc0 [ 298.708258] ? kasan_check_read+0x11/0x20 [ 298.712402] ? __lock_acquire+0x62f/0x4c20 [ 298.716629] ? find_held_lock+0x36/0x1c0 [ 298.720698] ? mark_held_locks+0x130/0x130 [ 298.724941] ? print_usage_bug+0xc0/0xc0 [ 298.728995] ? debug_smp_processor_id+0x1c/0x20 [ 298.733653] ? perf_trace_lock+0x14d/0x7a0 [ 298.737882] ? print_usage_bug+0xc0/0xc0 [ 298.741953] ? lock_acquire+0x1ed/0x520 [ 298.745986] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 298.750222] ? lock_release+0xa00/0xa00 [ 298.754185] ? perf_trace_sched_process_exec+0x860/0x860 [ 298.759626] ? __lock_acquire+0x62f/0x4c20 [ 298.763862] ? __mutex_lock+0x85e/0x16f0 [ 298.767914] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 298.772142] ? mutex_lock_io_nested+0x1570/0x1570 [ 298.776984] ? __lock_acquire+0x62f/0x4c20 [ 298.781231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.786774] ? check_preemption_disabled+0x48/0x280 [ 298.791804] ? lock_is_held_type+0x210/0x210 [ 298.796203] ? graph_lock+0x270/0x270 [ 298.799997] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.805524] ? check_preemption_disabled+0x48/0x280 [ 298.810532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.816060] ? check_preemption_disabled+0x48/0x280 [ 298.821085] ? debug_smp_processor_id+0x1c/0x20 [ 298.825772] ? perf_trace_lock+0x14d/0x7a0 [ 298.830016] ? lock_is_held_type+0x210/0x210 [ 298.834419] ? lock_is_held_type+0x210/0x210 [ 298.838833] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 298.844385] ? check_preemption_disabled+0x48/0x280 [ 298.849401] ? _parse_integer+0x134/0x180 [ 298.853655] ? debug_smp_processor_id+0x1c/0x20 [ 298.858320] kvm_vcpu_ioctl+0x278/0x1150 [ 298.862382] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 298.868120] ? find_held_lock+0x36/0x1c0 [ 298.872216] ? __fget+0x4aa/0x740 [ 298.875666] ? lock_downgrade+0x900/0x900 [ 298.879803] ? check_preemption_disabled+0x48/0x280 [ 298.884815] ? kasan_check_read+0x11/0x20 [ 298.888964] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 298.894243] ? rcu_read_unlock_special+0x370/0x370 [ 298.899186] ? __fget+0x4d1/0x740 [ 298.902633] ? ksys_dup3+0x680/0x680 [ 298.906358] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 298.911296] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 298.917013] do_vfs_ioctl+0x1de/0x1790 [ 298.920923] ? ioctl_preallocate+0x300/0x300 [ 298.925336] ? __fget_light+0x2e9/0x430 [ 298.929330] ? fget_raw+0x20/0x20 [ 298.932781] ? __sb_end_write+0xd9/0x110 [ 298.936850] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 298.942395] ? fput+0x130/0x1a0 [ 298.945681] ? do_syscall_64+0x9a/0x820 [ 298.949643] ? do_syscall_64+0x9a/0x820 [ 298.953627] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 298.958229] ? security_file_ioctl+0x94/0xc0 [ 298.962651] ksys_ioctl+0xa9/0xd0 [ 298.966124] __x64_sys_ioctl+0x73/0xb0 [ 298.970018] do_syscall_64+0x1b9/0x820 [ 298.973903] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 298.979292] ? syscall_return_slowpath+0x5e0/0x5e0 [ 298.984221] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 298.989069] ? trace_hardirqs_on_caller+0x310/0x310 [ 298.994075] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 298.999080] ? prepare_exit_to_usermode+0x291/0x3b0 [ 299.004092] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.008929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.014109] RIP: 0033:0x457679 [ 299.017293] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.036218] RSP: 002b:00007f2d4c193c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.043931] RAX: ffffffffffffffda RBX: 00007f2d4c193c90 RCX: 0000000000457679 [ 299.051196] RDX: 00000000200001c0 RSI: 000000004008ae8a RDI: 0000000000000005 [ 299.058453] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.065711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d4c1946d4 [ 299.072977] R13: 00000000004c05ca R14: 00000000004d1648 R15: 0000000000000006 [ 299.085505] syz-executor3: vmalloc: allocation failure: 48 bytes, mode:0x6000c0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 299.099432] CPU: 1 PID: 11526 Comm: syz-executor3 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 299.108020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 299.108044] Call Trace: [ 299.108068] dump_stack+0x244/0x39d [ 299.108091] ? dump_stack_print_info.cold.1+0x20/0x20 [ 299.123659] warn_alloc.cold.117+0xc3/0x1c9 [ 299.123681] ? zone_watermark_ok_safe+0x3f0/0x3f0 [ 299.123702] ? __get_vm_area_node+0x130/0x3a0 [ 299.123736] ? rcu_read_lock_sched_held+0x14f/0x180 [ 299.133232] ? graph_lock+0x270/0x270 [ 299.133261] ? __get_vm_area_node+0x2e5/0x3a0 [ 299.133277] ? vmx_set_cr4+0x7c0/0x7c0 [ 299.133303] __vmalloc_node_range+0x572/0x8d0 [ 299.133333] ? vfree_atomic+0xe0/0xe0 [ 299.133355] ? lock_downgrade+0x900/0x900 [ 299.142680] ? lock_release+0xa00/0xa00 [ 299.142699] ? kvm_vcpu_ioctl_set_cpuid+0x1d8/0xa00 [ 299.142718] vmalloc+0x6f/0x80 [ 299.142747] ? kvm_vcpu_ioctl_set_cpuid+0x1d8/0xa00 [ 299.142764] kvm_vcpu_ioctl_set_cpuid+0x1d8/0xa00 [ 299.142783] ? kvm_update_cpuid+0xbe0/0xbe0 [ 299.142807] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 299.142822] ? _copy_from_user+0xdf/0x150 [ 299.142852] kvm_arch_vcpu_ioctl+0x10d3/0x3b10 [ 299.151669] ? kvm_arch_vcpu_put+0x420/0x420 [ 299.151690] ? lock_unpin_lock+0x4a0/0x4a0 [ 299.151706] ? lock_is_held_type+0x210/0x210 [ 299.151746] ? mark_held_locks+0x130/0x130 [ 299.151761] ? print_usage_bug+0xc0/0xc0 [ 299.151778] ? check_preemption_disabled+0x48/0x280 [ 299.151798] ? print_usage_bug+0xc0/0xc0 [ 299.151817] ? print_usage_bug+0xc0/0xc0 [ 299.160186] ? kasan_check_read+0x11/0x20 [ 299.160214] ? __lock_acquire+0x62f/0x4c20 [ 299.160233] ? find_held_lock+0x36/0x1c0 [ 299.160266] ? mark_held_locks+0x130/0x130 [ 299.168572] ? print_usage_bug+0xc0/0xc0 [ 299.168612] ? debug_smp_processor_id+0x1c/0x20 [ 299.168628] ? perf_trace_lock+0x14d/0x7a0 [ 299.168647] ? print_usage_bug+0xc0/0xc0 [ 299.176771] ? lock_acquire+0x1ed/0x520 [ 299.176791] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 299.176817] ? lock_release+0xa00/0xa00 [ 299.176836] ? perf_trace_sched_process_exec+0x860/0x860 [ 299.185124] ? __lock_acquire+0x62f/0x4c20 [ 299.185159] ? __mutex_lock+0x85e/0x16f0 [ 299.185177] ? kvm_vcpu_ioctl+0x1e5/0x1150 [ 299.185203] ? mutex_lock_io_nested+0x1570/0x1570 [ 299.195053] ? __lock_acquire+0x62f/0x4c20 [ 299.195072] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.195091] ? check_preemption_disabled+0x48/0x280 [ 299.195129] ? lock_is_held_type+0x210/0x210 [ 299.195149] ? graph_lock+0x270/0x270 [ 299.195170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.205023] ? check_preemption_disabled+0x48/0x280 [ 299.205045] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.205064] ? check_preemption_disabled+0x48/0x280 [ 299.205094] ? debug_smp_processor_id+0x1c/0x20 [ 299.213806] ? perf_trace_lock+0x14d/0x7a0 [ 299.213827] ? lock_is_held_type+0x210/0x210 [ 299.213849] ? lock_is_held_type+0x210/0x210 [ 299.213865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 299.213883] ? check_preemption_disabled+0x48/0x280 [ 299.213898] ? _parse_integer+0x134/0x180 [ 299.213920] ? debug_smp_processor_id+0x1c/0x20 [ 299.213948] kvm_vcpu_ioctl+0x278/0x1150 [ 299.222918] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 299.222943] ? find_held_lock+0x36/0x1c0 [ 299.222972] ? __fget+0x4aa/0x740 [ 299.222991] ? lock_downgrade+0x900/0x900 [ 299.223008] ? check_preemption_disabled+0x48/0x280 [ 299.223032] ? kasan_check_read+0x11/0x20 [ 299.223048] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 299.223067] ? rcu_read_unlock_special+0x370/0x370 [ 299.231711] ? __fget+0x4d1/0x740 [ 299.231748] ? ksys_dup3+0x680/0x680 [ 299.231779] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 299.231805] ? kvm_uevent_notify_change.part.32+0x450/0x450 [ 299.231824] do_vfs_ioctl+0x1de/0x1790 [ 299.240898] ? ioctl_preallocate+0x300/0x300 [ 299.240917] ? __fget_light+0x2e9/0x430 [ 299.240936] ? fget_raw+0x20/0x20 [ 299.240955] ? __sb_end_write+0xd9/0x110 [ 299.240978] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 299.240995] ? fput+0x130/0x1a0 [ 299.241013] ? do_syscall_64+0x9a/0x820 [ 299.241032] ? do_syscall_64+0x9a/0x820 [ 299.249141] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 299.249162] ? security_file_ioctl+0x94/0xc0 [ 299.249184] ksys_ioctl+0xa9/0xd0 [ 299.249205] __x64_sys_ioctl+0x73/0xb0 [ 299.257576] do_syscall_64+0x1b9/0x820 [ 299.257594] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 299.257613] ? syscall_return_slowpath+0x5e0/0x5e0 [ 299.257633] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.265920] ? trace_hardirqs_on_caller+0x310/0x310 [ 299.265940] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 299.265959] ? prepare_exit_to_usermode+0x291/0x3b0 [ 299.265983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 299.274707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 299.274733] RIP: 0033:0x457679 [ 299.274752] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 299.274761] RSP: 002b:00007f2d4c193c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 299.287033] RAX: ffffffffffffffda RBX: 00007f2d4c193c90 RCX: 0000000000457679 [ 299.590843] RDX: 00000000200001c0 RSI: 000000004008ae8a RDI: 0000000000000005 [ 299.598109] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 299.605378] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2d4c1946d4 [ 299.612636] R13: 00000000004c05ca R14: 00000000004d1648 R15: 0000000000000006 [ 299.623080] Mem-Info: [ 299.625554] active_anon:127730 inactive_anon:1127 isolated_anon:0 [ 299.625554] active_file:12491 inactive_file:31896 isolated_file:0 [ 299.625554] unevictable:8192 dirty:212 writeback:0 unstable:0 [ 299.625554] slab_reclaimable:12690 slab_unreclaimable:106371 [ 299.625554] mapped:55356 shmem:245 pagetables:1345 bounce:0 [ 299.625554] free:1224253 free_pcp:953 free_cma:0 [ 299.660046] Node 0 active_anon:510920kB inactive_anon:4508kB active_file:49964kB inactive_file:127584kB unevictable:32768kB isolated(anon):0kB isolated(file):0kB mapped:221424kB dirty:848kB writeback:0kB shmem:980kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 487424kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 299.688898] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.715141] lowmem_reserve[]: 0 2816 6319 6319 [ 299.715168] Node 0 DMA32 free:2885308kB min:30040kB low:37548kB high:45056kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2886740kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1432kB local_pcp:1360kB free_cma:0kB [ 299.715216] lowmem_reserve[]: 0 0 3503 3503 [ 299.715234] Node 0 Normal free:1995692kB min:37376kB low:46720kB high:56064kB active_anon:510920kB inactive_anon:4508kB active_file:49964kB inactive_file:127584kB unevictable:32768kB writepending:848kB present:4718592kB managed:3587560kB mlocked:32768kB kernel_stack:7872kB pagetables:5380kB bounce:0kB free_pcp:2328kB local_pcp:1028kB free_cma:0kB [ 299.715265] lowmem_reserve[]: 0 0 0 0 [ 299.715281] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 299.749211] Node 0 DMA32: 3*4kB (M) 0*8kB 1*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 702*4096kB (M) = 2885308kB [ 299.785089] Node 0 Normal: 2097*4kB (UME) 2007*8kB (UME) 1465*16kB (UME) 966*32kB (UME) 198*64kB (UME) 71*128kB (UM) 8*256kB (UME) 15*512kB (UE) 5*1024kB (UME) 10*2048kB (UM) 454*4096kB (UM) = 1995468kB [ 299.802053] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 299.843461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 299.855655] 44637 total pagecache pages [ 299.860124] 0 pages in swap cache [ 299.864115] Swap cache stats: add 0, delete 0, find 0/0 [ 299.869593] Free swap = 0kB [ 299.873494] Total swap = 0kB [ 299.876619] 1965979 pages RAM [ 299.876630] 0 pages HighMem/MovableOnly [ 299.883830] 343427 pages reserved [ 299.887291] 0 pages cma reserved [ 300.051771] device bridge_slave_1 left promiscuous mode [ 300.057406] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.101878] device bridge_slave_0 left promiscuous mode [ 300.107380] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.176658] team0 (unregistering): Port device team_slave_1 removed [ 300.186996] team0 (unregistering): Port device team_slave_0 removed [ 300.197834] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 300.245554] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 300.316106] bond0 (unregistering): Released all slaves [ 300.597644] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.604206] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.611370] device bridge_slave_0 entered promiscuous mode [ 300.661244] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.667797] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.675665] device bridge_slave_1 entered promiscuous mode [ 300.722577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 300.770117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 300.911623] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 300.960230] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 301.185546] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 301.193106] team0: Port device team_slave_0 added [ 301.238665] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 301.246605] team0: Port device team_slave_1 added [ 301.292479] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 301.342740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 301.391492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 301.398633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.415550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.456351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 301.463520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.472058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 301.952455] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.958823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.965544] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.971949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.980064] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 302.274505] IPVS: ftp: loaded support on port[0] = 21 [ 302.737914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 304.361621] device bridge_slave_1 left promiscuous mode [ 304.367177] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.411782] device bridge_slave_0 left promiscuous mode [ 304.417232] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.922222] team0 (unregistering): Port device team_slave_1 removed [ 306.933157] team0 (unregistering): Port device team_slave_0 removed [ 306.943369] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 306.984935] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 307.073697] bond0 (unregistering): Released all slaves [ 307.276226] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.282828] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.290318] device bridge_slave_0 entered promiscuous mode [ 307.350835] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.358176] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.366204] device bridge_slave_1 entered promiscuous mode [ 307.413777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 307.507459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 307.765140] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 307.852331] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 308.191644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 308.199605] team0: Port device team_slave_0 added [ 308.260214] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 308.267769] team0: Port device team_slave_1 added [ 308.361335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 308.368218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 308.390544] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 308.441070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.449610] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 308.465657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 308.491833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 308.560840] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 308.568161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 308.591700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 308.642256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 308.649436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 308.665779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 308.771789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.995877] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 309.002467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 309.011510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 309.252253] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.474185] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.480582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.487338] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.493751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.501747] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 310.271499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 20:54:30 executing program 0: r0 = memfd_create(&(0x7f0000000080)="00006d31032b00", 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='a)B'], 0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000004, 0x11, r0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000000)={0x0, 0x6000, 0x0, 0x0, 0x0, 0x0}) 20:54:30 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhci\x00', 0x400, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000006c0)='./file0/file0\x00', 0x4) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x105) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x400800, 0x0) acct(&(0x7f0000000240)='./file0/file0\x00') mkdir(&(0x7f00000006c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x5004, 0x0) syz_mount_image$jfs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x80000, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000200)=0x8001, 0x4) mount$bpf(0x20000000, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x5890, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='mountinfo\x00') syz_mount_image$ceph(&(0x7f0000000380)='ceph\x00', &(0x7f0000000400)='./file0/file0\x00', 0x40, 0x6, &(0x7f0000000780)=[{&(0x7f0000000440)="8dc7768ee439090232d056df6c1e2d3f118dfd0eaa714e6f5891d19ce50f051affc21349a463482692cb78d6166190c7307838b9409a31fdd013cf04da24c0df7bcfea5c18059af5084e3568b2d4", 0x4e, 0xffff}, {&(0x7f00000004c0)="1c9c628c453394cf2cd0311a2a0ad9624ed946404ffbbcfaea87d78fdd1ebe057353cd0742ba8f66d82431f7055ddfe0e92f546c991bcf3eefebcb5b1a554f65ce32ec32045e03ce01312a16340b7f0dbc15fa90bf66d4d8f5d9f7f51c52f3efe97219077afb9e048b1cada16bfc3ebb25d35151d838a345bec2ccc10651a25ee4bf2de801a6cb2a130f50c018677a2551ee08b6ec40361cb4b13ce99a101b8b98190137f40abaa4a295572283e768e1f3c59820460cc1f474d4ce5d6d7eb145a0fb3c8327132fc6b1bb1e", 0xcb, 0xaf}, {&(0x7f00000005c0)="fe154ad5a05c0515a461cc24230987f1fc876d4cdb75745428b3ea02b003efe3a556834498e9e214aed9f13f81a738918d0ec06a49c43f82", 0x38, 0x6}, {&(0x7f0000000600)="232738c2aedce855d3203a5a3bb4b1a775900776397f45463bff63cd5da149bb5a6b91ff32b95bc94e70bce49768537e581151d3b81e3af50acc7d51cd244ecc36bb754087a76ab7cef83b5431faad0b894a21cf3a4864e3e3574b7b29d12de1", 0x60, 0x7}, {&(0x7f0000000680)="0d2a7abe236f1e5144fa04d0cc0c3ade0436c6f0745f0546bde2b9cbe75c0c", 0x1f, 0x4}, {&(0x7f0000000700)="2f12ede5f6b5d26a27878f8cf81a19565dd66dd091dbf4d52ebcd4efcc969055445a1289c1abbadeae442b7c7072ca4463b64dc5802b457fbdcccd737286118cf9b66c2197d8fb206f200c95fd505d82f2e5b451ad5919fdee54444ae61efd1dfec022004ef174d1d1606071f9e7e3f47151fe17feab3bff", 0x78, 0x2}], 0x0, &(0x7f0000000840)='mountinfo\x00') symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') pread64(r2, &(0x7f0000000ac0)=""/4096, 0x1000, 0x0) 20:54:30 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x958ebe89e18b50f0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000180)=0x14) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f00000001c0)=@ll={0x11, 0x8, r2, 0x1, 0x4, 0x6, @random="81c2d5611520"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="ab971976392cc35898f02db6a51900245a0704364a2218384d9445cd6e94724b4df8d95e7e9e3c04f65ddb04be4faf601e6e259b05735d65916966133e0f31a002af77a4863cba3e49b64f137224e1719cd5ba5316532c79185ca786b6bdd497cf032fa436220c290f671c41bef500ba1c749c2cafe9316ec6f07fd95b87e30ea89a007fe955719f6547579ee9784d88a4fc8ff616e2a21f276fb962d582991bf30ee8ea7ac676c0cda5ca488877489a6da36732e2220e062b9ca11d9e53e5720c769948babd2521b28a74e5302bdca26a89e4222338507cedbc5b2ffd7cc73d2248cf1dddbdc507333318cf09bfc5bf3040648114", 0xf5}, {&(0x7f0000000340)="c344af4776316cade749baac9bdd9b8550e8dec54ef933f03d579e07225688b92d0b24214daea2772e2e73e48f7cc7a998bf394f3132316a24139dabb19f67aa28ba414d566f1945ef0324bea7fab04fdf7f66fd6faebd33d9a25fc06983d32f9e04d981378179d3863e991d68fbb1392d2ae04fe0644424b6543147e9c2d70940eb6bee3c165a529fdc0772d23837f1ad5c5480fe6ef1d8ba6a4d836034f4079f305236", 0xa4}, {&(0x7f0000000400)="79a8100bac882fc6996c57e042ab2003e75fdd30d36f5de2045b905cb6519833278cf14a7aadb1263cc081fbcb1a554427ea5b273ae9f4d395a7e2200ea3a0b1e3766a0d0a83c6a6fd4ad1efe0aaa18c33182e4bcc1a16b788b4be7ad2847e40d8c2688499ab56237fdd7237123ece50fb7f4b356109367b9143316f55aeda143eca180d4f14248d13a7035cf96b3b89320112bd59bb7b91022e2ac0660a2bcbf284f99dd954299f3705cc0ee4f4213625d905e6a6807d5bc5707b4f4e5fc7a369cbf31998ed2cdb6c20ccbb7e9b37a6d4db8b75e43f8033", 0xd8}, {&(0x7f0000000500)="f74ee452b0921c8fb3afe626c6cd661cf0293deb7779c0c5770de5309dc95a136f9390300ff388320ed4bf1b723ebeef44c55a5edb744e626321ffb5a8dff513dd97ff7fb8d3eb8e8266f57c87f26b77d11aab51534f9b291ef963df20ec2d405a5752fd63edc1ebdb11905a9439ddfe810a", 0x72}], 0x4, &(0x7f00000005c0)=[{0x18, 0x11f, 0x100000000, "18"}, {0x18, 0x111, 0x1, "49cc19"}, {0x60, 0x0, 0x6, "1c7f90d66624405c711994ef1f2f572d1bb717a0808b7c7ec7af3a318765a07bcf02335a753379ab7ad0309b168182c53547fac925d0eafb32e97ab22b19cd637bb513851661cf1d6e93b281831c"}, {0x110, 0x117, 0xfffffffffffffd01, "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"}, {0xb8, 0x1ff, 0x7, "ef795bd083f9ceb90f607c898d0cd43d5943b66fb1e8c0a72b7ff10959f67e6dcc544c0742cd43938f8eef84d6bb978c5e68cf7c0a6c628b049d635af0f9981070a6e5b72fdcaf7fe0a534006addfd160cb3eda90dec28ccc04c50afbc4901254711acd7c0ffdbccbc92ef9aebe4ce00a3f9a87e65b9a3b18120cf642be1b815518ad5375e5066e42e57b8c22123aef48f5c4fd4b933ca0bb19efc93b46603e5465e9e"}, {0x78, 0x84, 0x8, "01a9e6a4e0aaf0cc90d0bdbf07283acf235e2b709da88f980d1694a9e3d8782ba2fe91464eac68874df949f8a7e2ddfcd0ef80844622b882a893f28c30db885237b68ab3634a611424d6001f3edf669db62b65892e7693c3cd68fd9414ea0f2cc9fef5bc247af5d9"}, {0x68, 0x10a, 0x3, "8f3f2eb38dbd62ea81185cbead01b73ea0f047939d3f483a2b48f5bfa95c52008bcf1ca3bf37edeb9d1ee40e21a00f073f3a3757025fc67899d7eb6e568b3c77afcb05444963c3ac5c5c2c2cc6771c6dc30b2aa65dcf807d"}, {0xa8, 0x0, 0x7, "4e159afa2a0ffb4a3dc2b816a04cacedf29757a0eebecd4544de3dc2a1c904b9942a3b648fb088a1b39628628cd29d8bc9c2e18b020e6134814b0197897347d810f4d5e64ee4f8336baef0a2f80718a51f8436e17eadef1d85d0ee683bac95d2338fbbae1638ed38ab334c5ca130211e365f6bac4ed4e01a6879b0a670b967c0ebe250e03e08b3ea7a493921d6846dce7510b5"}], 0x3e0}, 0x0) fchown(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 20:54:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x2, 0x0, [{}, {0x80000001}]}) 20:54:30 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000000)='oom_score_adj\x00') sendfile(r0, r2, &(0x7f0000000100)=0x5d, 0x79ffff00000011) [ 310.359969] ================================================================== [ 310.367537] BUG: KASAN: use-after-free in __list_del_entry_valid+0xf1/0x100 [ 310.374644] Read of size 8 at addr ffff8881bafefd70 by task kworker/1:2/3433 [ 310.381828] [ 310.383219] binder: 11919:11920 ioctl c018620b 20000000 returned -14 [ 310.383478] CPU: 1 PID: 3433 Comm: kworker/1:2 Not tainted 4.20.0-rc6-next-20181210+ #164 [ 310.383548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.407766] Workqueue: events_power_efficient neigh_periodic_work [ 310.414010] Call Trace: [ 310.416612] dump_stack+0x244/0x39d [ 310.420264] ? dump_stack_print_info.cold.1+0x20/0x20 [ 310.425520] ? printk+0xa7/0xcf [ 310.428821] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 310.433589] ? print_usage_bug+0xc0/0xc0 [ 310.437672] print_address_description.cold.4+0x9/0x1ff [ 310.443054] ? __list_del_entry_valid+0xf1/0x100 [ 310.447824] kasan_report.cold.5+0x1b/0x39 [ 310.452065] ? __list_del_entry_valid+0xf1/0x100 20:54:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 310.456834] ? __list_del_entry_valid+0xf1/0x100 [ 310.461609] __asan_report_load8_noabort+0x14/0x20 [ 310.466556] __list_del_entry_valid+0xf1/0x100 [ 310.471163] neigh_mark_dead+0x13b/0x410 [ 310.475240] ? neigh_change_state+0x680/0x680 [ 310.479759] ? kasan_check_write+0x14/0x20 [ 310.484007] ? do_raw_write_lock+0x14f/0x310 [ 310.488425] ? do_raw_read_unlock+0x70/0x70 [ 310.492775] ? __lock_is_held+0xb5/0x140 [ 310.496866] neigh_periodic_work+0x89a/0xc30 [ 310.501297] ? neigh_table_clear+0x390/0x390 20:54:30 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0xd15, 0xba6, 0x1}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0x93b, @mcast1, 0x6}}}, 0x84) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x10001}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={r4, 0x2, 0x30}, 0xc) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200, 0x0) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000001c0)={0x3, &(0x7f00000000c0)=[{0x7, 0x1, 0x5, 0xb2f}, {0x7, 0x3, 0x5, 0x6}, {0x6, 0x200, 0x2, 0xfc9c}]}, 0x10) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') sendfile(r0, r6, &(0x7f0000000340)=0x5d, 0x79ffff00000011) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x880, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'tunl0\x00', 0x4000}) [ 310.505723] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.511288] ? check_preemption_disabled+0x48/0x280 [ 310.516344] ? __lock_is_held+0xb5/0x140 [ 310.520430] process_one_work+0xc90/0x1c40 [ 310.520454] ? mark_held_locks+0x130/0x130 [ 310.520479] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 310.527803] binder: 11933:11934 ioctl c018620b 20000000 returned -14 [ 310.529050] ? __switch_to_asm+0x34/0x70 [ 310.529065] ? __switch_to_asm+0x34/0x70 [ 310.529086] ? __switch_to_asm+0x40/0x70 [ 310.540238] ? __switch_to_asm+0x34/0x70 [ 310.540251] ? __switch_to_asm+0x40/0x70 [ 310.540264] ? __switch_to_asm+0x34/0x70 [ 310.540282] ? __switch_to_asm+0x34/0x70 [ 310.568630] ? __switch_to_asm+0x40/0x70 [ 310.572694] ? __switch_to_asm+0x34/0x70 [ 310.572708] ? __switch_to_asm+0x40/0x70 [ 310.572721] ? __switch_to_asm+0x34/0x70 [ 310.572746] ? __switch_to_asm+0x40/0x70 [ 310.572760] ? __switch_to_asm+0x34/0x70 [ 310.572793] ? __sched_text_start+0x8/0x8 [ 310.597187] ? graph_lock+0x270/0x270 [ 310.601002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.605862] ? native_iret+0x7/0x7 [ 310.609420] ? error_exit+0xb/0x20 [ 310.612996] ? find_held_lock+0x36/0x1c0 [ 310.617086] ? lock_acquire+0x1ed/0x520 [ 310.621084] ? worker_thread+0x3e0/0x1390 [ 310.625289] ? kasan_check_write+0x14/0x20 [ 310.629541] ? do_raw_spin_lock+0x14f/0x350 [ 310.633878] ? __schedule+0x21e0/0x21e0 [ 310.637866] ? rwlock_bug.part.2+0x90/0x90 [ 310.642125] ? trace_hardirqs_on+0x310/0x310 [ 310.646569] worker_thread+0x17f/0x1390 [ 310.650552] ? preempt_notifier_register+0x200/0x200 [ 310.655682] ? process_one_work+0x1c40/0x1c40 [ 310.660185] ? __schedule+0xa49/0x21e0 [ 310.664081] ? kmem_cache_alloc_trace+0x154/0x740 [ 310.668947] ? __sched_text_start+0x8/0x8 [ 310.673127] ? __kthread_parkme+0xce/0x1a0 [ 310.677374] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 310.682484] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 310.687599] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 310.692196] ? trace_hardirqs_on+0xbd/0x310 [ 310.696527] ? kasan_check_read+0x11/0x20 [ 310.700683] ? __kthread_parkme+0xce/0x1a0 [ 310.704924] ? trace_hardirqs_off_caller+0x310/0x310 [ 310.710033] ? __schedule+0x21e0/0x21e0 [ 310.714019] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 310.719129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 310.724670] ? __kthread_parkme+0xfb/0x1a0 [ 310.728911] ? process_one_work+0x1c40/0x1c40 [ 310.733410] kthread+0x35a/0x440 [ 310.736784] ? kthread_stop+0x900/0x900 [ 310.740772] ret_from_fork+0x3a/0x50 [ 310.744502] [ 310.746127] Allocated by task 21: [ 310.749584] save_stack+0x43/0xd0 [ 310.753044] kasan_kmalloc+0xcb/0xd0 [ 310.756783] __kmalloc_node_track_caller+0x4d/0x70 [ 310.761777] __kmalloc_reserve.isra.38+0x41/0xe0 [ 310.766542] __alloc_skb+0x155/0x770 [ 310.770285] inet6_rt_notify+0x101/0x2c0 [ 310.774347] fib6_del+0xf1c/0x12e0 [ 310.777887] fib6_clean_node+0x44c/0x650 [ 310.781947] fib6_walk_continue+0x4b1/0x8e0 [ 310.786267] fib6_walk+0x95/0xf0 [ 310.789632] fib6_clean_tree+0x21c/0x420 [ 310.793694] __fib6_clean_all+0x235/0x440 [ 310.797862] fib6_clean_all+0x2a/0x40 [ 310.801662] rt6_sync_down_dev+0x17a/0x1b0 [ 310.805899] rt6_disable_ip+0x87/0x720 [ 310.809819] addrconf_ifdown+0x168/0x1650 [ 310.813973] addrconf_notify+0x6de/0x2770 [ 310.818124] notifier_call_chain+0x17e/0x380 [ 310.822533] raw_notifier_call_chain+0x2d/0x40 [ 310.827132] call_netdevice_notifiers_info+0x3f/0x90 [ 310.832241] dev_close_many+0x443/0x8b0 [ 310.836221] rollback_registered_many+0x543/0x1260 [ 310.841154] unregister_netdevice_many+0xfa/0x4c0 [ 310.845997] default_device_exit_batch+0x43a/0x540 [ 310.850931] ops_exit_list.isra.5+0x105/0x160 [ 310.855430] cleanup_net+0x555/0xb10 [ 310.859154] process_one_work+0xc90/0x1c40 [ 310.863391] worker_thread+0x17f/0x1390 [ 310.867367] kthread+0x35a/0x440 [ 310.870745] ret_from_fork+0x3a/0x50 [ 310.874457] [ 310.876087] Freed by task 21: [ 310.879195] save_stack+0x43/0xd0 [ 310.882649] __kasan_slab_free+0x102/0x150 [ 310.886881] kasan_slab_free+0xe/0x10 [ 310.890681] kfree+0xcf/0x230 [ 310.893787] skb_free_head+0x99/0xc0 [ 310.897504] skb_release_data+0x70c/0x9a0 [ 310.901654] skb_release_all+0x4a/0x60 [ 310.905559] consume_skb+0x1ae/0x570 [ 310.909335] netlink_broadcast_filtered+0x6e6/0x1680 [ 310.914441] nlmsg_notify+0xa0/0x1a0 [ 310.918156] rtnl_notify+0xce/0xf0 [ 310.921701] inet6_rt_notify+0x204/0x2c0 [ 310.925774] fib6_del+0xf1c/0x12e0 [ 310.929319] fib6_clean_node+0x44c/0x650 [ 310.933383] fib6_walk_continue+0x4b1/0x8e0 [ 310.937702] fib6_walk+0x95/0xf0 [ 310.941085] fib6_clean_tree+0x21c/0x420 [ 310.945144] __fib6_clean_all+0x235/0x440 [ 310.949294] fib6_clean_all+0x2a/0x40 [ 310.953098] rt6_sync_down_dev+0x17a/0x1b0 [ 310.957330] rt6_disable_ip+0x87/0x720 [ 310.961226] addrconf_ifdown+0x168/0x1650 [ 310.965375] addrconf_notify+0x6de/0x2770 [ 310.969525] notifier_call_chain+0x17e/0x380 [ 310.973936] raw_notifier_call_chain+0x2d/0x40 [ 310.978523] call_netdevice_notifiers_info+0x3f/0x90 [ 310.983632] dev_close_many+0x443/0x8b0 [ 310.987609] rollback_registered_many+0x543/0x1260 [ 310.992544] unregister_netdevice_many+0xfa/0x4c0 [ 310.997387] default_device_exit_batch+0x43a/0x540 [ 311.002324] ops_exit_list.isra.5+0x105/0x160 [ 311.006822] cleanup_net+0x555/0xb10 [ 311.010538] process_one_work+0xc90/0x1c40 [ 311.014774] worker_thread+0x17f/0x1390 [ 311.018755] kthread+0x35a/0x440 [ 311.022127] ret_from_fork+0x3a/0x50 [ 311.025834] [ 311.027462] The buggy address belongs to the object at ffff8881bafefb00 [ 311.027462] which belongs to the cache kmalloc-1k of size 1024 [ 311.040133] The buggy address is located 624 bytes inside of [ 311.040133] 1024-byte region [ffff8881bafefb00, ffff8881bafeff00) [ 311.052090] The buggy address belongs to the page: [ 311.057024] page:ffffea0006ebfb80 count:1 mapcount:0 mapping:ffff8881da800ac0 index:0xffff8881bafefb00 compound_mapcount: 0 [ 311.068311] flags: 0x2fffc0000010200(slab|head) [ 311.072988] raw: 02fffc0000010200 ffffea0006f1c108 ffffea0006f7a188 ffff8881da800ac0 [ 311.080877] raw: ffff8881bafefb00 ffff8881bafee000 0000000100000005 0000000000000000 [ 311.088755] page dumped because: kasan: bad access detected [ 311.094458] [ 311.096082] Memory state around the buggy address: [ 311.101030] ffff8881bafefc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.108392] ffff8881bafefc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.115758] >ffff8881bafefd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.123111] ^ [ 311.130142] ffff8881bafefd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.137508] ffff8881bafefe00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 311.144865] ================================================================== [ 311.152220] Disabling lock debugging due to kernel taint [ 311.157795] Kernel panic - not syncing: panic_on_warn set ... [ 311.163701] CPU: 1 PID: 3433 Comm: kworker/1:2 Tainted: G B 4.20.0-rc6-next-20181210+ #164 [ 311.173406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.182775] Workqueue: events_power_efficient neigh_periodic_work [ 311.189003] Call Trace: [ 311.191594] dump_stack+0x244/0x39d [ 311.195223] ? dump_stack_print_info.cold.1+0x20/0x20 [ 311.200418] ? __list_del_entry_valid+0x10/0x100 [ 311.205228] panic+0x2ad/0x632 [ 311.208422] ? add_taint.cold.5+0x16/0x16 [ 311.212575] ? trace_hardirqs_on+0xb4/0x310 [ 311.216932] ? __list_del_entry_valid+0xf1/0x100 [ 311.221696] end_report+0x47/0x4f [ 311.225153] kasan_report.cold.5+0xe/0x39 [ 311.229304] ? __list_del_entry_valid+0xf1/0x100 [ 311.234065] ? __list_del_entry_valid+0xf1/0x100 [ 311.238825] __asan_report_load8_noabort+0x14/0x20 [ 311.243760] __list_del_entry_valid+0xf1/0x100 [ 311.248347] neigh_mark_dead+0x13b/0x410 [ 311.252410] ? neigh_change_state+0x680/0x680 [ 311.256910] ? kasan_check_write+0x14/0x20 [ 311.261142] ? do_raw_write_lock+0x14f/0x310 [ 311.265550] ? do_raw_read_unlock+0x70/0x70 [ 311.269872] ? __lock_is_held+0xb5/0x140 [ 311.273940] neigh_periodic_work+0x89a/0xc30 [ 311.278353] ? neigh_table_clear+0x390/0x390 [ 311.282766] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.288305] ? check_preemption_disabled+0x48/0x280 [ 311.293328] ? __lock_is_held+0xb5/0x140 [ 311.297395] process_one_work+0xc90/0x1c40 [ 311.301627] ? mark_held_locks+0x130/0x130 [ 311.305871] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 311.310543] ? __switch_to_asm+0x34/0x70 [ 311.314636] ? __switch_to_asm+0x34/0x70 [ 311.318694] ? __switch_to_asm+0x40/0x70 [ 311.322762] ? __switch_to_asm+0x34/0x70 [ 311.326818] ? __switch_to_asm+0x40/0x70 [ 311.330877] ? __switch_to_asm+0x34/0x70 [ 311.334938] ? __switch_to_asm+0x34/0x70 [ 311.338997] ? __switch_to_asm+0x40/0x70 [ 311.343053] ? __switch_to_asm+0x34/0x70 [ 311.347110] ? __switch_to_asm+0x40/0x70 [ 311.351168] ? __switch_to_asm+0x34/0x70 [ 311.355226] ? __switch_to_asm+0x40/0x70 [ 311.359284] ? __switch_to_asm+0x34/0x70 [ 311.363356] ? __sched_text_start+0x8/0x8 [ 311.367516] ? graph_lock+0x270/0x270 [ 311.371316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.376157] ? native_iret+0x7/0x7 [ 311.379697] ? error_exit+0xb/0x20 [ 311.383245] ? find_held_lock+0x36/0x1c0 [ 311.387312] ? lock_acquire+0x1ed/0x520 [ 311.391281] ? worker_thread+0x3e0/0x1390 [ 311.395436] ? kasan_check_write+0x14/0x20 [ 311.399666] ? do_raw_spin_lock+0x14f/0x350 [ 311.403984] ? __schedule+0x21e0/0x21e0 [ 311.408061] ? rwlock_bug.part.2+0x90/0x90 [ 311.412295] ? trace_hardirqs_on+0x310/0x310 [ 311.416712] worker_thread+0x17f/0x1390 [ 311.420693] ? preempt_notifier_register+0x200/0x200 [ 311.425805] ? process_one_work+0x1c40/0x1c40 [ 311.430319] ? __schedule+0xa49/0x21e0 [ 311.434206] ? kmem_cache_alloc_trace+0x154/0x740 [ 311.439051] ? __sched_text_start+0x8/0x8 [ 311.443214] ? __kthread_parkme+0xce/0x1a0 [ 311.447446] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 311.452583] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 311.457693] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 311.462274] ? trace_hardirqs_on+0xbd/0x310 [ 311.466593] ? kasan_check_read+0x11/0x20 [ 311.470772] ? __kthread_parkme+0xce/0x1a0 [ 311.475006] ? trace_hardirqs_off_caller+0x310/0x310 [ 311.480110] ? __schedule+0x21e0/0x21e0 [ 311.484085] ? _raw_spin_unlock_irqrestore+0x6d/0xd0 [ 311.489187] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.494725] ? __kthread_parkme+0xfb/0x1a0 [ 311.498969] ? process_one_work+0x1c40/0x1c40 [ 311.503462] kthread+0x35a/0x440 [ 311.506831] ? kthread_stop+0x900/0x900 [ 311.510806] ret_from_fork+0x3a/0x50 [ 311.515484] Kernel Offset: disabled [ 311.519126] Rebooting in 86400 seconds..