] vfs_write+0x198/0x500 [ 716.864400] SyS_write+0xfd/0x230 [ 716.867861] ? SyS_read+0x230/0x230 [ 716.871508] ? do_syscall_64+0x53/0x640 [ 716.875493] ? SyS_read+0x230/0x230 [ 716.879130] do_syscall_64+0x1e8/0x640 [ 716.883908] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 716.888776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 716.895906] RIP: 0033:0x45c6c9 [ 716.899220] RSP: 002b:00007fa66c115c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 716.906973] RAX: ffffffffffffffda RBX: 00007fa66c1166d4 RCX: 000000000045c6c9 [ 716.914345] RDX: 00000000000000fc RSI: 0000000020000180 RDI: 0000000000000003 20:55:39 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(0xffffffffffffffff, r6, 0x0, 0x2008000fffffffe) [ 716.921632] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 716.929043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 716.936454] R13: 0000000000000c1d R14: 00000000004c9f1a R15: 0000000000000001 20:55:39 executing program 4 (fault-call:1 fault-nth:2): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) [ 716.964071] hfsplus: unable to change nls mapping [ 716.989207] hfsplus: unable to parse mount options 20:55:39 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:39 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x8000000d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 717.153005] FAULT_INJECTION: forcing a failure. [ 717.153005] name failslab, interval 1, probability 0, space 0, times 0 [ 717.177704] CPU: 0 PID: 28596 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 717.185633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.194998] Call Trace: [ 717.197605] dump_stack+0x142/0x197 [ 717.201255] should_fail.cold+0x10f/0x159 [ 717.205431] should_failslab+0xdb/0x130 [ 717.209741] kmem_cache_alloc+0x47/0x780 [ 717.213818] ? lock_acquire+0x16f/0x430 [ 717.217799] ? check_preemption_disabled+0x3c/0x250 [ 717.222949] skb_clone+0x129/0x320 [ 717.226520] netlink_deliver_tap+0x681/0x8f0 [ 717.230947] netlink_unicast+0x49d/0x650 [ 717.235029] ? netlink_attachskb+0x6a0/0x6a0 [ 717.239572] ? security_netlink_send+0x81/0xb0 [ 717.244168] netlink_sendmsg+0x7c4/0xc60 [ 717.248385] ? netlink_unicast+0x650/0x650 [ 717.252661] ? security_socket_sendmsg+0x89/0xb0 [ 717.257431] ? netlink_unicast+0x650/0x650 [ 717.261833] sock_sendmsg+0xce/0x110 [ 717.265699] sock_write_iter+0x25b/0x3b0 [ 717.269801] ? sock_sendmsg+0x110/0x110 [ 717.273793] ? iov_iter_init+0xaf/0x1d0 [ 717.277775] __vfs_write+0x4a7/0x6b0 [ 717.281619] ? selinux_file_open+0x420/0x420 [ 717.286040] ? kernel_read+0x120/0x120 [ 717.289947] ? rw_verify_area+0xea/0x2b0 [ 717.294020] vfs_write+0x198/0x500 [ 717.297612] SyS_write+0xfd/0x230 [ 717.301071] ? SyS_read+0x230/0x230 [ 717.305679] ? do_syscall_64+0x53/0x640 [ 717.309668] ? SyS_read+0x230/0x230 [ 717.313308] do_syscall_64+0x1e8/0x640 [ 717.317201] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 717.322105] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 717.327315] RIP: 0033:0x45c6c9 [ 717.330509] RSP: 002b:00007fa66c115c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 717.338222] RAX: ffffffffffffffda RBX: 00007fa66c1166d4 RCX: 000000000045c6c9 [ 717.345500] RDX: 00000000000000fc RSI: 0000000020000180 RDI: 0000000000000003 20:55:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:40 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:40 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x3, 0x3, 0x4, 0x70000, 0x5, {0x0, 0x7530}, {0x5, 0xc, 0x4, 0x81, 0x0, 0x7f, "15c38391"}, 0x5, 0x1, @offset=0x1, 0x22c, 0x0, 0xffffffffffffffff}) ioctl$SG_GET_VERSION_NUM(r3, 0x2282, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 717.352772] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 717.360144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 717.367423] R13: 0000000000000c1d R14: 00000000004c9f1a R15: 0000000000000002 [ 717.376150] audit: type=1800 audit(1581972940.045:1027): pid=28610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18195 res=0 20:55:40 executing program 4 (fault-call:1 fault-nth:3): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) 20:55:40 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:40 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2b, 'io'}]}, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000100)={0x20000016}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 717.725658] hfsplus: unable to change nls mapping [ 717.736221] hfsplus: unable to parse mount options [ 717.738758] FAULT_INJECTION: forcing a failure. [ 717.738758] name failslab, interval 1, probability 0, space 0, times 0 [ 717.800133] CPU: 1 PID: 28623 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 717.808226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.817679] Call Trace: [ 717.820291] dump_stack+0x142/0x197 [ 717.823941] should_fail.cold+0x10f/0x159 [ 717.828108] should_failslab+0xdb/0x130 [ 717.832094] kmem_cache_alloc_trace+0x2e9/0x790 [ 717.836828] ? cred_has_capability+0x142/0x290 [ 717.841443] ip6addrlbl_add+0x754/0xb60 [ 717.845435] ip6addrlbl_newdel+0x6dc/0x820 [ 717.849673] ? ip6addrlbl_net_init+0x130/0x130 [ 717.854300] ? ip6addrlbl_net_init+0x130/0x130 [ 717.858893] rtnetlink_rcv_msg+0x66b/0xb70 [ 717.863258] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 717.867938] ? netlink_deliver_tap+0x93/0x8f0 [ 717.872462] netlink_rcv_skb+0x14f/0x3c0 [ 717.876654] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 717.881249] ? lock_downgrade+0x740/0x740 [ 717.885402] ? netlink_ack+0x9a0/0x9a0 [ 717.889298] ? netlink_deliver_tap+0xba/0x8f0 [ 717.893808] rtnetlink_rcv+0x1d/0x30 [ 717.897637] netlink_unicast+0x44d/0x650 [ 717.901714] ? netlink_attachskb+0x6a0/0x6a0 [ 717.906128] ? security_netlink_send+0x81/0xb0 [ 717.910809] netlink_sendmsg+0x7c4/0xc60 [ 717.914888] ? netlink_unicast+0x650/0x650 [ 717.919133] ? security_socket_sendmsg+0x89/0xb0 [ 717.923902] ? netlink_unicast+0x650/0x650 [ 717.928260] sock_sendmsg+0xce/0x110 [ 717.931987] sock_write_iter+0x25b/0x3b0 [ 717.936056] ? sock_sendmsg+0x110/0x110 [ 717.940046] ? iov_iter_init+0xaf/0x1d0 [ 717.944033] __vfs_write+0x4a7/0x6b0 [ 717.947927] ? selinux_file_open+0x420/0x420 [ 717.952349] ? kernel_read+0x120/0x120 [ 717.956260] ? rw_verify_area+0xea/0x2b0 [ 717.960335] vfs_write+0x198/0x500 [ 717.964030] SyS_write+0xfd/0x230 [ 717.967493] ? SyS_read+0x230/0x230 [ 717.971127] ? do_syscall_64+0x53/0x640 [ 717.975113] ? SyS_read+0x230/0x230 [ 717.978837] do_syscall_64+0x1e8/0x640 [ 717.982932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 717.988155] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 717.993345] RIP: 0033:0x45c6c9 20:55:40 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 717.996536] RSP: 002b:00007fa66c115c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.005725] RAX: ffffffffffffffda RBX: 00007fa66c1166d4 RCX: 000000000045c6c9 [ 718.013000] RDX: 00000000000000fc RSI: 0000000020000180 RDI: 0000000000000003 [ 718.020491] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 718.027764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 718.035279] R13: 0000000000000c1d R14: 00000000004c9f1a R15: 0000000000000003 [ 718.191216] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=virtio,', {[{@uname={'uname', 0x3d, ':&keyring&}wlan1keyringGPL[ppp0user#'}}, {@version_9p2000='version=9p2000'}, {@cache_loose='cache=loose'}], [{@subj_role={'subj_role'}}, {@audit='audit'}]}}) syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 20:55:41 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(0xffffffffffffffff, r6, 0x0, 0x2008000fffffffe) 20:55:41 executing program 4 (fault-call:1 fault-nth:4): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) 20:55:41 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = dup(0xffffffffffffffff) close(r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x2000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:41 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 718.641181] FAULT_INJECTION: forcing a failure. [ 718.641181] name failslab, interval 1, probability 0, space 0, times 0 [ 718.677335] CPU: 0 PID: 28652 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 718.685290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.694660] Call Trace: [ 718.697267] dump_stack+0x142/0x197 [ 718.701069] should_fail.cold+0x10f/0x159 [ 718.705262] should_failslab+0xdb/0x130 [ 718.709251] kmem_cache_alloc_node+0x287/0x780 [ 718.713954] ? ip6addrlbl_net_init+0x130/0x130 [ 718.718566] __alloc_skb+0x9c/0x500 [ 718.722204] ? skb_trim+0x180/0x180 [ 718.725845] ? rtnetlink_rcv_msg+0x3fb/0xb70 [ 718.730269] netlink_ack+0x21c/0x9a0 [ 718.734126] ? netlink_sendmsg+0xc60/0xc60 20:55:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='stat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 718.738506] netlink_rcv_skb+0x2fc/0x3c0 [ 718.742632] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 718.747234] ? netlink_ack+0x9a0/0x9a0 [ 718.751293] ? netlink_deliver_tap+0xba/0x8f0 [ 718.755808] rtnetlink_rcv+0x1d/0x30 [ 718.759539] netlink_unicast+0x44d/0x650 [ 718.763626] ? netlink_attachskb+0x6a0/0x6a0 [ 718.768094] ? security_netlink_send+0x81/0xb0 [ 718.772716] netlink_sendmsg+0x7c4/0xc60 [ 718.776798] ? netlink_unicast+0x650/0x650 [ 718.781053] ? security_socket_sendmsg+0x89/0xb0 [ 718.785830] ? netlink_unicast+0x650/0x650 [ 718.790081] sock_sendmsg+0xce/0x110 [ 718.793931] sock_write_iter+0x25b/0x3b0 [ 718.798007] ? sock_sendmsg+0x110/0x110 [ 718.802002] ? iov_iter_init+0xaf/0x1d0 [ 718.806013] __vfs_write+0x4a7/0x6b0 [ 718.809741] ? selinux_file_open+0x420/0x420 [ 718.814164] ? kernel_read+0x120/0x120 [ 718.818083] ? rw_verify_area+0xea/0x2b0 [ 718.821403] audit: type=1800 audit(1581972941.545:1028): pid=28668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18482 res=0 [ 718.822149] vfs_write+0x198/0x500 [ 718.822164] SyS_write+0xfd/0x230 [ 718.822175] ? SyS_read+0x230/0x230 [ 718.856216] ? do_syscall_64+0x53/0x640 [ 718.860202] ? SyS_read+0x230/0x230 [ 718.863841] do_syscall_64+0x1e8/0x640 [ 718.867737] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 718.872607] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 718.877805] RIP: 0033:0x45c6c9 [ 718.881106] RSP: 002b:00007fa66c115c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 718.888828] RAX: ffffffffffffffda RBX: 00007fa66c1166d4 RCX: 000000000045c6c9 [ 718.896209] RDX: 00000000000000fc RSI: 0000000020000180 RDI: 0000000000000003 [ 718.903502] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 718.910836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 718.918133] R13: 0000000000000c1d R14: 00000000004c9f1a R15: 0000000000000004 20:55:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x1) syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r0 = gettid() tkill(r0, 0x1000000000016) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, r0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 20:55:41 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:41 executing program 4 (fault-call:1 fault-nth:5): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) 20:55:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:41 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x210000, 0x0) ioctl$MON_IOCG_STATS(r4, 0x80089203, &(0x7f00000001c0)) r5 = open(&(0x7f0000000180)='./bus\x00', 0x8282, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="256d9b727920000043686b043fe943fec063fcf7f5ef3d6caaf91dc89f15242248501a80f1895f2b170ad29d02bbb9ada99c2df3f3c972c79def60ad7858c53b0dea4a7c384eca5169020000000000005f45426e"], 0x8) setsockopt$inet6_dccp_int(r3, 0x21, 0x4, &(0x7f0000000200)=0xdb, 0x4) sendfile(r3, 0xffffffffffffffff, 0x0, 0x4000000000010046) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f00000002c0)=0x1e) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000140)=0x2d) [ 719.053560] FAULT_INJECTION: forcing a failure. [ 719.053560] name failslab, interval 1, probability 0, space 0, times 0 [ 719.066778] CPU: 0 PID: 28680 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 719.074806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.084293] Call Trace: [ 719.086932] dump_stack+0x142/0x197 [ 719.090703] should_fail.cold+0x10f/0x159 [ 719.094872] should_failslab+0xdb/0x130 [ 719.098882] kmem_cache_alloc_node_trace+0x280/0x770 [ 719.104088] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 719.109554] __kmalloc_node_track_caller+0x3d/0x80 [ 719.114499] __kmalloc_reserve.isra.0+0x40/0xe0 [ 719.119203] __alloc_skb+0xcf/0x500 [ 719.122832] ? skb_trim+0x180/0x180 [ 719.126658] ? rtnetlink_rcv_msg+0x3fb/0xb70 [ 719.131081] netlink_ack+0x21c/0x9a0 [ 719.134802] ? netlink_sendmsg+0xc60/0xc60 [ 719.139036] netlink_rcv_skb+0x2fc/0x3c0 [ 719.143606] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 719.148200] ? netlink_ack+0x9a0/0x9a0 [ 719.152091] ? netlink_deliver_tap+0xba/0x8f0 [ 719.156607] rtnetlink_rcv+0x1d/0x30 [ 719.160328] netlink_unicast+0x44d/0x650 [ 719.162603] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 719.164431] ? netlink_attachskb+0x6a0/0x6a0 [ 719.164448] ? security_netlink_send+0x81/0xb0 [ 719.164461] netlink_sendmsg+0x7c4/0xc60 [ 719.164476] ? netlink_unicast+0x650/0x650 [ 719.190663] ? security_socket_sendmsg+0x89/0xb0 [ 719.195437] ? netlink_unicast+0x650/0x650 [ 719.199722] sock_sendmsg+0xce/0x110 [ 719.203447] sock_write_iter+0x25b/0x3b0 [ 719.207701] ? sock_sendmsg+0x110/0x110 [ 719.211806] ? iov_iter_init+0xaf/0x1d0 [ 719.215792] __vfs_write+0x4a7/0x6b0 [ 719.219516] ? selinux_file_open+0x420/0x420 [ 719.223936] ? kernel_read+0x120/0x120 [ 719.227848] ? rw_verify_area+0xea/0x2b0 [ 719.232106] vfs_write+0x198/0x500 [ 719.235661] SyS_write+0xfd/0x230 [ 719.239126] ? SyS_read+0x230/0x230 [ 719.242763] ? do_syscall_64+0x53/0x640 [ 719.246747] ? SyS_read+0x230/0x230 [ 719.250491] do_syscall_64+0x1e8/0x640 [ 719.254413] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 719.259277] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 719.264471] RIP: 0033:0x45c6c9 [ 719.267761] RSP: 002b:00007fa66c115c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 719.275614] RAX: ffffffffffffffda RBX: 00007fa66c1166d4 RCX: 000000000045c6c9 [ 719.282897] RDX: 00000000000000fc RSI: 0000000020000180 RDI: 0000000000000003 [ 719.290410] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 20:55:42 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 719.297802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 719.305086] R13: 0000000000000c1d R14: 00000000004c9f1a R15: 0000000000000005 20:55:42 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) creat(&(0x7f0000000080)='./file0\x00', 0x1f) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x123000, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r6, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r8, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)='fuse\x00', 0x86a004, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1e00}}], [{@pcr={'pcr', 0x3d, 0x15}}, {@euid_eq={'euid', 0x3d, r8}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:42 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(0xffffffffffffffff, r6, 0x0, 0x2008000fffffffe) 20:55:42 executing program 4 (fault-call:1 fault-nth:6): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) [ 719.427403] selinux_nlmsg_perm: 986 callbacks suppressed [ 719.427412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.451356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 20:55:42 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') getsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = socket$caif_stream(0x25, 0x1, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:42 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 719.487301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.534099] FAULT_INJECTION: forcing a failure. [ 719.534099] name failslab, interval 1, probability 0, space 0, times 0 [ 719.546376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.563238] CPU: 0 PID: 28701 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 719.571400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.580785] Call Trace: [ 719.583395] dump_stack+0x142/0x197 [ 719.587221] should_fail.cold+0x10f/0x159 [ 719.591396] should_failslab+0xdb/0x130 [ 719.595472] kmem_cache_alloc+0x47/0x780 [ 719.599546] ? lock_acquire+0x16f/0x430 [ 719.599558] ? check_preemption_disabled+0x3c/0x250 [ 719.599571] skb_clone+0x129/0x320 [ 719.599584] netlink_deliver_tap+0x681/0x8f0 [ 719.605577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.608827] ? sock_ops_is_valid_access+0x70/0x70 20:55:42 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 719.608845] __netlink_sendskb+0x49/0xa0 [ 719.608858] netlink_unicast+0x524/0x650 [ 719.608872] ? netlink_attachskb+0x6a0/0x6a0 [ 719.608886] netlink_ack+0x51d/0x9a0 [ 719.614848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.616836] ? netlink_sendmsg+0xc60/0xc60 [ 719.616855] netlink_rcv_skb+0x2fc/0x3c0 [ 719.616868] ? rtnl_bridge_getlink+0x7a0/0x7a0 [ 719.616885] ? netlink_ack+0x9a0/0x9a0 [ 719.631320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.633777] ? netlink_deliver_tap+0xba/0x8f0 [ 719.633797] rtnetlink_rcv+0x1d/0x30 [ 719.633807] netlink_unicast+0x44d/0x650 [ 719.633821] ? netlink_attachskb+0x6a0/0x6a0 [ 719.667036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.670426] ? security_netlink_send+0x81/0xb0 [ 719.670442] netlink_sendmsg+0x7c4/0xc60 [ 719.670457] ? netlink_unicast+0x650/0x650 [ 719.670472] ? security_socket_sendmsg+0x89/0xb0 [ 719.679150] audit: type=1800 audit(1581972942.435:1029): pid=28711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18355 res=0 [ 719.691159] ? netlink_unicast+0x650/0x650 [ 719.691171] sock_sendmsg+0xce/0x110 [ 719.691183] sock_write_iter+0x25b/0x3b0 [ 719.691193] ? sock_sendmsg+0x110/0x110 [ 719.691213] ? iov_iter_init+0xaf/0x1d0 [ 719.691226] __vfs_write+0x4a7/0x6b0 [ 719.691240] ? selinux_file_open+0x420/0x420 [ 719.701289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.703517] ? kernel_read+0x120/0x120 [ 719.703543] ? rw_verify_area+0xea/0x2b0 [ 719.703555] vfs_write+0x198/0x500 [ 719.703567] SyS_write+0xfd/0x230 [ 719.703577] ? SyS_read+0x230/0x230 [ 719.703588] ? do_syscall_64+0x53/0x640 [ 719.703597] ? SyS_read+0x230/0x230 [ 719.703607] do_syscall_64+0x1e8/0x640 [ 719.703616] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 719.703633] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 719.709493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28685 comm=syz-executor.1 [ 719.720089] RIP: 0033:0x45c6c9 [ 719.720095] RSP: 002b:00007fa66c115c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 719.720105] RAX: ffffffffffffffda RBX: 00007fa66c1166d4 RCX: 000000000045c6c9 [ 719.720110] RDX: 00000000000000fc RSI: 0000000020000180 RDI: 0000000000000003 [ 719.720116] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 719.720121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 719.720127] R13: 0000000000000c1d R14: 00000000004c9f1a R15: 0000000000000006 20:55:44 executing program 4 (fault-call:1 fault-nth:7): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) 20:55:44 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:44 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0xff}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xb840cc3497a46c01}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) close(r6) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002019}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x101200, 0x0) 20:55:44 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) 20:55:44 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:44 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x0, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:44 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:44 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) connect(r2, &(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x5, 0x3, 0x3, 0x1, '\x00', 0x4}, 0x1, [0x2, 0x4, 0x4, 0xffff, 0xfa87a5f800000000, 0x9, 0x6, 0xfff, 0x7fffffff, 0x8, 0x7f, 0x4, 0x10001, 0x3, 0x6, 0x0, 0xffffffff, 0x20, 0x5, 0x7, 0x8, 0x8, 0x5, 0x2, 0x2, 0x1f, 0x10001, 0xffffffffffffffff, 0x84, 0x3ff, 0x401, 0x0, 0x1, 0x200, 0x4, 0x3, 0x0, 0x0, 0x4, 0x9, 0x7, 0x7ff, 0x5, 0x200, 0x9, 0xdebf, 0x8001, 0x0, 0x2, 0x1, 0xffff, 0xffffffffffffff7f, 0x7, 0x80000000, 0x297c, 0x7, 0x0, 0x7ff, 0xbb, 0x4dd2, 0x0, 0x80, 0x3, 0x1, 0x2692, 0x1, 0x9, 0xffffffffffffffc1, 0x10000, 0x4, 0x7fff, 0x1, 0x1f, 0x6, 0x4, 0xfffffffffffffff7, 0x321b, 0x2, 0x3, 0xff, 0x6, 0x8, 0x7f, 0x7, 0x8, 0x80, 0x6, 0x58f60000000000, 0x8001, 0x800, 0x1, 0x7, 0xba, 0x1, 0x3, 0x100000000, 0x598, 0x9, 0x3f, 0x959b, 0x5f4074ab, 0x100000000, 0x8, 0x8, 0x2, 0x5a, 0x308, 0x401, 0xfffffffffffffeff, 0xe68, 0x0, 0x2, 0x7, 0x9900000000000000, 0x6, 0xffffffffffffff00, 0x5, 0x836, 0x0, 0x7, 0x7ff, 0x1ff, 0x7fff, 0x0, 0x398, 0x6, 0x960d, 0xffffffffffffff1a]}) [ 722.064628] audit: type=1800 audit(1581972944.935:1030): pid=28737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16969 res=0 20:55:45 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}, 0x20}], 0xa, 0x40000042, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10043000}, 0xc, &(0x7f0000000940)={&(0x7f0000000780)={0x1ac, 0x1, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFQA_CT={0x94, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x0, 0x6}}]}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x800, 0x8, 0x0]}, @CTA_NAT_SRC={0x4}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFQA_PAYLOAD={0xea, 0xa, "fae548120eb120d16b675bff1d6987b22f416438524bdcec30c2f25b1c903c4aaa9fa40cae5d8d0f4d8b4cea2df268f585938ac8ed33e5993a7640ed8f6924455d8591ee0ab0e0ac1f41e1319565c07797d46397983ff601591ac0967e2a8cbbdbd6d31204e8d475353ed4d143fff7468defb7452a8943f4f7d1d2af3bef60be2e6978bbe6acc57fa69bb185858e6f069cb7b015206b6e37334eae3d6201794546a07fba75bedb008c8ac043a9c089f66fbf1b36d56ec475eef74ee9ace08a5eaba08f9a425fc02d50cfcc96582328b09ff7842ec24d3dd5b95a5b8639447a063f2f10137604"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r2 = gettid() write$USERIO_CMD_REGISTER(r1, &(0x7f0000000480)={0x0, 0x2}, 0x2) tkill(r2, 0x1000000000016) r3 = mq_open(&(0x7f00000000c0)='#*selfvboxnet0-\\trusted\x00', 0x0, 0x2, &(0x7f0000000100)={0x3, 0x62e, 0xdb, 0x80000000}) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) fstat(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$BLKROGET(r5, 0x125e, &(0x7f0000000440)) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000c00)={0x2e0, 0x3d, 0x200, 0x70bd26, 0x25dfdbfd, {0x13}, [@generic="2f3029cd673e5b9bc8db7e21bc6ac2201acaf876ec0b283043d082533e64af335fbe04efc442bd2decfd1f03cc1c91b7bb1867a932b9c7a5095626", @typed={0x8, 0x41, 0x0, 0x0, @pid=r2}, @generic="f9a0da610e73900b0d6f422a80f973c85780680d6f7ea1423ff8e869a4651997819d6ad4f66f3569b4dfee116895e0f43be131541cb36b2725b646596a870a918ac5f6c0cadd35d58cb8f53ef8d442339890fda7a3ee10ccbcf0a16820ec451710", @nested={0xc, 0x87, 0x0, 0x1, [@typed={0x8, 0x12, 0x0, 0x0, @fd=r3}]}, @generic="4fa8706e8ea8a7eb1f484129f190ce2a7df571fc8cfa44ea7d327d42aabb64273b6b4fb638ef496462e80a25fbd81b1adba180fd14fbef43e72a64f6e9d1d11bee2bdf2eae0826e81eda06607cf31ad94d771d5eef4db85eeaa097d1113bf813c76f895948623ba8f60fa5f1a7e969c990a0d7697ca6a01925fded4b8bcecfc6c639436f1a9bcaba358844b54c2b338c1b15c9923dc635df52e7b6", @nested={0x17e, 0x48, 0x0, 0x1, [@generic="d4532d3475b7f273bcf430b2", @generic="2c031f895b26991cb5d11046fe183b496470b101ca1f60139e8130bf4b790b1c85425dbcf922609c45a42d75be4fd207b0704e584aee1bc799b7cd4845619443768e9aab8bc3312625765d246a0f06565e272efdadfb3d7c7e316c4a91dfdeb5d7c75d083f1a1876e43ddf5996643c9ceea72c08b5c5c62262fd6b6138b288a8975d9236c11f046727d90e1ddaad89eaf152aa3b9e42115648e0d3f82c88b12741959bbd7138a2b281931080da17eae580e4bb1ef954ab30f83dbfb0f9417b42b138eb3a1c48cf0c81f51e54631ba06d81754c", @typed={0x8, 0x3e, 0x0, 0x0, @uid=r4}, @generic="b89441e4b553d41b9dc8d23d31c39c337ebf3f7af53647e062431c0e20d892530ba580b22be5180bfaa3b536720512153a646f38f3b2532a05414edaf910e920c0d75aad4be737d03cc388817658b4d3b8a02aeebc0bed5258ee9051f4b5950a4a187667f1813ec09fec6e59057f6e7c46ffc2e27758aeb63ceaad1fd5c9ca9e011b98", @generic="124ef015f8f31ebceed339cd6060a8de"]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/enforce\x00', 0xc0000, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000640)={0x1, @win={{0xd1a, 0x9, 0x8, 0x101}, 0x6, 0xfffffc01, &(0x7f0000000540)={{0xfffffbff, 0x6, 0x3, 0x1}, &(0x7f0000000500)={{0x1ff, 0x8, 0x2, 0x401}}}, 0x3, &(0x7f0000000580)="74966c255cd2487231c2a584db5c9d7f347a296363f822f317c25475f633fa5d85742697aeca5e7628bc28b41fddac4fce6368377eade0c401c1211333f16d9b7e7673b0a1fb0adf0c083c50d07968ae23d92cbbaede5c9f6511038a7b06756527d421491af3f19329319d3fd3329d34a779aab678bdba2a959e063b5687b1cd97ddec4dd083fc87bd9749e80e27b889", 0x5}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r6, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:45 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:45 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0x0, 0x2c080001, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 722.267689] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:45 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f0000000300)={0x1a800201c}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './bus\x00'}, 0x6e) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) write$cgroup_subtree(r8, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00') r10 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x4000000000010046) write$cgroup_subtree(r11, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r11, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r12, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x44000}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) 20:55:45 executing program 4: r0 = socket(0x1d, 0x4, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9d0000, 0x2, 0x4, r1, 0x0, &(0x7f0000000080)={0x9d0902, 0x7, [], @p_u32=&(0x7f0000000040)=0x81}}) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000100)=0x9, 0x4) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000000)={0x8001003, 0x6}) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r3, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) shmget(0x3, 0x5000, 0x4, &(0x7f0000000000/0x5000)=nil) shmget(0x3, 0x2000, 0x400, &(0x7f000000d000/0x2000)=nil) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_UNLOCK(r4, 0xc) write(r0, &(0x7f0000000180)="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", 0xfc) [ 722.424731] can: request_module (can-proto-0) failed. [ 722.467864] can: request_module (can-proto-0) failed. 20:55:45 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:45 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0x0, 0x2c080001, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:45 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xf7fffffffffffffa, 0x5}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x80002000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:45 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x54, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x3, @empty, 0x3}, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}, @in6={0xa, 0x4e20, 0x80000001, @mcast2, 0x8}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x1, 0x40, 0x0, r1}, 0x10) 20:55:45 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) 20:55:45 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0xb88fdd1f410996ac, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:45 executing program 4: socket(0x10, 0x802, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x10800) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) sendfile(r0, r1, 0x0, 0x4000080000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) write(r4, &(0x7f0000000180)="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", 0xfc) [ 723.003595] audit: type=1800 audit(1581972945.875:1031): pid=28794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17157 res=0 [ 723.174073] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:48 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x1, 0x4) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:48 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r2 = open(&(0x7f0000000080)='./bus\x00', 0x1490c2, 0xc) write$P9_RREADLINK(r2, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) 20:55:48 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0x0, 0x2c080001, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:48 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) write$P9_RREADLINK(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="295404041046b98d34606cb00d387a523ca5a246bf5b2aeae394e9952de7d7b863759936e4d1f86ca04ea99278a8ecc1c5c83573d3", @ANYRES16=0x0, @ANYRESDEC, @ANYRES16], 0x4d) recvmsg(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f0000000200)=""/44, 0x2c}], 0x2, &(0x7f0000000280)=""/29, 0x1d}, 0x40) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000300)) 20:55:48 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, 0xffffffffffffffff, 0x0, 0x2008000fffffffe) 20:55:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:48 executing program 4: r0 = socket(0x10, 0x802, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/stat\x00') ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59cf0a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0e310d6c4ba0b76a5bd5971ce2316c0be7319503265d172429320cd61a471deae63dd5d08948cded234dc9b28d83c3013aa476c861dacf6e9a3683876add7d4e4932a930d2968166dd94e94a3944355a04a473d5027a3f29d93bfec2c9c501097c1d2f7832079d2130754f0cbc49728", 0x16b) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x6, 0x48843) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000180)) 20:55:48 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000200)={0x8, @raw_data="cbef616cc45283ef420520ed0250cce52f43c979622b2819162cb7d90d48862e21d8b96cb976cdfb0a229176a9a2a5a11de3575ed0db02dc94cb1ad992949c713a85e4d6ce09ebab04c440cc99e533ad3a5c4b6d4af415d0663d6d87913ebcde6c1fd6196effcb44325e6fa008e4edc50b8c5c44954ca08afea39b585c2d326a1d8c145eab7b592faefd231ef32cec366d36fc4d5881397964db7d0c1ee97a5a3636afa7c3f7805d401fdc04135271fc38370ab0f2a59d85bd5fa3821330115e926f24852d3b00b3"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x107a01, 0x0) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000140)="371c4d0394d0114ce6d9ead908d3879067024b2c7764a73f0134ac7baaadff5dc9f232e752035f825848563da0218e439288013b7b3ba22634c23ae893dc57c8d04edb8a5b670914780bf29f012bc953df3dcec98be5ea0cc92dcc0beafde2ba9cc9c25de0b612194b021d075bf1e353901a86fbce6a16e20602632847c5422d235918b5c6217915b26924f7a37eb55c69ea4c1666f65b12b7f12cab826c7d8a37b54b7a5e02b6da6a6c") ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 725.313027] audit: type=1800 audit(1581972948.185:1032): pid=28827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17377 res=0 20:55:48 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4), 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 725.377488] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:48 executing program 4: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000140)=0x5) r2 = socket(0x10, 0x802, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3d117b2e73df1a423f0dfc919afdac9b76d3419fdef964c0f7d4432b171fedffcb4da46470b1c73e7d5ab7c589fb15f763a7814715af24e4a2067f789f493a0f1d703ef631fd533f94a9cea37abb405fa6df3f2cb6c7e81e90d1b00829262dab780fed2742aaa1aabd49c600eb07eb85ad4899d3440d7b137e66c5686593aaebd3d1f2f728321ad0da0a998b00fd1c24a38a801c8c4e6503bb767b84f5d23966f269b0bfe6a195d28b54fee7d523", @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf25100000000500a20001000000080035000300000008004b00060000000400e2000800260006000000"], 0x38}, 0x1, 0x0, 0x0, 0x20048800}, 0x4004841) setxattr$security_capability(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v1={0x1000000, [{0x9, 0x4}]}, 0xc, 0x3) write(r2, &(0x7f0000000180)="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", 0xfc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000280)={0x5, 0x9, 0x6, 0x9, 0x1, 0x8}) [ 725.549686] selinux_nlmsg_perm: 1338 callbacks suppressed [ 725.549697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 20:55:48 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4), 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:48 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004180}, 0x84) [ 725.784571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 [ 725.799740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 [ 725.815034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 [ 725.896746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 [ 726.176455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 [ 726.310576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 20:55:49 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:49 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@delchain={0x66e0, 0x65, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0xd}, {0xffe0, 0xffe0}, {0x10, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x80, 0x9}}, @TCA_RATE={0x6, 0x5, {0x9, 0x31}}, @TCA_RATE={0x6, 0x5, {0x5}}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x10b8, 0x2, [@TCA_ROUTE4_POLICE={0x10ac, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x6905}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff8, 0x10000, 0x100, 0x1, 0x8, 0x8, 0x8, 0x0, 0x2, 0x7f, 0x8, 0xfff, 0x800, 0xfffffffa, 0x2, 0x2, 0x5, 0x400, 0x2, 0x9, 0xffff6004, 0xc88, 0x2, 0x8000, 0x2, 0x3, 0x40, 0x7, 0x3, 0x40, 0x2, 0x8b, 0x3, 0x4, 0x4, 0x7f, 0x1, 0x1ff, 0x2986, 0x80000000, 0x6, 0x2, 0x6, 0xffffff8b, 0x6cc, 0x9, 0x8, 0x9, 0x5, 0x1, 0x7ff, 0x1, 0x3, 0x3, 0x3, 0x2, 0x48, 0x7, 0x7f, 0x0, 0x7f, 0x101, 0x80, 0x1f, 0x2, 0xff, 0x7, 0x1, 0x7fff, 0x0, 0x40, 0x7, 0x6, 0xff, 0x8, 0x8, 0x6, 0x2e, 0x9, 0x2, 0xfffffff9, 0x7fff, 0x1, 0x4, 0x1, 0x0, 0x3, 0xf1, 0x0, 0x100, 0x7d5, 0x6, 0x8, 0x80000001, 0x0, 0xc78, 0x8, 0x7, 0xaf, 0x3, 0x1, 0x1f, 0x640, 0x4, 0x3, 0x2, 0x0, 0xfa3, 0x6, 0x8, 0x9, 0x9, 0x0, 0x1, 0x3, 0xd7, 0x2, 0x1, 0x9, 0x0, 0x1, 0x5, 0xffffffff, 0x9, 0x9, 0x1, 0x2, 0x7ff, 0x5, 0x35, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x96f, 0x10000, 0xffffffff, 0x47, 0x1, 0x80, 0x5, 0xc0, 0x9, 0xe7, 0x9f0, 0x3ff, 0xa68, 0x0, 0x8, 0x81, 0x7fff, 0x2, 0x6, 0x8, 0xb96, 0x6, 0xff, 0x8, 0x7, 0x3, 0x56, 0x7fff, 0x3bc3, 0x0, 0x10000, 0x1, 0x40, 0x1, 0x3f, 0xffffffff, 0x0, 0x10001, 0x9, 0x1ff, 0x22, 0xc9, 0x81, 0x5, 0x6, 0xfffffff9, 0x9, 0x5a, 0x1000, 0x4ae, 0x20, 0xfffff656, 0xffff7fff, 0x400, 0x7, 0x100, 0xd4, 0x80000001, 0x6, 0x1, 0x9, 0x800, 0x31, 0x400, 0x4, 0x1, 0x6, 0x7, 0x10000, 0x3, 0xaafb, 0x7, 0x800, 0xffff, 0xfffffffd, 0x380, 0x1, 0x0, 0xff, 0x1, 0x1, 0x4, 0x8, 0x3, 0x7fffffff, 0x6, 0x8, 0x4, 0xfc0, 0x5, 0x800, 0x47a, 0xca, 0xc7e1, 0x1, 0x6, 0x7fff, 0x6, 0x1, 0x20, 0x8, 0x2ccb, 0x5, 0x0, 0x8, 0x3, 0x1, 0x3f, 0x8, 0x9, 0x5, 0x80, 0x1, 0x401, 0x0, 0x9, 0x7fffffff, 0x40, 0x800, 0x200]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xc681, 0xff, 0x6, 0x6, 0x0, 0x3, 0x8001, 0x8001, 0xff, 0xffff2e01, 0x1, 0x1, 0x1000, 0x7, 0xffff8000, 0xfffffff9, 0x101, 0x7, 0x7, 0x8af7, 0x3, 0x9, 0x603d, 0x58, 0x6377244f, 0x5, 0x5, 0x200, 0x8, 0xecc3, 0x7, 0x6, 0x200, 0x10001, 0x0, 0x133, 0x4, 0xffffffff, 0x4, 0x7, 0x0, 0x4, 0x0, 0x10001, 0x20000, 0x6, 0xf5, 0x3, 0x1, 0x1000, 0xffff, 0xffffffff, 0x1, 0x3, 0x7, 0x2, 0xfff, 0x401, 0x35c2e84d, 0x7, 0xffffffff, 0xa3, 0x400, 0x20, 0x2eb739a9, 0x3, 0x4, 0x7fff, 0x7fff, 0xc0e, 0x80, 0xe1a, 0x5, 0x2c, 0x6, 0x2, 0xadf9, 0x6, 0x80000, 0xffffffff, 0x81, 0x80000000, 0x5, 0x0, 0x6, 0xdb16, 0x80000001, 0x3d8, 0x0, 0x6, 0x6, 0x3, 0x2, 0x8, 0x0, 0x1, 0x7ff, 0x2, 0x9, 0x1, 0x10001, 0x87ad, 0x8001, 0x10000, 0x1, 0x5, 0x9, 0xffff, 0x32, 0x5, 0x3ff, 0x6, 0x8, 0x7ff, 0x3, 0x1, 0x0, 0xa307, 0x1, 0xfff, 0xa22b, 0x10000, 0x3, 0x7ff, 0x8000, 0x3ff, 0x80000001, 0x9, 0x2, 0x0, 0x1, 0x7, 0x1f, 0x7ff, 0x3, 0xfffffff8, 0x2, 0x3, 0x7, 0x81cf, 0x2, 0x1, 0x1, 0x7, 0xfffffffb, 0x2, 0x0, 0x100, 0x400, 0x8, 0x8000, 0x80, 0x9, 0x8, 0x401, 0x3f, 0x1, 0xffff22fa, 0x10001, 0x1f, 0xffffffc1, 0xffff, 0x61ac, 0x5, 0x2, 0x71b, 0x80, 0x9, 0x0, 0x4, 0x9, 0x9, 0x3, 0x200, 0x4, 0xfffffff7, 0x401, 0xc6, 0x0, 0x6, 0x3, 0x4, 0xfffffffc, 0x10000, 0x0, 0x0, 0x81, 0x80, 0xd8cb, 0x3, 0x8000, 0x1f, 0x9, 0x24fdb755, 0x1000, 0x9, 0x0, 0x80000001, 0xffffffff, 0x6, 0xfff, 0x9, 0x200, 0x400, 0x5, 0x1000, 0x8, 0x5, 0x7, 0x5, 0x1b, 0x1, 0x9, 0x200, 0x8, 0x401, 0x8, 0xc94, 0xffffffff, 0xf58, 0x8, 0x80, 0x4, 0x8f, 0x3ff, 0x74e, 0x3, 0x6, 0x0, 0x0, 0x4, 0xffffffff, 0x483, 0x9e58, 0x7f, 0x760, 0x9, 0x3f, 0x80000001, 0x4, 0x3, 0x4, 0x9, 0x7fffffff, 0x8, 0x5, 0x7, 0x7fffffff, 0x7f, 0x8, 0xffffffff, 0x7, 0x3f, 0x200, 0xfffffff7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xce25, 0x10000000, 0x80000000, 0x5, 0x0, {0x5, 0x2, 0x1f, 0x139, 0x4, 0x6}, {0x1, 0x0, 0x3, 0x0, 0xffff, 0x80000001}, 0x4, 0x9, 0x10000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x10000000, 0xa6cf, 0xa7, 0xffffffff, {0x38, 0x0, 0xf1e2, 0x3, 0x82, 0xda}, {0x0, 0x0, 0x0, 0x8001, 0x4, 0x1}, 0xfffffffe, 0x0, 0x1000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x69dc, 0xb9, 0x8000, 0x2, 0x7fff, 0x933, 0x9, 0x1f, 0x1, 0x1, 0x523, 0x3, 0x7, 0x7fffffff, 0x2c42, 0xfff, 0x7, 0x3, 0x7, 0x7fff, 0x8, 0x4, 0x8, 0xe4c3, 0x200, 0x3, 0x0, 0x5, 0x7, 0x6, 0x8001, 0x9, 0x7, 0x7f, 0x9, 0x6ace, 0x9, 0x7f, 0x3, 0x40, 0x1ff, 0x7, 0x2, 0x6, 0x2, 0x8000, 0x1000, 0x0, 0xfffffffc, 0x0, 0x7fff, 0x18ea7949, 0x6, 0xfffffffd, 0x9, 0x8, 0xffffffff, 0x8, 0x7fffffff, 0x75, 0x3ff, 0x52, 0x2698111, 0xc0000000, 0xffffffff, 0x1, 0x6, 0x9, 0xfffffffb, 0x6, 0x7, 0x1f, 0x3, 0x7, 0x8d, 0xffffffff, 0x7fff, 0x0, 0x0, 0xffffff42, 0x7ff, 0x5, 0x6, 0x8, 0xcd9, 0x7fff, 0x5, 0x7fffffff, 0x3, 0x8, 0x10000, 0x100, 0x5, 0xb9ad, 0x7, 0xfffffff9, 0x14, 0x0, 0x3, 0x80000001, 0x2, 0x9, 0x6, 0x9, 0xfffffffb, 0x2, 0x401, 0x81, 0x1, 0x3e89, 0x401, 0x4, 0x0, 0x3ff, 0x0, 0x6, 0x401, 0x9, 0x8, 0xed5, 0x454204cc, 0x80000000, 0x1000, 0x7, 0xff, 0x1, 0x9, 0x9, 0x20, 0xbea8, 0x9, 0xff, 0xfffffffe, 0x400, 0x3, 0xfd88, 0x0, 0x80000000, 0xd2ce, 0x7, 0x8, 0x41, 0x8000000, 0xfffffffe, 0x297, 0xffff, 0x3, 0x5, 0x5, 0x6, 0x682, 0x5, 0x51, 0x47b, 0x3258, 0x7, 0x1000, 0x1, 0x0, 0xcf14, 0xc009, 0x0, 0x4, 0xa9c, 0x7, 0x4, 0x7fff, 0x1, 0x81, 0xfffffffa, 0x8, 0x8001, 0x7, 0xfff, 0x100, 0xffffffdb, 0x3ff, 0xc11, 0x77, 0x4, 0xc2, 0x2, 0x20, 0x2, 0x5, 0x8, 0x7, 0xa, 0xbb4b, 0x5, 0x8, 0x8, 0x7ff, 0x10000, 0x6, 0x7, 0x2, 0x4, 0x9, 0xfff, 0x59ba186e, 0x100, 0x5334, 0x6, 0xfffffff7, 0x40b6559d, 0x5, 0x80000000, 0x331dca3f, 0x7fff, 0x2, 0xf46, 0x9, 0x3ff, 0x2, 0x7ff, 0x4, 0x9, 0x2, 0x200, 0x1, 0x200, 0x4534, 0x2, 0x1, 0x7, 0x6, 0x3, 0x1, 0x8, 0x2, 0x1, 0xa4, 0x63d7, 0x200, 0x4776, 0x3, 0x3ff, 0x7ff, 0x4, 0xffff, 0x6, 0x4, 0x9, 0x7f, 0x1, 0x100, 0x2, 0x40, 0x0, 0xff, 0x3f, 0x6, 0x9016, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x8, 0x3, 0x400, 0x32, 0x1, 0xb739, 0x81, 0x7, 0x387, 0x3ff, 0x3, 0x2, 0x800, 0xe6c, 0x1e00, 0x80000001, 0x0, 0x0, 0x800, 0x9, 0x401, 0x0, 0x2, 0x6, 0x8, 0x7ff, 0x0, 0x4, 0x9, 0x7, 0xe9d6, 0x2, 0x0, 0xfffffffb, 0x3, 0x1, 0x100, 0x4, 0x41ef, 0x80, 0x81, 0x7, 0x5, 0x2, 0xfffffff8, 0x9, 0xfffeffff, 0x4, 0x9, 0x3, 0xc0, 0x2, 0x80000000, 0xc8, 0x6, 0xad, 0x1e3, 0x7, 0x401, 0x8000, 0x8, 0x8, 0xffffffff, 0x1, 0x2ea, 0x3, 0x7, 0x9ff, 0x7, 0x80000000, 0x6, 0x101, 0xb1, 0x6, 0x7, 0x3, 0xf5, 0x6, 0x80, 0xc9, 0x7, 0x7f80000, 0x79, 0x3f, 0x7fff, 0xf0c0, 0x1, 0x6, 0x2, 0x7, 0x1, 0x9, 0x3ff, 0x465, 0x3, 0x5, 0x6, 0x0, 0x8, 0x80000000, 0x2, 0x3ff, 0x4, 0x0, 0x3f, 0x80000000, 0xb8c, 0x3, 0x0, 0x4, 0x4, 0xfff, 0x5, 0x2, 0x3, 0x6, 0x0, 0x34, 0xf35, 0x0, 0x8, 0x2, 0x0, 0x6a4d, 0x5e6c, 0x6, 0x80000001, 0x0, 0x0, 0x1, 0x80000001, 0x8, 0x933c, 0x5, 0x990f, 0x7, 0x4, 0x3f, 0x2, 0x7ff, 0x4, 0x0, 0xe00, 0x1, 0x600, 0x5, 0x4, 0x7, 0x5, 0x0, 0x9, 0x9, 0x10001, 0xef2d, 0x5b84, 0xfffffffc, 0x9, 0x61, 0x4, 0x1, 0x7, 0x9, 0x4, 0xea, 0x1, 0x5, 0xa526, 0x800, 0x5, 0xb0, 0x1, 0x80000000, 0x2, 0xfffffffb, 0x6, 0x4334, 0xfffffff7, 0x9, 0x37, 0x3, 0x3, 0x1, 0x2, 0x0, 0x3, 0x1, 0x1, 0x0, 0x30d0, 0x4, 0x874b, 0xff, 0x2, 0x1000, 0xffffffff, 0xb1, 0x7fff, 0x1, 0x7ff, 0x1ff, 0x6, 0x3ff, 0x7fffffff, 0xbd, 0x6, 0x9, 0x800, 0x7, 0x80, 0x8001, 0x3, 0x5, 0xffff, 0x0, 0x10000, 0x1, 0x2, 0x3, 0x5, 0x5, 0xff, 0x100, 0x1, 0x7, 0x8d, 0xc9c0, 0x8, 0x8, 0x5, 0x0, 0x1f, 0x5, 0x10000, 0x7ff, 0x5, 0x5, 0xef7a, 0x7, 0x1ff, 0x7f, 0x5, 0x4, 0x3, 0x349e, 0x800, 0x3, 0x800, 0xa4f, 0x401, 0x4, 0x4, 0x101, 0x86d9, 0x80000001]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6c}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x40}}, @filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x55cc, 0x2, [@TCA_BASIC_EMATCHES={0x84, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_META={0x48, 0x2, 0x0, 0x0, {{0x4, 0x4, 0x8749}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x420, 0x4, 0x1}, {0x40, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="5d704ea713620c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x40, 0x2}, {0x400, 0x0, 0x1}}}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x6, 0x8, 0x6}, {0x0, 0x0, 0x4}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x5d, 0x3, 0xa3}, {0x1, 0x6, 0x1, 0x3}}}]}]}, @TCA_BASIC_ACT={0x214c, 0x3, [@m_skbedit={0x1030, 0x8, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0xff, 0x7, 0x3, 0x10001}}]}, {0x1004, 0x6, "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"}}}, @m_mirred={0x1038, 0x13, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80, 0x3, 0x2, 0x200, 0x10001}, 0x1, r6}}]}, {0x1004, 0x6, "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"}}}, @m_gact={0xe0, 0x10, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1400, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1de0, 0x10000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x26a0, 0xffffffffffffffff}}]}, {0xa7, 0x6, "cb7391314f50b3fb7a7337ba76735a735e9b9a211b4d61900a2f3a726631916a7cc53c75f1a888ece4b8cabc2b2eb884f5f89b919ec46340550a0b62b973c3459f4e9987bda4bec285ff66aa2a693fc910459046d72852de869fa9e3f9f4ea236f0a180085ba5149f92545cb27885a53b5445e93682e145c50f26c017660c7ba73ef54e52ed4c8acda3857eb018cf83597cccec2a5a80a543a45929f571b4fe38f57f3"}}}]}, @TCA_BASIC_POLICE={0x4}, @TCA_BASIC_EMATCHES={0x1048, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffe}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x102c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0xc, 0x0, 0x8}, "e2235401b5be3628135adda8bd46f6e86310e25649fe2c8cf7727bb5b89b8109f28ade8f3461e71493161b772e2a76aad8c1f38550d3f9d6ed2a4e964362d82806770858c5754f808fd93e4b6fa7fb1820688f02f8177ff4bad4506adb1c283158baa4b0378999ca6a36d1f2353995086c6d729fccb76582da22e37084ea013824b15ee5216a358023eeff340f4a6950cb52d40fc45f7bc68c9c214ba60a4d11e0aef95afb4bf7b200561aaed495c3935dafcd7eec7081d6c66b9d8ba2ff91d47831eaa525a1a9bb0e44f233a0fc2e11519e373d116a2691501a4f9d49bbe5bd3411421d47f1188030ee8f44b7a8c5063e73d9e06a9317fd7f112a4fd78a95dd5d1ac3ce7dd9453fd3c0eddd946006dab7c54f3046926bd4415e40273c3ec289e89556d6a8ba8e9100326170477ba9dfbe1532c811f8cf039bf3fd58c30ad778ab2f056d403b1e4ed8ec9438071e7c1e32ae064ce13d9fa07092044a885cde0d483adc316b03ce4057999ceb8d7dc807f9dc2e73cccf963c95ddc8034286ed9183e0a52d154011d8e175bd048cd24c914353ecd14b53fca0fde82a7426b7d35534841d913af317ffbc8438b3e96a6d8e66ebb95b146e0f3d524eefa16c785486195d1577a855af4be60bfbe363ca526f5b18dacd9f1a8bcd2a195df2b95a4d770b76e402659ac57a469478e20577d0420e267d4393a7b8d3f41f4274728c7172e076cbc4e1f68c4c954ce0edf48094e918a3ac6325992828cf2ab441ea0d486685e60c5fc4c7d7d0038f9670ce48582db0f2b0abf61df9a6ea82af10eef2beff1b753c614fee381e4388cb47e3fc9603eda987137c929a08805d5a9f7a53e25f4287b0bb0b1865b2fb4d3bc2907f45411d2a90252f9790c5b2d24e55860f87ba92d76c62d4b3e32952b155f72db830c6527765f5000e16ff03300b016765fa52094bacb1469ad48b7a3b349a1c21d0f4bec48616a8bae7d1d40cef13cf129bc6490b9bf0e4ad397974234125db0181c0f38bfce22e0ed7896dc97c80ce64037621bafdfc38d59baebb2a4d6c3d22ab19cae085a962e060521768df1fec5388b1f00781788f8b5ab8290ecd160a351fce21adf5b73463cd52b732d882ed85540d1b0349d205cf55376dc25d543e191f9905bc241ecaeb5928eb522ce02cb4068c3ef210f79c0f9d29947ac767b9b4f8fd73f456a7f467ecb8306ed7a2d278daf41eb17705edc2d26dc96d3beeff802d992491b8f74d77eca6113c75770153082ed7730039dfbe2991f7134396d030ee45cfc5a07d5ba3b77f1c500918010531dbf558e4a6311e5defeb9769131fe4832d010f988eefe63b441d7e86bdf7fa2f182e9af5f21a76fa3e6b71f77c91981a95a2777e67c07aeace573c2683abc89205a199b8112240e6b9ff2ace08521af646ca0d8b494f35759897e69f74241077df9de871c09c7ae01cd64f1bc9895ae1ef9ca96295e79ec8ac0719b03a8f5ebb382c37249e0ce3aeb35eb2163b4d3ff5b025f5d0e8ed909d8050cab517af8c912b10eabf89b89065a0bc64343158fcf614b3bc36a39f55e29149d7ee39f32a26d9743eb8379e81b38204105bcb226762f397cb159d9f16eaa1987daf25fc47e7b37f30f17cbe2548f036a8ac44c05980b820871ff757d9641414a62432898f300aba0c26f06c93c2fb07e897ec1598091e857d6c6139cc27dd4d4537e3670143c5b4b2caa4a6549937925841173c3c3c4c42bebf258aaa3bad11bac67e8b1852ad6c0fd9521ba4a43d7fad33543bdb8ee57c078eb91f393feae90b2c366d4d6dff9276bfd2e423c0efd4cb80bb95f40435a424fe1a7b844cb429c562ebdc25202afa379a474321183cd0483f8c3b111fafc4281a52ace36d1b7ddb33e5a051b6166a22f209bd883f58aa9e37f2395aa65b0b9693226a19e27d089b832185e0ade61b3435c62ff90e0ca017eef86f13f9488669f5ed9b6bd46bb4dc93485177747df6e09d1a6cf44e5763f6d2ee3f1ce1ec70a34fbc67184d33426289d8f8c6e6bfab307fbb07f402f98edb0ddde6828ca3fe11b31b57594bf369df8b6a65f08d27cffd8359230b3af04b88343663959a68576ca9181b93fbab7308d0426a446a13c043f89ee3b33b33c1555096af7a5d22720c8c34f6d223c08d89c5355a6db7843d61adc0d77c292a81521f4b1af17a6f0e2a04aeb91f68de6d5b8877b6c40d32d09916189075c3b7252142f383f6bac3a1789f5bc12def6f79f6cbea55ce16c0487d393d93939d6c464be3860096988024f66b413e3221d73f4a125b02b03a43437d57309c4a36b9cc24650c7c66d04a907ec91d65f7a6152651517d562b4c257faa0801d0491e321ecb17e18746279973c7c98bab09749f22180d817bd047f2d72f2d074dcdb809977794e1d5eedb997be2d41e11e9864cd07c1401080d5b00e1b749519c0adb5003c4abaed1c8e324f2e49a22700eadd26efaae317e4b481a9849e9683d63833154204c919cebfd8a9adf3a4f7748c74fd9e587da26df84182e99fcf9c8b9cd2ba92575dbce638b3c02aac2e78cfe5a7670b835864d5eb72f22d9ceab025257fa37af72c5b3f2114ff18fbfa0c3cc22d571eb9fcd0cd5a427d27bcbbaff656a6f1dac4b07c6e4b393c8d7365976d27d8677738151d36e952af7e3c85065ff21f5a3bf06a85006e6de674197d2b5e8fe5f7f2e1041329c91ca812bc50c3e7d34765e65dd8c8f76db104e9afdb5e53d659b0d51b0b7323d5d92bc65d08613ea621e3d590a46dc212b53896a5297212f4ac1a51a981ac283d5f6cdb0a803181ff62763be7584140255e16ad6a5e4bd7076902c970dfc254646d9058ffe0616be6611c841e9ed4d6038b8bee80550808b97c694ddf9445782aaa9ba199b41447a41552be7c36d5cb2828329e2b4535214ac370a348fdbcc5b8a5a398503e6f3c6efa5fea4ef991be8c60e9ccbf2e93efefecb0308f2dd091d05d292e92ea254feffe42ac2824e4869f816335eb0c28d2326f7f8e2e2a5747d69f1f475980dd6a0fcffd996be9c434ddda454fc92816fcdde8f512c37bc6d5d39b6777e5a2848799f2480c1229337ed6033432186873a2eedad6d2a50335aa637238d87d7904882aaace7f1d7b14ecabe818828a70fb934c2a16950b50df716646fd0e09beee257e916e50a27148092cd667597cd0efbbf351c78b43cccaf6028d58b72d8752ddba3945b447894434de0b9a0cf1ba90f8a5d8829d6c264bd95520fe8ebef521e38952e3d29bece33321c268b8f38ac2bcac611d23fe8cc7bb7b3643b7234515e2d64affbb5e261a3af807c3ed3a874f4a0985ea0acd56ee564025f578534304dc23052eb4f998ec906a8a0b2cd39a5eb1b4ed9c9b19ca82ecc8127b03057787b5b4fcf1d6ebeb00800ba6c9bb75d240c30166db80f1d0cfbfa7cff7d23a895d4c7c8153ec4f1ebae7eac2a46361f1df46b4e110f208f2e69dc1432ae0fdb85eca49d0a5ab83216170e39fffbc4e14e63c609211f6943aa1fe3f5b66551780c0fdb2a65616ff90514def4ccb168b251d6e0b76845f54c5ab1125d4f913aa40b8b2f3594825541cb428a70766f8928bdb39277b0e50cfcabd2a0e09d1f71552e9472a99be1341c9e85e9e8db793a83118268fa3a49d54380520929ead6349251cc21f22ad047c4fccfd0991e3ae057f1c2d4bd914708b208a7ea89860c3ddabe325ab1619f899a23ce1d1dc0475dd6b4bbe488c430e594f11174b063ba4e0f7d202c717ac08d1ff95bb04fab096484aa8d27925903ad4a8a0c925af4f19f9e50eafcd51511a7a939f4c20819cb6f0ce693d392cb1e31a1fb09b4513f1474d9731cf34f78d3926fd79862f248915fd269a9139c96ed3c5ea79480ff2e7593d2b7ee60c6e3b8dd0586f8fd8749b2f7d3e8daed6a7b92992b66624d956b4b0b90faca76053729688983471145a17017c2de3979dca2bed2889c7279aefefe471a71405d3e5ea2bcbd4a76912269c5c7800f63561312ec964214b5ea59b9bc152865686b7fdf4571eac412206f9f82a4428d11013e6ade0c13735cf8a62591135584cd656819d6bf9df55688a3295527e7ea498fe3db3762ee57b8212c05ac37aff4ed5013c5eeeeb4c7242e9a3bf2f3fa3b48e73e43baa95a9bb10f158a1e3eb5e3d7f1d78e0fe60eee3a8c0f99c89a1392f1835a75c2e7168e9df6215f9effa05aa9c3267e1ab7bf6b01b154030d4d1ac58f6bcc192a703b9da31989a378e9d84dc4f8e2b905aced66a74fec9ae6d2b7dee805cd7ef2d5e9018075fd056c5b8da8b0a203a93f8384dae50f78dba26a29846518871558b997f3605b43f4b14c9cae83d784365bf0e9a0aaab78aac2e0957d374a7e5ec8e567dd2e6b4787ba3ed490ea8dbc7582e59c56f2a9b60a226e66ff461fd4c5d591cb9bd6706f00da26b0cebc4695c0c01fd856fecd6e16aeb9d0091745164e25d26b70963625c39bab557b5cf22ac41054017341a1fda6402f48325de78b5c9b316f06d04d1871708444c75c3a110e8b7ea6296c4a2e506a752f78b794831e97c2efb6d8c3131bd7a35845eda3e5f9ff5c0be5abbab669bc75b45b3e31885663aea8d1dfb2140f511dcb3bf100e58da64a6a974ef3c59207fd9365755652e6664f37f9f90244de3a8423a2dabe1bdf269c0edec3888ec8757942207b426d21dae17e8d8f364f8d507cdd4578b5915ba7c7902f5653a3d55483b546c11f6e7172b9987d21a9daed3d949884ddfe2d373cce6b60dab6b4fa7f8d27ae7e55084f0eae4cffa487150116b26930754b57fe2d5f1512ad1c11e0179c05ea4799e9549348bb4acfadcc6d5dc82a116656a3b80be31de102b89feb8b1bbab8d27005165b5268b65e9a5ab9bb6894b19eddc7d1cd85f682263fed9a15b31255c89ba4ef1b9ff20321126fbf63c0fafddd20ad59de35b7453e7ced6842be8da1d5d07f1d5cedb4c307d8c063a16c69a2ac51f776441776ccff7aee06024c58132230449f3700e51ba6637de3d1bde06a564de562cc753d7186089b0c784d1714263533ddc63d2bacd4e5e82dc815d4ebe4a1c188d99a4c803ee4395dda6b426cb044cebccce2653449dff61cbe2cd17a3ea4d9731d60203fcd0e44c0c0f5738089aa7c200c25cfebd6d8bb21560c35d75081ff47d39288310f1c62b86c3f37cf49fd60afb7c453756ef011c22cb44a88c2cbcf45457ce966f648578e4ef346625be5b46b9e73c14c4c4a405a2a5faca4468fe688fcf7a95a5f15a57d282268dad072a29d639921cdf29640c7c1c681cf9c5e5b640ff3f5f0d190291d7833c91142f46fd32c49a54d7c644088139839ea94ff958f725d61f664047e0092ea9fc78a38ae93a8b41e471a17eb5e8b4713b54d343fcf1ddd2a5165d4b3e859003598ffd96c7c24bb2c1535992473b0d19204b80c2f333ad122d7668b4ea5a27d71121d6df72537816b2c3353f38b7aa5a6336d96d274063679b4270e72fd1a519147d0918a3fc25559194111ec7e45e3984e3ea589a3bd1b04927464a1319b982db11abea3da28512018675ea9b3344a85af84da58077747f4a9c812c56545e2fa0ca7303d42ffddfa0a10d0369523e6772360891cf03a09d39b020145c0e7510d2afa4edef43648f74de27417bc2f9252dd252870cffd79abcee903775763c6b0c96886b2efadcb3ec49e9dfe86e6a2452f68e6ad7ab74a2aa8061b4fcba4ce510c5a9a16f0e2da13bf90bfbe3969269b3da452097c199f36458607b200119e9cdc50f2245a6e0fe04b64d49417"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x3, 0x3}, {0x1, 0x81, 0x100, 0xcc}}}]}]}, @TCA_BASIC_ACT={0x1790, 0x3, [@m_police={0x154c, 0x1f, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x149c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x4157, 0x18d, 0x3c6, {0x7f, 0x2, 0x401, 0x6, 0x101, 0xb5f}, {0x3, 0x2, 0x2, 0x80, 0x8a, 0x9}, 0x5, 0x2, 0x40}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x20}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x5, 0x7, 0x40, 0x2, 0x8, 0x1ff, 0x4, 0x4, 0x20, 0x8000, 0x3, 0x2, 0x4, 0x49f3, 0x1, 0x2, 0x8, 0x6, 0x2, 0x7fff, 0x3, 0x1045, 0x4, 0x9, 0x81, 0x0, 0x57, 0x6, 0x6, 0x0, 0xffffffff, 0x6, 0x6, 0x800, 0x2, 0x4, 0x6, 0x8e6, 0x4, 0x9, 0x92e1, 0x3, 0x1, 0x1ff, 0x1, 0xfffffff9, 0x3ff, 0x40, 0x1, 0xbd34, 0x5ec, 0x0, 0x1f14, 0x200, 0x0, 0x800, 0x3, 0x185, 0x401, 0x2c29, 0x0, 0x8, 0x7fffffff, 0x200, 0x401, 0x1000, 0x0, 0x3, 0x6, 0x956, 0x5, 0x4, 0x6, 0x8, 0x6, 0x6, 0x5, 0x9, 0x8, 0x0, 0x0, 0x6, 0x4, 0x413d, 0x7, 0x3f, 0x7, 0x6, 0x6, 0x5, 0x4, 0x0, 0x7, 0xd04, 0x0, 0x1, 0x4, 0x801, 0x5, 0x7, 0x2, 0x1000, 0x7, 0x7, 0x2, 0xffffffff, 0x1ff, 0xfffffffb, 0x3, 0x0, 0x8a, 0x4, 0x2, 0x9, 0x7f, 0xffff8000, 0xf4, 0x8, 0x6, 0x5c300, 0x6, 0x4, 0x200, 0x20, 0x2, 0x4d7, 0x3f, 0x0, 0x5, 0x7, 0x20, 0x3, 0x8, 0x3ff, 0x8, 0x46, 0x4, 0x1f, 0x1ff, 0xffffffff, 0x1, 0x1, 0x8bf00000, 0x8001, 0x3ff, 0x401, 0xfffffff8, 0x5, 0x4, 0x5, 0x5, 0x401, 0x7, 0xfffffff7, 0xfe4, 0x9, 0x333, 0x8, 0xdbbe, 0x4, 0x3, 0x816, 0x8000, 0xc76, 0x3, 0x10001, 0x5, 0x1, 0x146, 0x8000, 0x165cdf6b, 0x10000, 0x81, 0x9, 0xfffffffa, 0x4, 0x0, 0x0, 0xffff, 0x3, 0x7, 0xf9cd, 0xfff, 0x1, 0x2791, 0x53e7e0a6, 0x0, 0x9, 0x9, 0xa82b, 0x5, 0x4b, 0x8, 0x81, 0x1a76, 0xce2, 0xfffffffb, 0x1, 0x6, 0x0, 0xff, 0xf3d, 0x3, 0x2, 0xffffffe1, 0x4fc, 0x1, 0x3e4, 0x4, 0x2, 0xfffffff8, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0xdcfd, 0x0, 0x5, 0x1138, 0x200, 0x7fff, 0x0, 0x4, 0xfff, 0x100, 0x80, 0x0, 0xa00, 0x9, 0x0, 0x1, 0x6, 0x1000, 0x0, 0x3, 0x9, 0x5, 0x3ff, 0xc542, 0x87bb, 0x8001, 0x4, 0x5, 0xfffffffd, 0xaac6, 0x5, 0xdc81, 0x0, 0x2, 0x0, 0x7ff, 0x3, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5683}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x101, 0x7ff, 0x20, 0x200, 0x80, 0x3, 0x6, 0x80000001, 0x638, 0x9, 0xfffffffa, 0x1, 0xb8, 0xffff, 0xc9, 0xfffffff7, 0xebb1, 0x4, 0x0, 0x6, 0xfffffff7, 0x3, 0x0, 0x0, 0x400, 0x8001, 0x599, 0x9, 0x6, 0x5, 0x42, 0x7, 0xd9e, 0x1f, 0xfffffffd, 0xffffffff, 0x4, 0x8, 0x0, 0x3, 0x7ff, 0x9, 0x1ff, 0x0, 0xf5, 0x4, 0xfffffff9, 0x5, 0x9, 0x8, 0x8, 0x5c3, 0x6, 0x5, 0x0, 0x1, 0x3, 0x6, 0xffffffff, 0x9100, 0x7, 0x7, 0x81, 0xfd, 0x0, 0x8, 0x1f, 0x2, 0x8, 0x800, 0x8, 0x1, 0x2, 0xbde, 0x6e4, 0x6, 0x8, 0x10000, 0x3, 0x8ed1, 0x0, 0x800, 0x3ff, 0x4, 0x8, 0xf5, 0xfffffffe, 0x0, 0x707, 0xfffffffa, 0x3, 0x80000001, 0x1, 0x6, 0x5, 0x7fffffff, 0x2, 0xd4e9, 0x2, 0x6, 0x6, 0x10001, 0x2, 0x8001, 0x400, 0x9, 0x9, 0x7, 0x0, 0x10001, 0x200, 0x6, 0x0, 0x4, 0x4e, 0xffffff00, 0x1, 0x9, 0x5, 0x6, 0x5, 0x6, 0x401, 0xfff, 0x3, 0x80000000, 0x9, 0x7, 0x7fffffff, 0x5, 0x42ab8d98, 0x9, 0x422, 0x401, 0x8000, 0xffffff00, 0x2, 0x1, 0x0, 0x4, 0xff, 0x0, 0x1, 0x3, 0x2, 0x4, 0xfff, 0xfe3, 0x1000, 0x8, 0x6, 0xffffffff, 0x9, 0x10000, 0x6, 0x4, 0x9, 0x81, 0x1, 0x3, 0x7, 0x9, 0x1, 0x7, 0x9, 0x2, 0x4, 0x0, 0x7, 0x401, 0x9, 0xe1c5, 0x5, 0xa95, 0xeff, 0x4, 0x20, 0x9, 0x9, 0x9, 0x80000001, 0xe0000000, 0x9, 0x2b2e2c91, 0x256, 0xff, 0x200, 0x3, 0x1, 0x1, 0x4, 0x8, 0x9000000, 0xfffffff7, 0x4, 0x1, 0x0, 0x8000, 0x3ff, 0x5, 0x7, 0x6, 0xb2400000, 0xcf8b, 0x4, 0x5, 0x355ea519, 0xfffffffb, 0x80000000, 0xa8, 0x9, 0x2, 0xff, 0x9, 0x9, 0x7, 0x2, 0x5, 0x8753, 0x9, 0x400, 0x101, 0x80000000, 0x80000000, 0x7, 0x1f, 0x4, 0x6, 0x7, 0x6, 0x3, 0x9, 0x82ad, 0x20, 0x2, 0xa53f, 0x8, 0x8001, 0x3ff, 0xfff, 0x0, 0x2, 0x0, 0x7, 0x0, 0x7, 0xd50, 0x7f, 0x8001, 0x401, 0x400, 0x4, 0x80, 0x2]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x44, 0x2892, 0x10000, 0x8, 0xac2, 0x240, 0x7, 0x1f, 0x2, 0x1a19, 0x2cfb0853, 0x1000, 0x7, 0x6, 0x6, 0xfff, 0x6, 0x8f8, 0x9, 0x2, 0xdc50, 0x4, 0x6, 0x10000, 0x1ff, 0x5, 0x3, 0x3, 0x2, 0xf4, 0x9, 0x8001, 0x1525a94d, 0x6, 0x8, 0x9, 0xffffff5e, 0x5, 0x1, 0x2, 0x3, 0x4, 0x0, 0xe6, 0x3, 0x5, 0x9, 0x6, 0x9, 0x7f, 0x7, 0x10001, 0x8, 0x0, 0x92b2, 0x3f, 0x401, 0x4, 0x2, 0x80, 0x6, 0x10001, 0xffff, 0x6, 0xffff8dfb, 0x1f, 0xffffff81, 0xfffffff7, 0x8, 0x5, 0x3039, 0xf0d5, 0x3, 0x7, 0x7, 0x7, 0x80000001, 0x80000000, 0xbc21, 0x3, 0x61, 0x0, 0x1, 0x0, 0x2, 0x20, 0x100, 0x1f, 0x4, 0xa57, 0x2, 0xda, 0xffffff01, 0x1f, 0x1, 0x79, 0x7f, 0x401, 0xfffffff9, 0x5, 0x8, 0x400, 0x0, 0xffff, 0x8, 0x8, 0x1, 0xd68, 0xffffffff, 0x9, 0x39b4, 0x8, 0x80000001, 0x80, 0x4, 0x401, 0x1, 0xfffff871, 0x6, 0x1ff, 0xffffffff, 0x7, 0xfffffffd, 0xfffffe01, 0x6, 0x1, 0x7fff, 0x10000, 0x5, 0x1, 0x9f, 0x5, 0x8, 0x1, 0x5, 0x2, 0x200, 0x1000000, 0x100, 0x3f, 0x1, 0x0, 0x80, 0x24b01310, 0x7, 0x400, 0xffff, 0x101, 0x401, 0xf9a, 0x6, 0x7, 0x3, 0x5, 0x7ff, 0x1, 0x5, 0xffff, 0x2, 0x6, 0x4ac, 0x1ff, 0x2, 0x4, 0xf06, 0x7, 0x33d7b83e, 0x1, 0x7fffffff, 0xfff, 0xffffff07, 0x4b91, 0x9, 0x8, 0x2, 0x2, 0x9, 0x18, 0x10000, 0x8, 0x10000, 0x2, 0x8, 0x7, 0x3, 0x9, 0x2, 0x20, 0x3, 0x773, 0x10000, 0x3e, 0x2, 0xb7ea, 0xffff8001, 0x5, 0x0, 0x9b, 0xe9a5, 0xff, 0x80, 0x8, 0x1, 0x5, 0x8001, 0xff, 0x1, 0x8, 0x0, 0x5, 0x2, 0xffffff18, 0x7, 0xfffffffc, 0x8, 0x8001, 0x3, 0x5, 0x1, 0x4, 0x2, 0x2af, 0xe, 0x27, 0x6, 0x6, 0x9, 0x6, 0xc42, 0xb548457e, 0x9, 0x10001, 0x7c2, 0xfff, 0x6, 0x8, 0x1ff, 0x8, 0x0, 0xfc2, 0x80000000, 0x1, 0x8, 0xe9d, 0x401, 0x4, 0x3ff, 0x7fffffff, 0x2, 0x2, 0x6, 0x1, 0x1, 0x1000, 0x401, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7f, 0x6, 0x0, 0xe48, 0x9, 0x8e, 0xa87, 0x8, 0x9, 0x2, 0x3f, 0x101, 0xff, 0x8793, 0x5b9d, 0x5b6e1954, 0x9, 0x9, 0x9, 0x0, 0x7, 0x5, 0x9, 0x2, 0xfffff801, 0x3, 0xfff, 0x3, 0x3, 0x6, 0x4, 0x3, 0x1000, 0x5, 0x9, 0x10000, 0x5, 0xfffffc01, 0x6, 0x5, 0x1, 0x8, 0x4, 0x9, 0x5, 0x6, 0x8000, 0x5cc, 0x7, 0x3, 0x3, 0x10001, 0x9d, 0x5, 0x651, 0x1, 0x7, 0x0, 0x400, 0xc86, 0x1, 0xfffffff9, 0x4, 0x3, 0x7f, 0xd64, 0x10000, 0xfc1, 0x2, 0x8, 0x6, 0x5, 0x800, 0xa8, 0x6, 0x2, 0x100, 0x4, 0x9, 0x8, 0x5, 0x2, 0x1, 0xa8, 0x1, 0x4, 0x9, 0xfffeffff, 0x7f, 0x5, 0x0, 0x9, 0x8001, 0x8, 0x5, 0x0, 0x378, 0x0, 0x4, 0x80, 0x7, 0x2, 0x10000, 0x11, 0x1, 0x7, 0x8, 0x2, 0x1ff, 0x2, 0x0, 0x6ad7, 0x7fffffff, 0x54a9, 0x6ab, 0x427e, 0x3, 0x6, 0x5, 0x5, 0x7, 0x2, 0x4e6, 0x9, 0x2ecf, 0x81, 0x8001, 0x719, 0x6, 0x0, 0x8, 0xfa, 0x9, 0xb20, 0xb44, 0xfffffe00, 0x3, 0x7fff, 0x2, 0x0, 0x0, 0x3, 0x40000000, 0x8, 0x57d, 0x9, 0x0, 0x7, 0x1000, 0x800, 0x3ff, 0x2, 0x9, 0x9, 0xfff, 0x1, 0xff, 0x55cd, 0x7, 0x3, 0x1000, 0x7f5, 0x5, 0xddc8, 0xe47, 0x1, 0x0, 0x680, 0x3, 0x3ff, 0x3, 0x25, 0x8, 0x7fffffff, 0xba86, 0x4, 0x8, 0x10000, 0x3ff, 0x5, 0x5, 0x0, 0x6, 0x0, 0x4, 0x2, 0x7, 0xfffffffb, 0x80, 0xbe04ef03, 0x800, 0x0, 0xe5b0, 0x200, 0x6, 0xb04, 0x7, 0x6, 0x9, 0x5, 0x24000, 0x6c, 0x3, 0x10001, 0x4, 0x81, 0x2, 0x5, 0xffffffff, 0x28f92a7, 0xfff, 0x9, 0x1, 0xadb, 0x7ff, 0x5, 0x2, 0x81, 0x8, 0x6, 0x6, 0x4, 0x0, 0x0, 0xf5d9, 0x9, 0x4, 0x575, 0x2, 0x3ff, 0x800, 0x5, 0x8, 0x1f, 0x6, 0x7, 0xc0000000, 0x8, 0x1ff, 0x0, 0x7, 0x0, 0x5, 0xa45d, 0x2, 0x7fffffff, 0x7fff, 0x10001, 0x5, 0x4, 0x8001, 0x3, 0x1997, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7, 0x4184, 0x80, 0xa7, 0x2, 0x2, 0x0, 0x0, 0x10000, 0x9, 0x8001, 0x3, 0x2, 0x7, 0x3, 0x0, 0x3ff, 0xffffffff, 0x2bfb, 0xfffff357, 0x0, 0x2, 0x2, 0xffffffff, 0x64000, 0x0, 0xa942, 0x8, 0x1, 0x3, 0x1, 0x2, 0x9, 0x200, 0x6, 0x0, 0x3ff, 0x394, 0x8001, 0x1000, 0x1ff, 0x1000, 0x7, 0xff, 0x5, 0x9, 0x3, 0x1, 0x1b, 0x1, 0x6, 0x6, 0x7, 0xb0, 0x502f, 0x9, 0x4, 0x1, 0x5, 0x9, 0x2, 0x800, 0xaa0e, 0x100, 0x1, 0x1, 0xc407d87, 0x101, 0xd5ee0ba6, 0x1, 0xffff, 0x5, 0x1, 0x8, 0x100, 0x200, 0x8, 0x2, 0x3f, 0x0, 0xfffffffe, 0x2, 0x2, 0x4, 0xe7, 0xd556, 0x0, 0x400, 0x400, 0x9, 0xffffff5f, 0x5, 0x735, 0x0, 0x1, 0xfffffffe, 0x2, 0x6, 0x5, 0x3, 0x258, 0x5, 0x8000, 0x0, 0x178fb0e8, 0xecf, 0x200, 0x7f, 0x6756, 0xfff, 0x6, 0x9, 0xffffffff, 0x4, 0x10001, 0x232bbc06, 0x6e0f641d, 0x7f, 0x7, 0x0, 0x2, 0x80000001, 0xfffffffa, 0x10000000, 0x1a, 0x20, 0x81, 0x1, 0xda, 0xffffffff, 0x8, 0x400, 0x0, 0x3, 0x1, 0xffff94dc, 0xd5d, 0x8, 0x5, 0x5, 0xbf, 0xfffffff8, 0xb3, 0x2, 0x8, 0x0, 0xfffffffa, 0x9, 0x8, 0xf9b, 0x3ee0, 0x7, 0xfff, 0x7, 0x6, 0x80000000, 0x3, 0x17d8, 0x5a, 0x9, 0x3ff, 0x0, 0xff, 0x8001, 0x1, 0xffffff25, 0x80000000, 0x5, 0x2, 0xffffffff, 0x448, 0x9, 0x101, 0xff, 0x9, 0x8, 0x7, 0x4969, 0x1, 0x785d, 0x93d3, 0x1, 0x6, 0x8, 0xffffffff, 0x80, 0x3, 0xf2, 0x7dd7, 0x7c45, 0x3, 0x8001, 0x2, 0x800, 0x3b9, 0x80, 0x1, 0x20, 0xb1e1, 0x2, 0x100, 0xbc, 0x800, 0x4, 0x6, 0xfff, 0x3ff, 0x5, 0x0, 0x9, 0x80000000, 0x1000, 0x42, 0x7, 0x7ff, 0x6, 0x6, 0xb6, 0x4, 0x29db00, 0xfe, 0x8, 0xfffffffa, 0x51, 0x1ff, 0x15, 0x0, 0x2, 0x0, 0x2, 0x8, 0x22, 0x7fff, 0x4, 0x0, 0x1, 0x9, 0x2e, 0x7ff, 0x5, 0x895, 0x80, 0x81, 0x5, 0x8, 0x7, 0x0, 0x3ff, 0x8, 0x2cdb4ec2, 0x8001, 0x5, 0x5, 0x100, 0x20]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1f}]]}, {0x9d, 0x6, "6a27713313cedeccdb479efae25457461f4c454bd4cafc5606615457ef800797b32e1682f9fcaabe3e05900b9d54412ab5628c6690e4f5bd4d133018a937f6a631c307682c390aaba5c50d4e153375aa495f931996ad37baa43deadfea8fc5cc6d25d34322e47ddbacba0d8803bf207b45461d613be3b51e75141761c0dfa771cd4ff70c337818abbb6c5a512b583a60e94fbf14976a1a510e"}}}, @m_ife={0xa4, 0x12, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x1, 0xffffffffffffffff, 0x9}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7ff, 0x400, 0x7, 0x0, 0x4}}}, @TCA_IFE_SMAC={0xa, 0x4, @random="0c1253d363e0"}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xcf4, 0xf9a2, 0x10000000, 0xffffffc0, 0x92c2}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @random="fff16c52c94d"}]}, {0xf, 0x6, "99cd25cca321fce81adae0"}}}, @m_ife={0xd0, 0x8, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfc5b, 0x5, 0x20000000, 0x100, 0xaea3}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @random="fb249d88dda5"}]}, {0x98, 0x6, "18b7e49478cdd8bd71feed1b7e910b30349f8ed9c93371d13357731bac7b4eac0685f2726b61f19ad5a546033265f37cf939ab2b1ae0b0b520bf26ab0017144806ec7d41d64e7df2f53df6e5bcf9ca166441cf69c84146a45d84531145ebe5cdc21eac033ae02539b32c967b6a3dbdb18fea4b90d1591c4c040297d6850504d679f09abed5558c51eaed59697c5f0b84c8d4bbe5"}}}, @m_vlan={0xcc, 0x16, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x314b8af5, 0x4, 0x2, 0x6, 0x8}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x6a85, 0xffffffffffffffff, 0xeab, 0x9}, 0x2}}]}, {0x80, 0x6, "085026ee546f3d33d629781f7476f22f9948d13d3843169694622cf37ef8a27359443bfd91b521d2985a3ec53ebda24dfa4479b8ef949356d1cbf163c46746d219dd2e4191e2d9bf1cdd205fd74b6503657aca0075345791c551263846287f54a804987b5e4cda7aebf1170a0b46dea2438898d23a7c398b62754f28"}}}]}, @TCA_BASIC_POLICE={0x858, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0x2, 0x7, 0x3, 0x5, 0x7f, 0x20, 0x3, 0xa3, 0x81, 0xc0, 0x9, 0xfffffffc, 0x0, 0x3, 0x558, 0x3f, 0x4, 0x1, 0x3, 0x5, 0x3, 0x6, 0x0, 0xfe, 0x89f, 0x0, 0x5, 0x1980, 0x54d8, 0x1f5, 0x1ff, 0x2, 0xfffffff7, 0x4, 0x1, 0x7, 0x1, 0x8, 0x0, 0x9, 0x886, 0x40, 0x2, 0x3fc, 0x55e, 0x3, 0x7, 0xe83, 0x4, 0x8, 0xfffffffa, 0x1, 0x3, 0x89bc, 0x9, 0x9, 0x2, 0x80e, 0x7, 0x0, 0x38, 0x4, 0xff, 0xd55, 0x8, 0xfff, 0x4, 0x1, 0x6, 0x3, 0x4, 0x4, 0x101, 0xffffb6bb, 0x8, 0x2, 0x0, 0x3, 0x2, 0x4, 0x80, 0x8, 0x7, 0x0, 0x80000000, 0x3, 0x400, 0x8, 0x3f, 0x41e0c7f9, 0x86a, 0x0, 0x20, 0x2, 0x6, 0x3ff, 0x8, 0x5, 0x6, 0x0, 0xfffffffe, 0x80000000, 0xb64, 0xfffffffc, 0x0, 0x3ff, 0x2f6, 0x5, 0x11, 0x100, 0x1f, 0x2, 0x1, 0xfff, 0x7, 0x9, 0x0, 0x1, 0x4, 0xd86d, 0x4, 0x9, 0x800, 0x2, 0x80000001, 0x0, 0xa93, 0x6, 0x10000, 0x5, 0x3, 0x2, 0x800, 0x57f4, 0x1, 0x6cdf, 0xed, 0x3ff, 0x401, 0x4, 0x4, 0x10000, 0xae, 0x3, 0x1, 0x9, 0x8, 0x4, 0x0, 0x6, 0x800, 0x3, 0x5, 0x0, 0x4, 0xf3, 0x20, 0xddae, 0x7, 0x8, 0xdc58, 0x7, 0x1, 0x2, 0x3, 0x20, 0x3, 0x7fffffff, 0x1, 0xaf65, 0x40000000, 0x6, 0x81, 0x7, 0x4a94, 0x9, 0x9053, 0x401, 0x0, 0x80000000, 0xfffff580, 0x1, 0x1000, 0x0, 0x4, 0x1, 0x3, 0x3, 0x9, 0x1, 0x4, 0x101, 0x8, 0x9, 0x5, 0x3, 0x8000, 0x0, 0x9, 0x4c334343, 0x0, 0x4, 0xff, 0x2a7f, 0x18ac18d6, 0x8, 0x1, 0x40, 0xfffffff9, 0x7, 0x9, 0x9, 0x1, 0x400, 0x668d, 0x10001, 0x76, 0x7fff, 0x8, 0x100, 0x20, 0x5, 0x7, 0x7fff, 0x0, 0x8001, 0xffffffff, 0x3f, 0x0, 0x3, 0x7, 0x1000, 0x5, 0x6, 0x101, 0xff, 0x2, 0x70c, 0x6, 0x7, 0xa0f, 0x7, 0x8, 0x8, 0x40, 0x6, 0x4, 0x5, 0x9, 0x8, 0x80000001, 0x5, 0x6, 0x73]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x400}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffa73}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x9, 0x9, 0x5, 0x81, 0x5079, 0x8, 0x9e, 0x9, 0x2, 0xfffffffc, 0x1ff, 0x3, 0x69, 0x9, 0x7fffffff, 0x3, 0x8, 0x3, 0xffffffff, 0xfffffe00, 0x3f, 0x3, 0x5d, 0x0, 0x400, 0x7ff, 0x87, 0x1, 0x3, 0x5, 0xffffff2d, 0x3, 0x971a, 0x81, 0x0, 0x4, 0x2, 0x3, 0x3, 0x7, 0x7, 0x6, 0x1ff, 0x3, 0x6, 0x10000, 0x8, 0xa07, 0x5, 0x6, 0xfffffffb, 0x81, 0x2, 0x9, 0x3c17, 0x1, 0x1, 0x7, 0x0, 0xfffffff9, 0x9, 0x4c2, 0x9, 0x8001, 0x7, 0x401, 0x6, 0x4, 0x40f, 0x7, 0x3, 0x7ff, 0x4, 0x8, 0x8e, 0x2, 0x8, 0x7, 0x8000, 0x4, 0x5, 0x4, 0x1, 0x7f, 0x769, 0xfffffc01, 0xfffffff9, 0x6, 0x2, 0xd8fe, 0x1d25, 0x492, 0x1, 0x80000000, 0x7, 0x200, 0xa6ab, 0x8, 0x6, 0x7, 0xfff, 0x1, 0x1ff, 0x9, 0x5, 0x3f, 0x7, 0x6, 0xffff0000, 0x5, 0x3, 0x1ff, 0x2, 0x100, 0x8001, 0x3, 0x4ea, 0xff, 0x80000001, 0x3, 0x3, 0x0, 0xae1, 0xfff, 0x165, 0x7f, 0x2, 0x5, 0xffffffff, 0xffff8001, 0x1, 0x9, 0xffffffff, 0x2, 0x4, 0x0, 0x6, 0x8b671d5, 0x7fffffff, 0x1, 0xb53, 0x7fffffff, 0xfffffff9, 0xfffff559, 0x746, 0x6, 0x1ff, 0x1f2, 0x9, 0x3dc3, 0xfffffff7, 0x2, 0xeff, 0x47, 0x2, 0x2, 0x0, 0x6, 0xfffffffe, 0x4, 0x3, 0xfff, 0x352a, 0x1, 0x3, 0xffff, 0x3, 0x80000001, 0x1, 0x7, 0x2, 0x5, 0x200, 0x100, 0x0, 0x80000000, 0x4, 0x2, 0x7ff, 0x0, 0x3ff, 0x1ff, 0xffff, 0x24000000, 0x6, 0x401, 0x3f, 0x8000, 0x7, 0x4, 0x6, 0x3, 0x1, 0x8001, 0x91, 0x9, 0x10000, 0x2, 0x20, 0x4, 0x598b, 0x6, 0x80000000, 0xfffffe01, 0x9, 0x3ff, 0xfffffeff, 0x1, 0xfffffff9, 0x7fffffff, 0x3, 0x1ff, 0x4, 0xb9, 0x8, 0x919a, 0x20, 0x7fffffff, 0x3, 0x6, 0x80000001, 0xfffffff7, 0x80, 0x9, 0x4, 0x7a7cb051, 0x0, 0x9, 0x1, 0x1f, 0x0, 0x80000001, 0x1, 0x2, 0x1f, 0xac6, 0x1f74d67f, 0x4, 0x0, 0x101, 0x7fff, 0x198, 0x6, 0x7, 0x0, 0x1, 0x80000001, 0x3e0, 0x9, 0xabe, 0x9, 0x0, 0x400, 0x3a, 0x7fffffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xfff2}}, @TCA_BASIC_EMATCHES={0x3bc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4a4}}, @TCA_EMATCH_TREE_LIST={0x120, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4}, {0x3, 0x0, 0x4000, 0x1, 0x0, 0x1, 0x2}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x2000}, [@TCA_EM_META_RVALUE={0x6, 0x3, [@TCF_META_TYPE_VAR="8c5d"]}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x93}, {0x1, 0x9, 0x1}}}]}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x32bf}, [@TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="f36db1e93be0072034e5"]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x14, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6955, 0x8, 0x2}, {0x3, 0x1, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x101, 0x3, 0x1}, {0xfff9, 0x32, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x8, 0x1}, {0x4, 0x8f, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x0, 0x8, 0x3}, {0x1, 0x5, 0x2}}}, @TCF_EM_CONTAINER={0x70, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x1ff}, "abd233ba6188371779523e69a4aa1b1ce1ad605f8fd02110f7b1b1aa367742871f644b42427894a3def42fc913fb22d9b1fc8ec0ffde65e7935383af5670810fe93250a21fb3e3714ccefafefab797213c6e7dfd7c9ff5f715ca1066bbf2804f9dc2"}}]}, @TCA_EMATCH_TREE_LIST={0x80, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x8}, [@TCA_EM_META_LVALUE={0x26, 0x2, [@TCF_META_TYPE_VAR="a3", @TCF_META_TYPE_VAR="65a4b1b7", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="975a1838121b", @TCF_META_TYPE_VAR='W', @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="f615d0fa", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8318b38710a5"]}, @TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_VAR="04470feddc7a1be1", @TCF_META_TYPE_VAR="8a72da", @TCF_META_TYPE_VAR="83d175", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="eb93dd5b34362c91fd", @TCF_META_TYPE_VAR="fb4c5402e3574e1a6f"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="78a6", @TCF_META_TYPE_VAR="027879", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR='Sg', @TCF_META_TYPE_VAR="12", @TCF_META_TYPE_VAR="a8f457f82ba5f20e0b", @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR]}]}}]}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x8, 0x1, 0x2}, {0x0, 0x9e, 0x1, 0x2, 0x7, 0x3}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0xa, 0x2, 0x100}, {0xfae, 0x6, 0x2, "014c26d31d0b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1cc, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x7, 0x9, 0x200}, [@TCA_EM_IPT_HOOK={0x8}]}}, @TCF_EM_META={0x5c, 0x1, 0x0, 0x0, {{0xfe01}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="dfc45c9613"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x7, 0x2}, {0x1, 0x7f}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x9, 0x1}, {0xfc00, 0x7, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa34, 0x80, 0x1}, {0x8, 0x8, 0x3}}}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5365891d38075b", @TCF_META_TYPE_VAR="e909becc2600"]}]}}, @TCF_EM_IPT={0xb0, 0x3, 0x0, 0x0, {{0x8, 0x9, 0x800}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0x62, 0x5, "e51fc29eddad9ef5d1717c77dbf51f1cc8d5954925e6e60ec9d0462a464670fee0b600da53563db1fb43b4edc239c8fabc531af4cb53bd096f435eddbb691cfc5f70400c16c285bcf3cb319e136795744eec6d84ad6377319cce2cc5520c"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_NAME={0xb, 0x2, 'policy\x00'}]}}, @TCF_EM_CONTAINER={0x8c, 0x1, 0x0, 0x0, {{0x5, 0x0, 0xad93}, "0875a80c02257b60c8968651a8f882f90d72f895783711dc952917f336221376e011829933eac9fd239d8334e1344f48d23286c697a8f492a4c3ebf602accd111e8bbf8c096dc6a39633b455653efcd3b7872b5eaed362772d13b1dea68ee9d9de480bc5100bc61afd993918f8cfb929fabc80b1b9425a279c6d7beea3fb"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x4}, {0x2, 0x6, 0x2, 0x8}}}]}]}]}}]}, 0x66e0}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="b5c664bd67b42bcbd1671d00ed26f04729f9382fecad05351528be66d12d49dc0cfcd2c6d3f5347621ee5f4d5485270111a06735eff411aa33d6af31a67951163f3cdbc7f6883520ee76e05e12d0da374e4f44f22704b5f60d51721b3abaf838281ba5e13e0e9df8ca69bb98e14efafbd2ba561f16f617d0dae43104277de51321396e40827d11ab41415d1b03bde1f216d3adfccd2d5d", 0x97, 0x80, &(0x7f0000000000)={0x11, 0x6, r4, 0x1, 0x1, 0x6, @broadcast}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:49 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4), 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:49 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x0) [ 726.393397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 20:55:49 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = dup(r2) setsockopt$packet_add_memb(r3, 0x107, 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3100001c9aaaf01406aea07eb28c0752db6a7ae2f0c1c72840192dde1275faab", @ANYRES16=r4, @ANYBLOB="080029ffff000000000000000000080007007f000001120001007573a40fc267790c89300000000000004e6fa88c79f330cf4876ae9c32"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48057d777510b1e7149b14bca6e9000000", @ANYRES16=r4, @ANYBLOB="02002abd7000fedbdf250500000008000c0000000000080002000500000006000b00090000000800080000000004120001002f6465762f736e617073686f74000000"], 0x48}}, 0x84) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000006) write(r0, &(0x7f0000000180)="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", 0xfc) [ 726.505409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 [ 726.537338] audit: type=1800 audit(1581972949.405:1033): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17572 res=0 [ 726.582765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=28822 comm=syz-executor.1 20:55:49 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:49 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x793bad25, 0x7, 0x4fd, 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)={r5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400220) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:49 executing program 4: r0 = socket(0x10, 0x802, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 20:55:49 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:49 executing program 4: r0 = socket(0x10, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', r1}) write(r0, &(0x7f0000000180)="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", 0xfc) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000280)={0xa8, 0x4, 0x1d, 0x9, 0x7fffffff, 0x8}) 20:55:49 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:49 executing program 2: r0 = open(&(0x7f0000000000)='./file0\x00', 0x3, 0x122) recvfrom$l2tp6(r0, &(0x7f0000000140)=""/251, 0xfb, 0x12100, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x20) r1 = epoll_create1(0x0) r2 = timerfd_create(0x5, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = dup3(r5, r1, 0x0) write$P9_RRENAME(r7, &(0x7f0000000480)={0x7, 0x15, 0xa}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x100) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000000c0)={0x1a8002015}) r9 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r11 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x4000000000010046) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000380)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r11, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x40, r13, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008080}, 0x80) sendfile(r9, r10, 0x0, 0x4000000000010046) write$cgroup_subtree(r10, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) faccessat(r10, &(0x7f0000000240)='./file0\x00', 0x20, 0x500) [ 727.004197] Unknown ioctl 1074029064 [ 727.191163] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:50 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:50 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffff7f00000000"], 0x8) write(r2, &(0x7f0000000000)="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", 0xfc) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr="1cdf6d8a14318249b54a8d6de41c045d"}}}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r4, 0x5, 0x401, 0x7fff, 0x9, 0x8}, &(0x7f00000001c0)=0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={r5, 0x7}, 0x8) 20:55:50 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) prctl$PR_GET_SECCOMP(0x15) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000140)={0xc2, ""/194}) 20:55:50 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:50 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x0) 20:55:50 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x80000000}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x12180, 0x0) mq_getsetattr(r3, &(0x7f0000000100)={0x5, 0x40, 0x1}, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:50 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:50 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000000)={0x1, 0x86, 0x5, 0x5, 0x2}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f00000001c0)={'filter\x00'}, &(0x7f0000000240)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r4, 0x400}, 0x8) [ 727.424029] audit: type=1800 audit(1581972950.295:1034): pid=28932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17751 res=0 20:55:50 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x1, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000080)={0x1, 0x8, 0x1f, 0xfff, 0x1a, 'i=&\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:50 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:50 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:50 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000140)={0x9b0000, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980928, 0xfffffffb, [], @p_u16=&(0x7f0000000000)=0x8001}}) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 728.125206] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:51 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f00000001c0)={0x0, 0x8, 0x7, 0x101, 0x5, 0x6}) eventfd2(0x6, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @loopback}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044810}, 0x4040) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000}, 0x0, 0x2, r0, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:51 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:51 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x0) 20:55:51 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1e9080, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) 20:55:51 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f00000000c0)={0x12800201e}) 20:55:51 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x6953, 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 728.473527] audit: type=1800 audit(1581972951.345:1035): pid=28976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17750 res=0 20:55:51 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000004e40)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000004f00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x1c, r1, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40084) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000280)="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", 0xfe) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000004f80)={0x9f0000, 0x3, 0x7fff, 0xffffffffffffffff, 0x0, &(0x7f0000004f40)={0xa00001, 0x3ff, [], @value64=0x5}}) accept$ax25(r3, &(0x7f0000004fc0)={{0x3, @default}, [@default, @bcast, @rose, @remote, @default, @netrom, @rose]}, &(0x7f0000005040)=0x48) r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) getsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000003080)={{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000005080)=0x32) sendmmsg(r4, &(0x7f0000004d00)=[{{&(0x7f0000000000)=@can={0x1d, r6}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)='o', 0x1}, {&(0x7f00000000c0)="b886290069539c3d4a83a90a111f866af8ad594b606c6bf25c988ec3df516b05cf5f3a2e27a6243b44efe9c96b38197bedd7e7c2d0f13f0f182eaeb04d17867d62bc5d41f841568f59a4301389cb705ff96f439a1e8d010148812ec50b9a256621bac738e62e6ae59457aab87ca6fb7f4a941acef14919478a22895d4126852734f3a89e3f4b47886f6e885513960e2c8221b8357c59df8d547e6736b4173a0d4d5e4d2393d2a46ecbf2972569e9d0c82b014724c5a2c13f69", 0xb9}, {&(0x7f0000000380)="f370a897e323feb39a5ae61af5e1bfe13f69e6aa871a5b81b07559d6f7aa6d2fe5f9431f665036361b3d9f92d2d6d4052e8dc62e7c31aafdc6106b909cddc862b26d662f52cc00ce52b81cdb09ba328829a6cc7da166da4a3504c1f62e1bf254b34ebc69d6e0103656b2562a1e29e9c64abfce018fa34df6a31e7776a326b9714b76e9e5736ea2d1a370238204d36fdddf834444fef63679960b75f0b43e917d8a1962ff4635ec83e659b442feffe7819e3f64410a6b1d136062a45b1de03c4b366996f3ef1d8665e742c0f68d490dd276a106d7202bfa7a7c3f20c59be6032b208a3521802568ca64ae9104d5aa2cf334a48461cfc5e518f779de83b443860b208746c64bbab61b139ce9f335bbf6b8cd1f97e78da9ed5428aa42d123139c6849780a0e22425e83ff498f665b6777856efc64d4c914333e02a34d106c9e77850ca19525e40d85ae814f54a2b127f3953cb3b94f6c675f0e860a7eb8e52dc95e223591f9a5f6399f220455abd19d62d3217cff13690dcfe631c770b5841f8d855e6601e5e52a67a72914ebaf5762f6e06c8fd07f3d021695944f81f44483d4de587b3dfcca27f79fcc3249bf735d49a39c10845bac9f804def514b10db8cc2c6d3094433a1459a44ba859de84b07a9a88350e484cbd7e056562751d8253cfa5be9fd1f69937e6cf2bbd2ce7a69cbf98df690e92e90c3c0865766afda86036f378d590ba61c97fecb46615f72db5efc03b21c06905a6689a7642de47316be1937de5347ccdb36472c9f6f33b13fac68b0fe58a48d30db78dbddded6e4e5c29d2c9ca809b1331637c611a711180204c4e16edc69c1272c314a50438fbd31fbece705e54a9d726b1af9686d24739aa50f08c809e018130177e9147cdb4c553ecc47cc659c6664a043eb24d05a428c5924bb1225957d1790272db794a4888d1fc5a84dd3be224b3dd0694eb02a8aaf760bfe8524f8de63a5722da48d2977db66b2fcf1597a5a3bbdd5d7ff467b6939c4530d85a10ad4d7ee3c3d6231fc410e0478f51e6d3558f26ea983c77aa956ab941ad9df2e411d60caf703fe30c382b9fb4884a6598f2f647d47a6e00ba9adda6d850d76f29b151139ab5f2deabc7d5217aa326c4910f6aee0cb71ea242472bd239090d9e52b67f8d5b0c46cc034ce9743d7893a347a25b299a5dc896fe3ac8f11b5d1d0200ad976182e2e40ef2bc55b890fe468b5a3b57cdd4745e73937c47928b4ba069ccdd8475fbf42a4ab3e4887360d5981d217025b72847633a4e236b3cdc33b44313a657b97de468f71e0c7e103de305da84a7a8a9c3ea97d0b3655b080b4025c07222b89aa4c5673cc6910b879d52e34161e9dd59c459432f939fa143d39d379f16ce3670ba4069f70fc0089c749b2748687f0fe3e9665524de153a405e5e584eeec735a09033dd2486feed9807372541c2b0c45576ac33547f036e0029ee5942ab43ccee5ca37f72c1c843a9d335817bb253c5bac7d65e4cbd30884fcc02d8351cddbcd8e3722983bfc49aeb77f7a8df84ebee665c86c973a3a9e9a91d0cd1a23630be87220fc4338496ab0fe48432bdcc6267174e37590a0620624588cc2006f45fd1b0585ac72cbad4d829260920d4d69a90f8e8c5eb2d75c7ef4efe60cb1266048ddd44e62550a89c7f951f960e34de26d7cb35eefeda089e3cba5e44d0dc76972a7bce68eec0cc968519c67b9e8a6a59496a4a4b4c4983f03b5c7829d38142f329f4c865a100d468e38e08506391657d183aaf7c8d6f9b28859ad835cd70a039e80266c4ef9f7d56e7369ae32b8421137b02a7351eefcd31e64e57ff8974dfb8eb1b7840e515ebfcb9c92ff8f3e0e85effaa4bcca7d739556498eabb9fa218ffd2b97eadf96e10de20cfdf1de9bb9a9c0497611ff9d4191a8dec8915ea8cf16ae89dd68c69d5abdf399e3157627a952c78830180008ece624d7360cbf35c6f2d8601cd411604d1eb51ece8bf90b1065f4dee6766fd0963e6a701323397838b5617ec052f91ee6a6f4c1cc7920412b4b12e182b0d7d139b618d8ae22ca80ee275985abe29fdf1966e56ddb8a4c02b17ce64fee01cec823d0429005566d56b57fecf456e6495f02e0c639c32003704f168ba524c3bafef244f95cfc1cc937747cd26861f1863ab7c0948c37dee00522848e3abfcfe95a2f4c86ee276b0a3adb6e9be2fd81e71e570c8b973914b30fb5ebd12bf74cb6088a59d309d6667980abf2ecfb9eab5b3a7a731e1d9340203f81118e3bc1fc3c2d7735b1e7f1e275cc872c04ca4db4e4480c2f6b28513be67bd4db5b06f3a19e0e8e909df637c8aaa1dbe621ac5267102c257121c20b8f237b5a034d85dd82b9dd3455a3b1defc0e4ad9ec338215090eaacddfec21f08db132c6f79bc6462cea3359854185919a9343a4363485017ff4101ba3671721f24ea6471598ce6920723f411f8a3df99d8bbc48ae97ecd49b739a757153d5f09864bbbf5e8f7b81b59820bc80d5b61fd0d229d097f45ff38618c488ba3d4a555c00171ae1f885c751de27c49b8c397084eca86f942b4a214ebcf523989e2256e153b0e06f053f87b2457f5d5ac2531ad74cc73fe78a1db2515cc44f1991b48edda08fd87c7597f2678254ed03cccca0f0172a432092b4a70ff53303e6a81b95249bb8debfdd2e3d9fa2e01b2a9450a74ad23376628d128b02f2fdcd5a2d30f5c707b927cbe0c6681de583c27bbaaf6dc48a450b572ee46fbd199aea1661a0a3bc97c7f49936aa9415a6503c75beb5b24e3680497580792f0dca44f14c1e249b08c13d966bbf649e0188e0f7407a9d24e12715992075b5a27b81bf5df63d58c8f3a99b213c8c7e62436b0ad8dfe266f82a109c7021dd4fcd7ad47fc7b042a22f4011fd75e3787610cb58517ba093ec6d1fddee3e7467a3676630f88da90867c4bd869d2555e31a4cef16e0c66528a479c4370930cc645b26d0124860249486731d479cddca8daee06c504f0948758ed05814140babe5d78879a23915818f03aa81f539aed25a51849169258089d4cf869f5f76277aa1daaf24bdf9eda6c2ce655a5a871f478d845f420a7d56a16303976e48b3ab14c77f71c4575ff6e1984eef8d040c579993efe1abea91cf9bfe538319891ef4f863835e785db280a79e10f099c90a5ca47c731acd1c58d48f4256ed45aa9d23b81711cbae2ead511802852d475c8218e6a553375b58b51400a81b54d73e828855bfa28871ee39e9c501d2f3a95dd7940ce8247cb7ae2d040836d43cc384b534a9697af604dc73f5e2b8b4debcc62504d742d1c4d9a5721717e702054f7ace4bbd41b8b5c08a8c51193a193ddd7ff768bf47e510bff1cec836dbb45646471833d2298035f930d80a4693caead16f2ff60431ac2867a066d4a1bb0088962a64cdda1d7c9f41878dbe1fac2bb0da503fe62cba288cf5a41b54b0f9dca5b122996faa653fd6bc065996e756f2e037fe213020acb9e7f3194562c2ad393e06b8472ce94e3bffd6dfee7777b793771fd268ddd127a122015978dd15f8465bc2cc406ce9b707750dcae9b202bf381ef4fed269047e802eb032f0280cc8704ab78d67da46cb141050f642cc76a14bd8eb9f331bbeff53b72ec22baea87ab4202929a64d1485173246fc9f79232dd1ddfe001a20f30d077c7ee4d3b37080dc9506d15f45798ce54c469903695470b0f5aeeb9b0bd83ba4fb21ca626c338033444d7af019450e1560e43eb87f0bd80bf46743bcfbac48394b8d4bab799d3301eac8bfaea35da79813595f2d10dd097fbe0e344fbab0f4696cb6214ef3e7c325efe8e3810c4a87e0f89e3d053fe9366dfaec4d0063fc5946ac260c10a20c75274af54b09cc15f83532892d2fc6f1c658bb33406619863bd3cc69fc5f784c473d33d795f9e27fabd7c6e0fa471f9fe35da1b54aec87fa6e1649808b208b160557a667a8aae63083f045861028d2c15ab7fe4ec3e4016e36acc0fbe1c5decac92465610a932c7f415ecc14e143d24db86a4de933864bc988a0e54e9fd12fbc7a1a16879b23d33805d9b6aa2c36ecb6f6ad24f288e946eaccc340a4fbad031170c587343073f0ca7ac416ea5ab4276d0573dca2240efc016a8bcd0e1243c1b5df15ce781d786564273f3d2800408e315112bdb0edc485e52e6c72b8cb7745f8df0fce38dd7f0cfb68a92af64373672e0001026fdf4b40533098a0ea6d063c1b9d8db3410581d28d7d8e40dcff165636d660f8ba25410dfdc2209dd2f002d082f24eefe6980d403603db1454f6ba7f2477f71783167c259ca738cc6afb4ff7187c880fc34eb996ed3a45d250da2108e108e68ea488d8ca92ea6be45ecb72eb7ffb98beb696efce50a935839fe9583d955d414337cae7645320645f258dbe59cb94132d1a2aa07002d1fdadaf3852d3eff4980f155a052751b93489e89b5542b4264064b15a633011ffdd1336e6c723a45d49b126674c31f01e31f3d915095ca222259d0648722281199cd1c9ae8b67ee86bc13ce933d6c736ca3be22fbb4b00e0ee7188f10323e11cb7ab20bbc34ccb6a8d5bdb9d4e95848a064cbf458afa6e861454e7c5ff9914f69907ddea2ec11142691f4f7fe002e1ac7c91b8b8878b38a38c128b868c89fb596d57afd0000dfda02b05d233552be35a06f9236a2e9a1434966e0fb0523c7ad7da0d709703b382e8676755cc3b2b6ef34e66bde607d2d7e0853dcdaae55edc3c81df4118d9264b2d8b7ccfe1caf760923769e7fff61a484d39118d930ac66102be6445a6cac5e3c2935c87706b19ade191b7e38d0c368d9469b00b7bf4035ab42febb9a116d179d6c248e28955bd166bdbfd8f4fcc591ecc9c2abbbba93cb734eea46d41ce857140d6f0fd18c933baa22feeb709add48e1099d44aef16676724c224dea58e76aa6bc32daa079561d0ad40b1eaeb9bf463d7b3009ee2dc5b3d20cb64f25a9801dac5c3ee7738a5cfafcda369f8f2263a1f029f40a116f6465555a05f11ccc16aa059cf672157cedaecd22098e457446f8bfe9d1e83ba3424e27deca65d5aa0a18a2444cd6c0474576f7451d8a440fac56d5bb39b87ade9540337d74c26af4b7b304df000d021cbc52b0e465f0e4145e155600c79d640c5de679e538ca953a7e851b7beb142f5555490e49f7513fa964c5dac538f917319c9fd424eb6b585ad9a471c0d440888f8ad32016265d860dfded13362ada241764ab7a9c405fc24c395aef2e0cfa75a31ee7ecd7ad0fd39376b4eb273a8a3971fc960ca8cfae23c36dcc3c7a18b39eb319b82fa6d50be8409b9c91e721e43403a9681de8e7420576dc64a4862c57703b5eb5d204008f652f05223fd2f94430e5adde1499ac004d1b895228ad3cc39e4fdcd7d1f81827ecd17d24b8edb4858248bafe7948d5154a7a40fca194a78bbc24fb8aee8caabebe8450f279e792c935b9d995df88c3fc2d3021c17d67b031b67b0cb007fc99004ae3a841ecc607b875cbbb72e9865e62f0e5f43817075eead3b7cb9286e8776f6d7fdcc1cf825be61a521c02c6af2001c27ae2924c513b95bdcae88cd3ba8fcaccd68857adc49daeeedd7d4e9b3d0b38ea1971afc5ca0229f7d48e6ecff13ac05e23f1bd2d8046e62a21092f12d21c077c80f2b2dd21f0b290eb0cdbaf2727087fe72b4712d77ad073dfe9c5fb2d61701d56573808b576497990d50f25dcc0dc3ecb08c92e6632e8110306d104bc4ad5ac4d861a2fafe2cad1c421580013841d9a2a636b5bc5f1ebb505c64e23f4460380d43c24e0ebc755fed9", 0x1000}], 0x3, &(0x7f0000001380)=[{0xb0, 0x111, 0x4, "96b881d8cd97a4dbcf683ea2fd4eb7cf065391b4d5701627521e91d211eb7272c1a11be1620a0cedb6cc618eaddee2381d3462798994f214a3d637ddb322e8f09a8d1505f271514e4c1977977f051b591c2e60c91448e43a64116fd1b84e8609b674530a1b0a477dfabf848a8d36add29fcaaa302e32002def4d492ec8b08c68673654bb075307bcd0fbdda90d391995763b806b187809245bb1e046cc"}, {0x78, 0x10e, 0xcb0, "588b9d07e6170360feb209db218ae87d1a436b6e328f9a61de3c4fab663c82297825f8f73b61a78b30ebf3a9b1cc1e682202714269391b3cce5a2e01cfc1a8e008f7a0e67479909fcebdf5f5f9002f431c70cd0b02cffc59a74283adbbc86dfaab6f"}, {0xe8, 0x10f, 0x0, "983440fe6d60e1cf48fcffec016fc86f1c16756da8e3fabf283511117df2b35a2334da884a85469a9267bb66ef61f3d169075f1e17337f47c973acbe88a0f37e1b100cd16a69116698e48ed507f5a99d0be0679532304e20feb7c03180031118a347c8de67c676533e66476a861c1ab490631ed5418245cf0f773b1e01e741f0cb772950d79f799095ffafc8588332c7990be6d69373921db4acd7d1ccb95e9b8f656056ebb03862a49506e1de4c4e47e75a7501eec90936715c866fef4c0b41e6279ba61a3553793e218bc9945ffdc5c5b9"}, {0x68, 0x101, 0x7598, "28d8418f0c4f09786044ec6f8994b82357691d859b547882814b498c2eb768606e97073803749dcb368c3911d8e83b671d6de08e84888f91b113cdc30d5a6fdbf43ab1a0d1143ec0b114ea16d7cc15a7a026b4afc46e"}, {0x90, 0x104, 0x5, "39edd569de95ab50e45f2b2e975637985aeb784a7367b8c8369e382089dd66bfc55efff867441cc093c058db12e20e1d055a14296c15a4588c5c9baae40fb10cc9343955b2f4a42dbfa9045124f458933e1890a0e756a494e9b12e0f916dcb1601fd1c55a74cc118276a202bdbe7c3a6188a24e4e078e6e634"}, {0xb8, 0x113, 0x7, "bf30b77a969ed893db2af79f13fdb7227850286f6c0eb45d0b34add807ea216b2ae5274ef6ad3a00f79229aaa5e9a83a991ba956f08f64a5ea229370daae3fe638c906c3ab121cac27c87e63ce9cf0c07f5efb6cd82cde176afdcb92ed343bd60391f6caf9cbcd4f9c1e3b5b3f9d9d1ab99771fab33941b3b9d3cdc10fa8cf69d01f927a68015e420dd74f61ef42a6e881d943995079f23042654228d0cc9beae6aa553700c436"}, {0xb8, 0x103, 0x9, "dc610345f5a4d2d6cec63d3151e0e35eafb3af37bf48c28a0bd8e11a1328525089313b6ea16c678df1177374a34ae9fa0af8bd3c79788636053a0ad7f769924e86f56cc0cfe89ca12eedff67eee1688caa56cc254d7cade6ce2cc00eb292ace8417587890ddaf794c26ce76b8a2607fa17c9b8046cbe7db68f66747212d0f7fe9d774502a3850cccb1f1c4390a4aff2649540cfb869645833670da57352341d502d23c3508998b9c"}], 0x478}}, {{&(0x7f00000001c0)=@ll={0x11, 0xf3, 0x0, 0x1, 0x1, 0x6, @remote}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000240)}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="8d990cbc324e1c668ce71f6489ced7bd667d2b2ab6d1b3d00921718af90ffc6eaa9859055a16cf66e4", 0x29}, {&(0x7f0000002840)="7f8c40aca61660964b74b068ada7dca5d87f597fbae1a4e05299ad3b5ba2873b27177f0d35cb8cbc8e63d4661d409a8152af43bdb8d5f88d07", 0x39}, {&(0x7f0000002880)="800a5262310b2d7f2a47be56456f6e558dfe32421e3b352df5dff781ee2ac0bdf8f5899820ec272da2dd8a8da2efb73bf04700317741deb5e3f127f5e9779ceea69094e75fa854a7504ebebd084943da4373b709723488c97b503dc7ebb3e7c8d2a4a18700f7292bc0b7e79b2c2a91d258968b9e00d96690d0346502a73fd8d092cc9e2daf7c9b221ae6a20b2ea4998b507c7e589f", 0x95}, {&(0x7f0000002940)="6709e977e433e5217e8e700174390fcbf941a7f7d82b55cb7f476f262a0026163418b47d6d604b7bb376ef0008d6b4dba441de581dd7c77a817ccf92003dd2e5cf74b42ddf6cb9ea033c", 0x4a}, {&(0x7f00000029c0)="f24a290522def00fedd9ad980b9642f2354cd8577b89a33aad1debbfcb1e831f90ad73d8b2d6ea0a91dadb1b8982799c04bcf5024c4743b4f71387323c5023bd3b37b90c741fca1af31901d0560a2a0b3ddd6d246f5021ae1af20085e606f70953be6f93f8d509925a9377609a13dbb61fab82791871e571ca3a0103b474810d8cfaca19c6480c69fff22b5e75cf74f2bee995cd940bfe7d452147340623bdb945ad8a903efb3fe9ce7b7d00b54a6032cc7e38587473511e", 0xb8}], 0x7}}, {{&(0x7f0000002b00)=@pptp={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002b80)='ql', 0x2}, {&(0x7f0000002bc0)="c954a06e641cd7ce23499b1a1a14b14ccdb396ac32838e7fa65e6e781beeae793216930803ca1128863f06d506ff3be2df347da11fc8a88db61bd7c312de113f2c546695b86f1f10c9f3b35582a64075ee7d270d305517921cff580b31b73000d9f8be18b4c20106ddb0630c62e293b76560c12e0fe129a317bbf29bb0547164c72e74a458923241", 0x88}, {&(0x7f0000002c80)="38b02bdf8582800f401f6858a64d1176448b85", 0x13}], 0x3, &(0x7f0000002d00)=[{0xe8, 0x118, 0x3, "c9386fb654e020c80035f693bc43baf0aa114836372abcea21e80df0611aeb8b725822aded3580128f34389bff97fb917cb833e4b685bd210e949daa088674cf8716317b9a61d36c0048f136a833d2167cfd3851aa63b7e5c85d8178796925b4b959089672199cad37f9021cb134b31acf7f1dbcf0249d46634a60320b1ac878551b261d5312be6710875c6a00bbd1a60fbf7ee36ec800b30c12203de29c8115196a0ab63c94f7d3ae05df9a2037df27cb0aff13a0c06a309dfc315eed47f8a399e98ad508c754793be747c33fd9c380d8c190c20071"}, {0xd8, 0x7, 0x0, "7f3a9a84688e63a18ec254668ca26d3fdb5ea288e954c0e9291a76906e9c570a9d032b9949a3d9a122107b24ae686853055059b4cef4fcc664c9dc6229502c8d412c12192d3e8710fbc379d0c8df3506f9952b42eebd068f8952c2c53e4afd1dbb227053c9b408ede8f8fca346d563d62075caffc3a3feecddc509a2509c8f155a97d2743662fef349c55785db9461d0b35ab6bb625ebf4458cbbf068b6ba29efbadab92ff895320ecc86c44157ca04f4fd4fb07739be7901775b6fad281ecbcad83946036d69e"}, {0x48, 0x0, 0x8, "6538cadcadbd6ad2f942e0bb4be054571663218bb0044cb671be889803081f5b5c7d06f86f4a7fdf9987d7fc73a135eff082c7f93b"}, {0xc8, 0x114, 0x4, "a50a7fef5aaa4d5b41b9243402c9540ac97a70317635a4e8accc1be14b7669675a6fbf60053277f907e60305a433890e2a9662e77afdcc89e69777b83a402a58c4d0e5d35f54a47751c0c026a2fe5348ef762561edd290ff344b1b0f2e83422d5e7fcfb8675737688bd12558af5084669d630c170887427d93a8fd25fb40cc0d87b1fd6888338e22ee714b6c7245bb5ca7f005ebf5b6535eef3bfd8caf768c488db0339958b4197359da371e4407a6e8e9a0"}, {0x78, 0x0, 0x8, "8d4fc6615d8966b5192ffc0eca5b8b584c8a1a25ac1c3e6c5f3ae68de27184a2795f9cab707e9aba61c35396cbccc50b8ce5a5eb16c6866be4d970f82a1b25ef5906bb6b3ba1e9fb03a304dbd7d14cde6fdda9c7758786530f5e897ae12d830dc32347a3"}], 0x348}}, {{&(0x7f00000031c0)=@can={0x1d, r8}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003240)="a5d87128e7108196ea0d4afb12181c997fa01f440a8057c7e20819df82148d2ea0c188cbd5c8e9d62650e85d66919f9d1f9938fc83fb52b0fb110aade2a17c5eb9ecb9a3b465cbd77b3f44f771d9882591f89bc8dd1081b5711632e934c43d3b25f162a085312ee3735aed798dbf52eec1896649d2a3ed2169216141d233c28adc0abf0a166340ce483a32902997f117fdec9fc14deba43371c94fd41da410f6b90dedf1", 0xa4}, {&(0x7f0000003300)="49eca1b6dd6d39662817121c96680d5653201eecb2d4f92abb67b616d540dfe1e39412ab3d6510008ded285e967f97043ab276c4ce62226f2a58aaedbe1dec0c46e5b427c5ed7e6f28f7e2d59e88025293b0330e4ace4ea8bf73991b5e9c4f766ec3ebd501b6a50769da95c9f4efe04bd1cdb0131dee9df9ad4c24ab9f33642ba52224c13d1385dee2396a3cf8fc4bfd8ebfd31c043fb20808057a09f85c882ecaaa02f70eb287d5056ce3831c8a2e62976162d7bbb0ac1ab27d56c9819c3d64262dc2d6f310d6c39083156788017303bee2a8a50888bc43941b1f0935023afa248af4f38799828347f17a6dcb211eea824cdbe22fb6", 0xf6}, {&(0x7f0000003400)="25859d9d29d51f3255603a9a4090eacb5260fdf2ddbccc49a7dcdcb3691db0f270a4c24f2fc0c16fc779f824d01900d0a45156af164b841d294776398c2c715d1754dd78c67ca6ce963dce11587c471c4696174cf9047aeeb86957a1258a2adfa7929c3662dc991d5f753e9a2f7439bf86f905ff380d48a189e9db2e077210430bc391cc97f3bc23a21a8f82fb98656f34d277bbfdbcdf0cd3a63184615b2868a174d1b39a8baf7a2a4b19d2a9f60646c7e6115fff80cd390624e29fa27a", 0xbe}], 0x3, &(0x7f0000003500)=[{0x58, 0x10b, 0x2a2, "99539d9ad401f304472e46a258079d0564510ce03c50ea492a0ecb060c9a275a632d541c8c3154ebf63594a2d62915e03d33ab1d2230ecf666c290d354083e4a69b6c04e7b"}, {0x1010, 0x84, 0xfffffff8, "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"}], 0x1068}}, {{&(0x7f0000004580)=@ax25={{0x3, @bcast, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004600)="ccc7e9f7fa3f8c9659109f9e8c7be1203f6ab8203cb821eb1e41ef55115731537f38cfcafc4f35f60f02a698f7a5d412c61db6c0ae098128e2796c98070a41d5fd15300afca5becfc2a38aa28cc0baa882ddb3a4ec82fff8508bb7c87ae209c9abf395d8b4bdfa1802de6dbb3647f570ed3878ee8002c020ffe62bdef01582b0f6b62a10430fdde602d9848a0d75c6c2791ffd80bb053d4aa0ebbbe9ea6a9d4a29345f7c1439f9e058908be6741e78d540a5df5da29199b57248c88196282e76e0aa2d7613e8b9f3dd50c993005142098f4686a9788012eecce6ef", 0xdb}, {&(0x7f0000004700)="c5c521afeb296a8a35f314b7a90bacd337a91ec12cce766ef44a9e520886ff541c5259717543db548a52cec23f0ee9a571cd15425743130b96dd8357633fa076dcf3a70d431e65f241fc6b24a3f558f1859c8cd230803608e0a9871fc0f69c9c71e8fe04a9", 0x65}, {&(0x7f0000004780)="51b5b19b5b0a6590e3b5cd6bf7ca12833e4768fc4cb6a651fd26d9fa23a12da0988fb4d7", 0x24}, {&(0x7f00000047c0)="af060c8ab4907525c8cb925a6884a624f8dafce648d3a29605dbb75a0e65cbd76eca9da19aeff55c611d7246099c9c18baeec1f5c12b7c88bbe2b725d4eef9fe87ab3f2863d565c273bf75a3fe132dd2e4977535f9abfb0460e8a1665237633f52190f03fe82a50ed65d15ba420b83c6de5f6083820bd51063072393f88f9c306c72b36be4c2fb53663c27b42a408c820b73462da7e50286b5ee17a01cfed76725c3dcf99f5907f124db9a3b0fd6926cb63c5266960f1915f8905e3f25518acd68fc5cbfd0ebc591a68f90b4334690e142a8ef2f9e9016316259f957da8dbb5d7c3071867d6565a68d20bca52509c8a99d6cb07cb662", 0xf6}, {&(0x7f00000048c0)="1a9758079bd83287723d90921a60594f8bb6d1a42c379927038645597f8dc45bbfda9500007c4cf80aa11a9d0981ac182ebd30c6a76cd61844c7b2d2a5eb9a1a31e016d1ac285dd263709ea96618fe88b43343dc9d69dc08515732be3c8a22bc8bc25310b94974c75485aeade82cfec481e88892302879c20210c62d0fc5b5ecbd5fef3fcd18f88ca1d97f8002c7da4eaea80e4ee17a06cdb79ce8ca61d6", 0x9e}, {&(0x7f0000004980)="95b73f10b4aafae0b4eb0c058893206a6060699d94ff959ca38627166df0aa18b9eb05a3d6e3afc0cc98ed40889927e75d452e498fef932e1e0baafa5550c699a3485e3ff364", 0x46}], 0x6, &(0x7f0000004a80)=[{0x70, 0x1, 0x7, "608c0f79cf8ae3fbc141b930dfef7ee433f36d1a6b81f3d4f976fea07c9defbc463b4f0f7b194ad4b180529b4bf7db759a85291fc4905975d9b595a40447f956f69d19bde109a5c326fca6fdcddf588bd00cfdb9cd1133aa9cb86fd86299dc62"}, {0x80, 0x10c, 0x2a64, "0a691f9318e314db0cc3336253ed4ee52ad7b7de424fc43ace81507e32d97bdbf7ed5d0796445fa4abb5236b27d35e04698bdbe5d3e64d969babfd8b82bd06d37dfd48e001b20de0ffbd30234af5c2e993cb6ce299416f15ad970809e97cc1d0b298cddce719a59fa2"}, {0xc8, 0x10e, 0x101, "430f444ea4c250eca14a7a56d4cb7afc62479903cea64ebb8ced4ece88eac1ffd75e196e965ef3bc733d4d144a37c8b1d355c82a3c03b26695cb1bff54779fa9aa6cd21802ed0e6f8efebbc2414614a44c6b3ae935994226e22c002b22057bc7d10ef42ee98c0b17ee9d5c2187115419492f67870a29cd8ac6b97204625479a9696a4ac7969ca5578970bba1783bbadaec9889ce8522a4e2444eea0d37a1b8bb1c695a358b50f8bd12c8e4e62b5403d74df0ded7"}, {0xb8, 0x1e9, 0xfff, "be8659b374d515b338b83657ec3f01c3fc1436f049b01a6625e85309409e3c4853dfd6b715f94d14e1aaedc71dc395c406ce6a654a63e3c0469eea296cccb1ce821102adae11c80f80f6561d8fc5516b9d9f9b4959c9384ed247b3fe2f6464a4db9b0122a58dde3d94bbdf8c4a26741ff21426d39db7b1de375d4d76dcef40aaf35c7e4eb620a22b5b4f6a7605bf588b863656ec43e90cd036a8d26a77e5e48ae9"}], 0x270}}], 0x5, 0x4000000) 20:55:51 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:51 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:51 executing program 4: r0 = socket(0x10, 0x5, 0x0) write(r0, &(0x7f0000000000)="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", 0x17b) 20:55:51 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="2d6d656d6f7679ae"], 0x8) r7 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) ioctl$VT_RELDISP(r2, 0x5605) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) renameat2(r6, &(0x7f0000000140)='./bus\x00', r7, &(0x7f00000001c0)='./bus\x00', 0x1) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:51 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:52 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x1, 0x228100) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:52 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={0xffffffffffffffff}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp1\x00', 0x821, 0x0) r8 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r10 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x4000000000010046) write$cgroup_subtree(r11, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r12 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r12, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r13 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r13, r14, 0x0, 0x4000000000010046) write$cgroup_subtree(r14, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r15 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r16 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r15, r16, 0x0, 0x4000000000010046) write$cgroup_subtree(r16, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r17 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r17, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r18 = socket(0x27, 0x0, 0x0) r19 = socket$phonet(0x23, 0x2, 0x1) sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)={0xd4, 0x2, 0x10, 0x70bd2b, 0x25dfdbfe, "", [@generic="b87b07d39cf4b5182eaa0c4d47d144af97f0cc92db576b6b9dfda77c7b33dc54c605076a7f949461ef655cbc6c4a6a43705f87d0784ebe256fbcf098a6df199b00887486dca1ef6e77e8b0c04e7609a5adafe2304dcefd591562ec97ba4686d5c4e905ad332a919d87bb33d124c60e7268d65de5e6d98befa4fcf17a2f3e9e8f30366238acab78261303ab03b3c80bcaf1a4d805ca67e914752a1eef03e95acd8d40cbef76d7bf5fd1f93719", @nested={0x18, 0x77, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x7d, 0x0, 0x0, @pid=r2}, @typed={0x4, 0xb}]}]}, 0xd4}], 0x1, &(0x7f0000000340)=[@rights={{0x34, 0x1, 0x1, [r3, r4, r0, r0, r5, r7, r8, r9, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r11, r12, r14, r0, r0, r16]}}, @rights={{0x24, 0x1, 0x1, [r17, r0, r18, r19, 0xffffffffffffffff]}}], 0x88}, 0x20000080) write(r0, &(0x7f0000000180)="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", 0xfc) 20:55:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:52 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:52 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:52 executing program 0: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:52 executing program 2: r0 = epoll_create1(0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/dlm-control\x00', 0x0, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001d00)={@local, r3}, 0x14) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000000c0)={0x1a8002015}) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1}) 20:55:52 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:52 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000100)={@remote, @remote, @void, {@generic={0x88f5}}}, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) 20:55:52 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x1e, 0x9, 0x4, 0x1000000, 0x3, {r2, r3/1000+30000}, {0x2, 0x0, 0x0, 0x40, 0x9, 0x4, "173be993"}, 0x9, 0x1, @userptr=0x3810, 0x0, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_DEBUGREGS(r4, 0x8080aea1, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:52 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 729.641172] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:52 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getpeername$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000180)="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", 0xfc) 20:55:53 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000000000)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x20, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) creat(&(0x7f0000000040)='./file0\x00', 0xf52cdadcb6fd63da) 20:55:53 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x20900, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x4000000000010046) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, 0x7, 0x0, 0xf, &(0x7f0000ffb000/0x2000)=nil, 0x5}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0406618, &(0x7f0000000040)={{0x2, 0x0, @reserved="a417fe1f3884b837fc35bc0051e338d99cf758151960a321ed5bbd6290aebd18"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r7, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xfbd7, 0x4, 0x1, 0x800, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000080d}, 0x400c014) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r8 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7fff, 0x4001) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)={0x5, 0x6, 0x4, 0x8, 0x3, {}, {0x1, 0x0, 0x7f, 0xff, 0x4, 0x2, "6643c8cc"}, 0x0, 0x0, @planes=&(0x7f0000000240)={0x800, 0xfffffff7, @fd=r8, 0x1ff}, 0xfffff23c, 0x0, r3}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) getsockopt$inet6_dccp_int(r4, 0x21, 0x4, &(0x7f0000000140), &(0x7f00000001c0)=0x4) 20:55:53 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000040)={0x5, 0x2}) memfd_create(&(0x7f0000000000)='em0\x00', 0x3) 20:55:53 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:53 executing program 0: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:53 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x30, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:53 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_netdev_private(r1, 0x89ff, &(0x7f0000000000)="f768f3dac94479e21f850bbf4609685a37b90093437913943be3667e3063a570eef7f7feb838fc5d8a9b78d67bc2c9e8ed314bc68eedcfec94cb7fe194") 20:55:53 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) write$P9_RREADLINK(r2, &(0x7f0000000640)=ANY=[@ANYRES16, @ANYPTR, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES64, @ANYRES16, @ANYRES64=0x0, @ANYRES16=r2, @ANYRESDEC, @ANYRES64=r6], @ANYRESDEC], 0x26) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) bind(r8, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @broadcast}, 0x80) r9 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x4000000000010046) write$cgroup_subtree(r10, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) setsockopt$PNPIPE_INITSTATE(r10, 0x113, 0x4, &(0x7f0000000000), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:53 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:53 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000000)={0x552, {{0x2, 0x4e22, @remote}}}, 0x88) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 730.827406] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:53 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) write$P9_RAUTH(r1, &(0x7f0000000000)={0x14, 0x67, 0x2, {0x40, 0x0, 0x6}}, 0x14) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) r4 = semget$private(0x0, 0x1, 0x208) semctl$SEM_STAT_ANY(r4, 0x2, 0x14, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x1a8002015}) 20:55:53 executing program 4: r0 = socket(0x10, 0x802, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) wait4(r3, &(0x7f0000000140), 0x2, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$sock_netdev_private(r5, 0x89f7, &(0x7f0000000040)="63d3") write(r0, &(0x7f0000000180)="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", 0xfc) 20:55:53 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 731.092818] selinux_nlmsg_perm: 498 callbacks suppressed [ 731.092830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 20:55:54 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r8 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x6, &(0x7f0000000200), 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3bf849f42076679e}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r7, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004801}, 0x1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x1a8002015}) 20:55:54 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000080)=r1) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e22, @remote}}) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) [ 731.210319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 [ 731.254872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 [ 731.287862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 20:55:54 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 731.315598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=29112 comm=syz-executor.4 [ 731.445839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 20:55:54 executing program 0 (fault-call:27 fault-nth:0): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 731.497623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 [ 731.512048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 [ 731.526474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 [ 731.544979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29073 comm=syz-executor.1 20:55:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:54 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x6, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r5 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000001]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r5, &(0x7f00000000c0)={0x1a8002015}) 20:55:54 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, 0x0) syz_mount_image$afs(&(0x7f0000000280)='afs\x00', &(0x7f0000000300)='./file0\x00', 0x8, 0x1, &(0x7f0000000440)=[{&(0x7f0000000380)="60567cc034acf7cf75380bbd55eb33fd06429707831de53dfef2cc934a8fa789da9dced0724e97e4e5d834bf7ea1e9f4477439f0aae19b698bae7657b840826d361fa60e43cab99ea5946123186ba34dc267ab04494c5d92ef3d923aab2d7a6ec87728c620f2b8086bc2bb86f45ea2a63d4a83647c77c3eb198d7716f46c9e398404952ade4afbcf894f9de7d92132b11b323d6ab1", 0x95, 0x5}], 0xa0000, &(0x7f0000000480)={[{@flock_openafs='flock=openafs'}, {@flock_local='flock=local'}, {@flock_write='flock=write'}, {@flock_local='flock=local'}], [{@euid_gt={'euid>', 0xee00}}, {@uid_gt={'uid>', r3}}, {@smackfshat={'smackfshat'}}]}) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$void(r4, 0x5450) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400a732036b306700002c00270d00"/26, @ANYRES32=r2, @ANYBLOB="000000000000ffff00000000"], 0x24}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)={@multicast1, @multicast1, r2}, 0xc) 20:55:54 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 731.698876] audit: type=1800 audit(1581972954.565:1036): pid=29134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17755 res=0 [ 731.723107] FAULT_INJECTION: forcing a failure. [ 731.723107] name failslab, interval 1, probability 0, space 0, times 0 [ 731.734740] CPU: 1 PID: 29134 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 731.742641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 731.752004] Call Trace: [ 731.754607] dump_stack+0x142/0x197 [ 731.758255] should_fail.cold+0x10f/0x159 [ 731.762434] should_failslab+0xdb/0x130 [ 731.766431] kmem_cache_alloc_trace+0x2e9/0x790 [ 731.771148] alloc_pipe_info+0xb0/0x380 [ 731.775140] splice_direct_to_actor+0x5d2/0x7b0 [ 731.779934] ? avc_policy_seqno+0x9/0x20 [ 731.784005] ? selinux_file_permission+0x85/0x480 [ 731.788986] ? generic_pipe_buf_nosteal+0x10/0x10 [ 731.793967] ? security_file_permission+0x89/0x1f0 [ 731.798911] ? do_splice_to+0x170/0x170 [ 731.802891] ? rw_verify_area+0xea/0x2b0 [ 731.806957] do_splice_direct+0x18d/0x230 [ 731.811205] ? splice_direct_to_actor+0x7b0/0x7b0 [ 731.816071] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 731.820849] ? __sb_start_write+0x153/0x2f0 [ 731.825302] do_sendfile+0x4db/0xbd0 [ 731.829144] ? do_compat_pwritev64+0x140/0x140 [ 731.833748] ? fput+0xd4/0x150 [ 731.836953] SyS_sendfile64+0x102/0x110 [ 731.841035] ? SyS_sendfile+0x130/0x130 [ 731.845022] ? do_syscall_64+0x53/0x640 [ 731.849008] ? SyS_sendfile+0x130/0x130 [ 731.853021] do_syscall_64+0x1e8/0x640 [ 731.856916] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 731.861776] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 731.867101] RIP: 0033:0x45c6c9 [ 731.870292] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 731.878010] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 731.885302] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 731.892580] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 731.899994] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 731.907596] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000000 [ 732.243283] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:55 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:55 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x7) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x1a8002015}) 20:55:55 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x19, 0x1, 'usersecurity{userem1\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) 20:55:55 executing program 0 (fault-call:27 fault-nth:1): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:55:55 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local, 0x2c, r3}) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x80000001, 0x901) 20:55:55 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:55 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:55 executing program 4: r0 = socket(0x10, 0x5, 0x6) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="3c0c41ed5cadb60600000000000000a413708ecd477ef41f6a4c624a586a98ddf8fb5579f88fa8040d0a31450436ecec951e9cb4a0b4953c72d9b81725059e9d1d2f1e9723", @ANYPTR, @ANYRESHEX], @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x38) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYPTR64, @ANYRES16=r2, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x20c, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x95}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x37a444cf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdd1a}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0xc0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x53}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1c}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf42}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffff4d}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000030}, 0x10) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f00000000c0)={0x8, 'vlan0\x00', {'vlan0\x00'}, 0x6}) r5 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000540)=0x663851ae, 0x4) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x4000000000010046) write$cgroup_subtree(r9, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) sendmsg$sock(r9, &(0x7f0000000880)={&(0x7f0000000600)=@generic={0x8, "d11f384c4192525c6bd674c4b7c9ca2d6d59cf1a832403f11cf82f4dd1f9e5911f034a806ce2b6ea4a6ad2c5b40fef5d023d300f11ebe56948647a3aef9facc3b87641b7dee57764000f697fa3eba317ca0392f6131f44ec2eb253aeb544dd23425bd7019faf7eb0ea24fe76175e6ae23a2870d5ffe7435f86c0cb626670"}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000680)="5df2f6dceb9c7aa30cd5375352c25a7e6bac0ef16444d96d7245e4648e2c1a3f325a315889cdd96435b302f9503772655b019f431ef3e1c5cda6dcf6af32f1492537f145dbbabaaa9919d231594c5b6e94357372baceef9a6df85fd322047a226b9c2d84d2cd7e7b67a0dd768a305208e373bfa499acd06ef6f439b9e77e94dd1003deac3d66e3ca51016f5e42ccad6ff41fda", 0x93}, {&(0x7f0000000740)="dc1657e08d29fbad2b78bd73f7bf7ae1e4ff22307dd0b5d1", 0x18}, {&(0x7f0000000780)="ae8ced5745ac976c2cbdc4d0e77323ae625c5d7a8045903edf10336361a6168043436df2090cf7c46042a9b954d187ac18effe87d6b3eba6e6de5943badf8963cd13967def8f8f7985c0079483ecd1cead152d66aace65917ff68ec5", 0x5c}], 0x3, &(0x7f0000000840)}, 0x10841) sendfile(r6, r7, 0x0, 0x4000000000010046) getsockname$l2tp(r6, &(0x7f0000000580)={0x2, 0x0, @multicast1}, &(0x7f00000005c0)=0x10) [ 732.724725] audit: type=1800 audit(1581972955.595:1037): pid=29186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18011 res=0 [ 732.751349] FAULT_INJECTION: forcing a failure. [ 732.751349] name failslab, interval 1, probability 0, space 0, times 0 [ 732.762740] CPU: 1 PID: 29186 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 732.770652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 732.780011] Call Trace: [ 732.782719] dump_stack+0x142/0x197 [ 732.786369] should_fail.cold+0x10f/0x159 [ 732.790535] should_failslab+0xdb/0x130 [ 732.794518] __kmalloc+0x2f0/0x7a0 [ 732.798075] ? kmem_cache_alloc_trace+0x623/0x790 [ 732.802931] ? alloc_pipe_info+0x15c/0x380 [ 732.807178] alloc_pipe_info+0x15c/0x380 [ 732.811256] splice_direct_to_actor+0x5d2/0x7b0 [ 732.815934] ? avc_policy_seqno+0x9/0x20 [ 732.820001] ? selinux_file_permission+0x85/0x480 [ 732.824853] ? generic_pipe_buf_nosteal+0x10/0x10 [ 732.829706] ? security_file_permission+0x89/0x1f0 [ 732.834647] ? do_splice_to+0x170/0x170 [ 732.838630] ? rw_verify_area+0xea/0x2b0 [ 732.842706] do_splice_direct+0x18d/0x230 [ 732.846868] ? splice_direct_to_actor+0x7b0/0x7b0 [ 732.851722] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 732.856481] ? __sb_start_write+0x153/0x2f0 [ 732.860843] do_sendfile+0x4db/0xbd0 [ 732.864600] ? do_compat_pwritev64+0x140/0x140 [ 732.869191] ? fput+0xd4/0x150 [ 732.872394] SyS_sendfile64+0x102/0x110 [ 732.876373] ? SyS_sendfile+0x130/0x130 [ 732.880351] ? do_syscall_64+0x53/0x640 [ 732.884599] ? SyS_sendfile+0x130/0x130 [ 732.888587] do_syscall_64+0x1e8/0x640 [ 732.892480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 732.897337] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 732.902535] RIP: 0033:0x45c6c9 [ 732.905727] RSP: 002b:00007fa5d1684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 732.913533] RAX: ffffffffffffffda RBX: 00007fa5d16856d4 RCX: 000000000045c6c9 [ 732.920805] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 732.928077] RBP: 000000000076c118 R08: 0000000000000000 R09: 0000000000000000 [ 732.935351] R10: 02008000fffffffe R11: 0000000000000246 R12: 000000000000000a [ 732.942629] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000001 20:55:56 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:56 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:56 executing program 0 (fault-call:27 fault-nth:2): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 733.584958] audit: type=1800 audit(1581972956.455:1038): pid=29200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17822 res=0 [ 733.609468] FAULT_INJECTION: forcing a failure. [ 733.609468] name failslab, interval 1, probability 0, space 0, times 0 [ 733.621229] CPU: 1 PID: 29200 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 733.629219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 733.638603] Call Trace: [ 733.641210] dump_stack+0x142/0x197 [ 733.644885] should_fail.cold+0x10f/0x159 [ 733.649049] should_failslab+0xdb/0x130 [ 733.653086] kmem_cache_alloc+0x2d7/0x780 [ 733.657251] ? iov_iter_alignment+0x152/0x650 [ 733.661765] do_blockdev_direct_IO+0x326/0x9130 [ 733.666448] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 733.671911] ? rcu_read_lock_sched_held+0x110/0x130 [ 733.676949] ? __ext4_handle_dirty_metadata+0x125/0x470 20:55:56 executing program 4: r0 = add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r0) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="d599c9fa937071f6a3c6fc3987bdf33070fc0108f14a2d85035d8bc1b95fcf427ad45a4e6ba73501dcb6abc9263954575d9195976644c09e3f1e1c43cf2dc010528bf155d744b71046f1cb84e25de1a8116685966a81a558ff47f09f93003b054d53cc01ea9425c255a5128a530b24001665143c971a2d048299f35712959fd9c97ed1ae8e2a70171223eb0ad01ce01a7f05", 0x92, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140)={r1, 0x67, 0x1}, &(0x7f0000000280)={'enc=', 'oaep', ' hash=', {'sha384-ce\x00'}}, &(0x7f0000000300)="a8eff2483e641a8af6454035a3071f7fde16ac09422fe55267400f42d2ef71781eb170abf467b95c45dfcb3e46ec05c6849f2d92e6b348c103196c4c3ef2ebc4eedf01af0fe8782fb02a9fd47f370fc862785edc6e5e9959c0b6454765c3431869578528a6e966", &(0x7f0000000380)=""/1) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000003c0)={0x9, 0x1821c, 0x80000001, 0x4, 0x0}, &(0x7f0000000400)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000440)={r4, @in={{0x2, 0x4e21, @broadcast}}}, &(0x7f0000000500)=0x84) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000180)="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", 0xfc) [ 733.682461] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 733.688187] ? sb_init_dio_done_wq+0x80/0x80 [ 733.692605] ? __lock_acquire+0x5f7/0x4620 [ 733.696861] ? ext4_chunk_trans_blocks+0x30/0x30 [ 733.701779] ? lock_acquire+0x16f/0x430 [ 733.705761] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 733.711503] __blockdev_direct_IO+0xa1/0xca [ 733.715848] ext4_direct_IO+0x4e7/0x18f0 [ 733.720022] ? touch_atime+0xce/0x250 [ 733.723844] generic_file_read_iter+0x2f3/0x28d0 [ 733.728611] ? save_stack+0xa9/0xd0 [ 733.732247] ? save_stack_trace+0x16/0x20 [ 733.736394] ? save_stack+0x45/0xd0 [ 733.740239] ? kasan_kmalloc+0xce/0xf0 [ 733.744129] ? __kmalloc+0x15d/0x7a0 [ 733.747846] ? alloc_pipe_info+0x15c/0x380 [ 733.752088] ? do_splice_direct+0x18d/0x230 [ 733.756420] ? do_sendfile+0x4db/0xbd0 [ 733.760324] ? do_syscall_64+0x1e8/0x640 [ 733.764399] ? filemap_range_has_page+0x2d0/0x2d0 [ 733.769254] ? __lock_is_held+0xb6/0x140 [ 733.773325] ? save_trace+0x290/0x290 [ 733.777131] ? fsnotify+0x92f/0x11e0 [ 733.780862] ext4_file_read_iter+0x14e/0x340 [ 733.785279] generic_file_splice_read+0x37d/0x600 [ 733.790137] ? fsnotify+0x11e0/0x11e0 [ 733.793948] ? add_to_pipe+0x340/0x340 [ 733.797851] ? rw_verify_area+0xea/0x2b0 [ 733.801915] ? add_to_pipe+0x340/0x340 [ 733.805917] do_splice_to+0x105/0x170 [ 733.809736] splice_direct_to_actor+0x222/0x7b0 [ 733.814413] ? generic_pipe_buf_nosteal+0x10/0x10 [ 733.819263] ? do_splice_to+0x170/0x170 [ 733.823244] ? rw_verify_area+0xea/0x2b0 [ 733.827315] do_splice_direct+0x18d/0x230 [ 733.831467] ? splice_direct_to_actor+0x7b0/0x7b0 [ 733.836326] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 733.841087] ? __sb_start_write+0x153/0x2f0 [ 733.845428] do_sendfile+0x4db/0xbd0 [ 733.849438] ? do_compat_pwritev64+0x140/0x140 [ 733.854034] ? fput+0xd4/0x150 [ 733.857240] SyS_sendfile64+0x102/0x110 [ 733.861221] ? SyS_sendfile+0x130/0x130 [ 733.865209] ? do_syscall_64+0x53/0x640 [ 733.869334] ? SyS_sendfile+0x130/0x130 [ 733.873319] do_syscall_64+0x1e8/0x640 [ 733.877479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 733.882339] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 733.887533] RIP: 0033:0x45c6c9 [ 733.890721] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 733.898435] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 733.905705] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 733.912983] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 733.920260] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 733.927658] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000002 20:55:56 executing program 4: r0 = socket(0x26, 0x802, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 20:55:56 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:57 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 734.126636] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. 20:55:57 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:57 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') pipe(&(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:57 executing program 0 (fault-call:27 fault-nth:3): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:55:57 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:57 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 734.794332] audit: type=1800 audit(1581972957.665:1039): pid=29234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18084 res=0 [ 734.819088] FAULT_INJECTION: forcing a failure. [ 734.819088] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 734.831091] CPU: 1 PID: 29234 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 734.838985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 734.848351] Call Trace: [ 734.851000] dump_stack+0x142/0x197 [ 734.854708] should_fail.cold+0x10f/0x159 [ 734.858868] ? __might_sleep+0x93/0xb0 [ 734.862775] __alloc_pages_nodemask+0x1d6/0x7a0 [ 734.867464] ? __alloc_pages_slowpath+0x2930/0x2930 [ 734.872511] alloc_pages_current+0xec/0x1e0 [ 734.876847] push_pipe+0x3cb/0x780 [ 734.880397] ? sanity+0x20f/0x310 [ 734.883872] iov_iter_get_pages+0x419/0xd10 [ 734.888298] ? csum_and_copy_from_iter+0xd50/0xd50 [ 734.893247] do_blockdev_direct_IO+0x362d/0x9130 [ 734.898146] ? sb_init_dio_done_wq+0x80/0x80 [ 734.902567] ? __lock_acquire+0x5f7/0x4620 [ 734.906817] ? ext4_chunk_trans_blocks+0x30/0x30 [ 734.911826] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 734.917475] ? lock_acquire+0x16f/0x430 [ 734.921463] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 734.928059] __blockdev_direct_IO+0xa1/0xca [ 734.932503] ext4_direct_IO+0x4e7/0x18f0 [ 734.936587] ? touch_atime+0xce/0x250 [ 734.940419] generic_file_read_iter+0x2f3/0x28d0 [ 734.945193] ? save_stack+0xa9/0xd0 [ 734.948856] ? save_stack_trace+0x16/0x20 [ 734.953012] ? save_stack+0x45/0xd0 [ 734.956647] ? kasan_kmalloc+0xce/0xf0 [ 734.960853] ? __kmalloc+0x15d/0x7a0 [ 734.964576] ? alloc_pipe_info+0x15c/0x380 [ 734.968881] ? do_splice_direct+0x18d/0x230 [ 734.973296] ? do_sendfile+0x4db/0xbd0 [ 734.977200] ? do_syscall_64+0x1e8/0x640 [ 734.981287] ? filemap_range_has_page+0x2d0/0x2d0 [ 734.986228] ? __lock_is_held+0xb6/0x140 [ 734.990297] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 734.995371] ? fsnotify+0x92f/0x11e0 [ 734.999115] ext4_file_read_iter+0x14e/0x340 [ 735.003670] generic_file_splice_read+0x37d/0x600 [ 735.008608] ? fsnotify+0x11e0/0x11e0 [ 735.012448] ? add_to_pipe+0x340/0x340 [ 735.016355] ? rw_verify_area+0xea/0x2b0 [ 735.020425] ? add_to_pipe+0x340/0x340 [ 735.024320] do_splice_to+0x105/0x170 [ 735.028219] splice_direct_to_actor+0x222/0x7b0 [ 735.033162] ? generic_pipe_buf_nosteal+0x10/0x10 [ 735.038034] ? do_splice_to+0x170/0x170 [ 735.042014] ? rw_verify_area+0xea/0x2b0 [ 735.046084] do_splice_direct+0x18d/0x230 [ 735.050241] ? splice_direct_to_actor+0x7b0/0x7b0 [ 735.055789] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 735.060554] ? __sb_start_write+0x153/0x2f0 [ 735.064879] do_sendfile+0x4db/0xbd0 [ 735.068624] ? do_compat_pwritev64+0x140/0x140 [ 735.073348] ? fput+0xd4/0x150 [ 735.076555] SyS_sendfile64+0x102/0x110 [ 735.080537] ? SyS_sendfile+0x130/0x130 [ 735.084513] ? do_syscall_64+0x53/0x640 [ 735.088490] ? SyS_sendfile+0x130/0x130 [ 735.092482] do_syscall_64+0x1e8/0x640 [ 735.096375] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 735.101236] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 735.106440] RIP: 0033:0x45c6c9 [ 735.109889] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 735.117604] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 735.124884] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 735.132160] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 735.139441] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 735.146830] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000003 20:55:58 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x61381fe64009b7e5}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x1c}}, 0x4c000) 20:55:58 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:58 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) r1 = socket(0x10, 0x802, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0xaa850ab34c804c98) r5 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x48, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09631040000000000000000000000000000000000e630c4000000000000000000000000003630840", @ANYRES64=r5, @ANYBLOB="05630440020000000eff030000000000000020000000000027f53a59536a8f2a66709a035e2116e3"], 0xc6, 0x0, &(0x7f0000000100)="02b44a4985012869331a59cb213c01f1c3ea2d11e742345e85b3063ff4389819d6e17ee4db712a427e3ef0b5e25d6c880970e61afe8c4bdc0fe7c7e078e422a84b29e6fecc4efa2df9e4c0701347d70183510f54abf197fda2cbb1a2ab012865ab33c0db6be535b2d267bccea26163226cb29fee524bcc1587e7924a9b93443eac6e08223a6213e5901d7daef2b771a8aae013766fb62891db3df21d628269b34f6ecd1e9915a76c99459b4992ee1455fecced1d1388ac2ae2332009bad95c64681b755ffddb"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f00000002c0)=[@free_buffer={0x40086303, r5}], 0xf8, 0x0, &(0x7f0000000300)="0c97060821dd5614aca4d7ec581f7964e1acf08f1bd83c2d99787a27ca158ef27e80e71b236182d41832b64fc5e45b88bc19e47ee802087d916c9d80e7bf568f199bbc2a513ccaf7af61e2a9b16c3a08e4ef0e8ac8bc3119f0685b32297953f297c757918a449486012fae5a22fb44468d83c73b460211ed0f4cf7466bf9b9a7e7c6c924667f71100121f4cb554d912640eb3414375b093bc27b9c572070a1fade85565f4738c5cb2624d3a8c83ebed0ada1c5937f099243e8f2380376990bd382385d0b316fa6c3b237ab36c3a701af1ff61473c2d6e758d0d9a29fbf6a8951033f2309dc53a2259515490b7f664d2111a4b06a78df3af4"}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xde, "ca73a5b6880a972d10769b16ad03560aaae0561d63abdd6e0291e2016a1c2a020e3a1b94b5364ff04d8cac3acbe0bc3819591f0d36d2eb50d319a9287dd985e6baa51e8772c49ad1c21c017820dc7079cdcbf3ee4dab6b31c5f1c53e7ed6c0cdc37ae2315e32146fc8f3ffdb761977e6ae617addd77d79a40366cebdb903b6169e63482b524c020dc1e660f10dc8fc769e61ce25cb81697f3fbd3e775670a104613bd00a924a6eab21a6c09188df79ff5e508d3a37742d1b39ec98ea95f0ccff13d0ac0bf2bf7ade796e2818b852eb3e1cca8cb40e65562a8d86fd1127ac"}, &(0x7f0000000140)=0xe6) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r7, 0x200}, 0x8) write(r1, &(0x7f0000000180)="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", 0xfc) 20:55:58 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:55:58 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="d6d7e150b872dd4cc784d6dec673929773e0f0b4947953d7c026537041d750a994fae59845148bbd64803d825e9fc0c2c6ebef4df8278aa56b7509bec83d32a9fc058186abedcf41ecb8d59d2a82f351788728a75395920577f6f2f4380b202f714e6d2bf46d038cbc06d9adb9c7ee90c498acfe149a7a97bd2ba1e33edf8bfdfd64eb2795016b845615991f522cdfb1826e2f00b6649759f0535f15dff4bb63d7190185a268e8d940ca5628ac1f825f44ddb1e6a5ad6b1432cfb476e855"], 0x8) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0x8) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 20:55:58 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r3 = dup2(0xffffffffffffffff, r2) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000000)={'batadv_slave_0\x00', 0x25}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:58 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:58 executing program 0 (fault-call:27 fault-nth:4): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 735.610933] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 735.721106] audit: type=1800 audit(1581972958.595:1040): pid=29278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17974 res=0 [ 735.745383] FAULT_INJECTION: forcing a failure. [ 735.745383] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 735.757411] CPU: 0 PID: 29278 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 735.765309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 735.774681] Call Trace: [ 735.777285] dump_stack+0x142/0x197 [ 735.780942] should_fail.cold+0x10f/0x159 [ 735.785112] ? __might_sleep+0x93/0xb0 [ 735.789060] __alloc_pages_nodemask+0x1d6/0x7a0 [ 735.793750] ? __alloc_pages_slowpath+0x2930/0x2930 [ 735.798888] alloc_pages_current+0xec/0x1e0 [ 735.803225] push_pipe+0x3cb/0x780 [ 735.806965] ? sanity+0x20f/0x310 [ 735.810436] iov_iter_get_pages+0x419/0xd10 [ 735.814753] ? csum_and_copy_from_iter+0xd50/0xd50 [ 735.819696] do_blockdev_direct_IO+0x362d/0x9130 [ 735.824728] ? sb_init_dio_done_wq+0x80/0x80 [ 735.829200] ? __lock_acquire+0x5f7/0x4620 [ 735.833463] ? ext4_chunk_trans_blocks+0x30/0x30 [ 735.838225] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 735.843871] ? lock_acquire+0x16f/0x430 [ 735.847855] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 735.853573] __blockdev_direct_IO+0xa1/0xca [ 735.857905] ext4_direct_IO+0x4e7/0x18f0 [ 735.861976] ? touch_atime+0xce/0x250 [ 735.865786] generic_file_read_iter+0x2f3/0x28d0 [ 735.870652] ? save_stack+0xa9/0xd0 [ 735.874270] ? save_stack_trace+0x16/0x20 [ 735.878407] ? save_stack+0x45/0xd0 [ 735.882042] ? kasan_kmalloc+0xce/0xf0 [ 735.885926] ? __kmalloc+0x15d/0x7a0 [ 735.889636] ? alloc_pipe_info+0x15c/0x380 [ 735.893979] ? do_splice_direct+0x18d/0x230 [ 735.898302] ? do_sendfile+0x4db/0xbd0 [ 735.902185] ? do_syscall_64+0x1e8/0x640 [ 735.906258] ? filemap_range_has_page+0x2d0/0x2d0 [ 735.911108] ? __lock_is_held+0xb6/0x140 [ 735.915157] ? save_trace+0x290/0x290 [ 735.918962] ? fsnotify+0x92f/0x11e0 [ 735.922702] ext4_file_read_iter+0x14e/0x340 [ 735.927127] generic_file_splice_read+0x37d/0x600 [ 735.932136] ? fsnotify+0x11e0/0x11e0 [ 735.935942] ? add_to_pipe+0x340/0x340 [ 735.939840] ? rw_verify_area+0xea/0x2b0 [ 735.943893] ? add_to_pipe+0x340/0x340 [ 735.947786] do_splice_to+0x105/0x170 [ 735.951716] splice_direct_to_actor+0x222/0x7b0 [ 735.956386] ? generic_pipe_buf_nosteal+0x10/0x10 [ 735.961236] ? do_splice_to+0x170/0x170 [ 735.965214] ? rw_verify_area+0xea/0x2b0 [ 735.969367] do_splice_direct+0x18d/0x230 [ 735.973522] ? splice_direct_to_actor+0x7b0/0x7b0 [ 735.978378] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 735.983137] ? __sb_start_write+0x153/0x2f0 [ 735.987469] do_sendfile+0x4db/0xbd0 [ 735.991198] ? do_compat_pwritev64+0x140/0x140 [ 735.995804] ? fput+0xd4/0x150 [ 735.999017] SyS_sendfile64+0x102/0x110 [ 736.002980] ? SyS_sendfile+0x130/0x130 [ 736.007072] ? do_syscall_64+0x53/0x640 [ 736.011040] ? SyS_sendfile+0x130/0x130 [ 736.015042] do_syscall_64+0x1e8/0x640 [ 736.018948] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 736.023843] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 736.029157] RIP: 0033:0x45c6c9 [ 736.032542] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 736.040252] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 736.047657] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 736.054941] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 736.062207] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 736.069484] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000004 [ 736.503107] selinux_nlmsg_perm: 234 callbacks suppressed [ 736.503118] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 [ 736.526588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 20:55:59 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a800201f}) 20:55:59 executing program 4: r0 = socket(0x10, 0x802, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = creat(&(0x7f00000000c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x2) 20:55:59 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:55:59 executing program 0 (fault-call:27 fault-nth:5): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 736.553582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 20:55:59 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x9d0000, 0x400, 0x200, r0, 0x0, &(0x7f0000000000)={0x9c0909, 0x800, [], @ptr=0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fddbdf251100000006001401040000000c0099007f000000b7471f36250d837827f3d40334a55fd7ed88c72bc7a32e18116ae37a0ab0aef8d192da5951febee93e1cdb2bb8165c5abcd433c0d76096d099841f1bfcc0825764538d1e8b692a29e4"], 0x3}, 0x1, 0x0, 0x0, 0x884}, 0x400c801) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg1\x00', r7}) r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000804}, 0x20000020) r11 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r11, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:55:59 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:55:59 executing program 4: r0 = socket(0x1c, 0x802, 0xe0) socket(0x3, 0x800, 0x41) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x200}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) write(r0, &(0x7f0000000180)="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", 0xfc) [ 736.643971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 [ 736.694090] audit: type=1800 audit(1581972959.565:1041): pid=29295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18307 res=0 [ 736.718801] FAULT_INJECTION: forcing a failure. [ 736.718801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 736.730726] CPU: 0 PID: 29295 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 736.738640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 736.745985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 [ 736.748003] Call Trace: [ 736.748168] dump_stack+0x142/0x197 [ 736.766567] should_fail.cold+0x10f/0x159 [ 736.770730] ? __might_sleep+0x93/0xb0 [ 736.774639] __alloc_pages_nodemask+0x1d6/0x7a0 [ 736.779593] ? __alloc_pages_slowpath+0x2930/0x2930 [ 736.784912] alloc_pages_current+0xec/0x1e0 [ 736.789253] push_pipe+0x3cb/0x780 [ 736.791253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 [ 736.792971] ? sanity+0x20f/0x310 [ 736.792989] iov_iter_get_pages+0x419/0xd10 [ 736.793005] ? csum_and_copy_from_iter+0xd50/0xd50 [ 736.793024] do_blockdev_direct_IO+0x362d/0x9130 [ 736.793054] ? sb_init_dio_done_wq+0x80/0x80 [ 736.807278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 [ 736.808643] ? __lock_acquire+0x5f7/0x4620 [ 736.808663] ? ext4_chunk_trans_blocks+0x30/0x30 [ 736.808691] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 736.815261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 [ 736.817959] ? lock_acquire+0x16f/0x430 [ 736.817974] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 736.817989] __blockdev_direct_IO+0xa1/0xca [ 736.868710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29259 comm=syz-executor.1 [ 736.870750] ext4_direct_IO+0x4e7/0x18f0 [ 736.870765] ? touch_atime+0xce/0x250 [ 736.870786] generic_file_read_iter+0x2f3/0x28d0 [ 736.870796] ? save_stack+0xa9/0xd0 [ 736.870807] ? save_stack_trace+0x16/0x20 [ 736.870814] ? save_stack+0x45/0xd0 [ 736.870822] ? kasan_kmalloc+0xce/0xf0 [ 736.870829] ? __kmalloc+0x15d/0x7a0 [ 736.870840] ? alloc_pipe_info+0x15c/0x380 [ 736.929542] ? do_splice_direct+0x18d/0x230 [ 736.933867] ? do_sendfile+0x4db/0xbd0 [ 736.937767] ? do_syscall_64+0x1e8/0x640 [ 736.942018] ? filemap_range_has_page+0x2d0/0x2d0 [ 736.947140] ? __lock_is_held+0xb6/0x140 [ 736.951220] ? save_trace+0x290/0x290 [ 736.955075] ? fsnotify+0x92f/0x11e0 [ 736.958811] ext4_file_read_iter+0x14e/0x340 [ 736.963239] generic_file_splice_read+0x37d/0x600 [ 736.968197] ? fsnotify+0x11e0/0x11e0 [ 736.972032] ? add_to_pipe+0x340/0x340 [ 736.975947] ? rw_verify_area+0xea/0x2b0 [ 736.980013] ? add_to_pipe+0x340/0x340 [ 736.983913] do_splice_to+0x105/0x170 [ 736.987767] splice_direct_to_actor+0x222/0x7b0 [ 736.992495] ? generic_pipe_buf_nosteal+0x10/0x10 [ 736.997482] ? do_splice_to+0x170/0x170 [ 737.001467] ? rw_verify_area+0xea/0x2b0 [ 737.005576] do_splice_direct+0x18d/0x230 [ 737.009772] ? splice_direct_to_actor+0x7b0/0x7b0 [ 737.014632] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 737.019490] ? __sb_start_write+0x153/0x2f0 [ 737.023829] do_sendfile+0x4db/0xbd0 [ 737.027566] ? do_compat_pwritev64+0x140/0x140 [ 737.032167] ? fput+0xd4/0x150 [ 737.035370] SyS_sendfile64+0x102/0x110 [ 737.039381] ? SyS_sendfile+0x130/0x130 [ 737.043391] ? do_syscall_64+0x53/0x640 [ 737.047379] ? SyS_sendfile+0x130/0x130 [ 737.051506] do_syscall_64+0x1e8/0x640 [ 737.055439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 737.060323] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 737.065559] RIP: 0033:0x45c6c9 [ 737.068754] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 737.076476] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 737.083772] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 20:56:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:00 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 737.091056] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 737.098482] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 737.105773] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000005 20:56:00 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:00 executing program 4: r0 = socket(0x2b, 0x5, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) [ 737.317713] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 737.343134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29311 comm=syz-executor.1 20:56:00 executing program 4: r0 = socket(0x8, 0x3, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="b65300000000000002004e21ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000002004e207f0089b6a1aa7fb504bc973c725c0001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000215abb0002004e20e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e247f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e21e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e22e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2100"/1172], 0x490) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000000)={{r3}, 0x1, 0x800, 0x3}) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:00 executing program 0 (fault-call:27 fault-nth:6): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:00 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:00 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr="1cdf6d8a14318249b54a8d6de41c045d"}}}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r4, 0x8, 0x1, [0x0]}, &(0x7f0000000040)=0xa) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:00 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000140)=0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0xffffffffffffffff, r4}, 0xc) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @phonet={0x23, 0x5, 0x3f, 0x8}, @generic={0x22, "6594989659bccd1618ee936f6a63"}, @tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}}}, 0xfff, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000000)='veth1_macvtap\x00', 0x8001, 0x9, 0x3}) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) [ 737.621476] audit: type=1800 audit(1581972960.495:1042): pid=29340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18385 res=0 [ 737.646317] FAULT_INJECTION: forcing a failure. [ 737.646317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 737.658263] CPU: 0 PID: 29340 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 737.666257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 737.675625] Call Trace: [ 737.678246] dump_stack+0x142/0x197 [ 737.681896] should_fail.cold+0x10f/0x159 [ 737.686059] ? __might_sleep+0x93/0xb0 [ 737.689969] __alloc_pages_nodemask+0x1d6/0x7a0 [ 737.694796] ? __alloc_pages_slowpath+0x2930/0x2930 [ 737.699835] alloc_pages_current+0xec/0x1e0 [ 737.704170] push_pipe+0x3cb/0x780 [ 737.707760] ? sanity+0x20f/0x310 [ 737.711229] iov_iter_get_pages+0x419/0xd10 [ 737.715571] ? csum_and_copy_from_iter+0xd50/0xd50 [ 737.720519] do_blockdev_direct_IO+0x362d/0x9130 [ 737.725314] ? sb_init_dio_done_wq+0x80/0x80 [ 737.730425] ? __lock_acquire+0x5f7/0x4620 [ 737.734685] ? ext4_chunk_trans_blocks+0x30/0x30 [ 737.739669] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 737.745344] ? lock_acquire+0x16f/0x430 [ 737.749335] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 737.754981] __blockdev_direct_IO+0xa1/0xca [ 737.759326] ext4_direct_IO+0x4e7/0x18f0 [ 737.763400] ? touch_atime+0xce/0x250 [ 737.767359] generic_file_read_iter+0x2f3/0x28d0 [ 737.772133] ? save_stack+0xa9/0xd0 [ 737.776377] ? save_stack_trace+0x16/0x20 [ 737.780532] ? save_stack+0x45/0xd0 [ 737.784173] ? kasan_kmalloc+0xce/0xf0 [ 737.788064] ? __kmalloc+0x15d/0x7a0 [ 737.792010] ? alloc_pipe_info+0x15c/0x380 [ 737.796257] ? do_splice_direct+0x18d/0x230 [ 737.800586] ? do_sendfile+0x4db/0xbd0 [ 737.804494] ? do_syscall_64+0x1e8/0x640 [ 737.808606] ? filemap_range_has_page+0x2d0/0x2d0 [ 737.813595] ? __lock_is_held+0xb6/0x140 [ 737.817664] ? save_trace+0x290/0x290 [ 737.821476] ? fsnotify+0x92f/0x11e0 [ 737.825207] ext4_file_read_iter+0x14e/0x340 [ 737.829636] generic_file_splice_read+0x37d/0x600 [ 737.834594] ? fsnotify+0x11e0/0x11e0 [ 737.838411] ? add_to_pipe+0x340/0x340 [ 737.842326] ? rw_verify_area+0xea/0x2b0 [ 737.846564] ? add_to_pipe+0x340/0x340 [ 737.850471] do_splice_to+0x105/0x170 [ 737.854294] splice_direct_to_actor+0x222/0x7b0 [ 737.859331] ? generic_pipe_buf_nosteal+0x10/0x10 [ 737.864199] ? do_splice_to+0x170/0x170 [ 737.868427] ? rw_verify_area+0xea/0x2b0 [ 737.872498] do_splice_direct+0x18d/0x230 [ 737.876661] ? splice_direct_to_actor+0x7b0/0x7b0 [ 737.881524] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 737.886397] ? __sb_start_write+0x153/0x2f0 [ 737.890813] do_sendfile+0x4db/0xbd0 [ 737.894560] ? do_compat_pwritev64+0x140/0x140 [ 737.899156] ? fput+0xd4/0x150 [ 737.902369] SyS_sendfile64+0x102/0x110 [ 737.906348] ? SyS_sendfile+0x130/0x130 [ 737.910342] ? do_syscall_64+0x53/0x640 [ 737.914330] ? SyS_sendfile+0x130/0x130 [ 737.918324] do_syscall_64+0x1e8/0x640 [ 737.922228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 737.927089] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 737.932287] RIP: 0033:0x45c6c9 [ 737.935481] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 737.943374] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 737.950895] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 737.958189] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 737.965686] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 737.972971] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000006 20:56:01 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:01 executing program 4: socket(0x10, 0x802, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write(r0, &(0x7f0000000000)="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", 0x11b) 20:56:01 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:01 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:01 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x85000) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000140)={0x1, 0x8001}) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x400100, 0x4) getsockname$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f00000002c0)={0x0, 0x3ff}) 20:56:01 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 738.242574] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 738.255944] BFS-fs: bfs_fill_super(): Last block not available: 109 20:56:01 executing program 4: socket(0x10, 0x802, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000000)=0x8) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYPTR, @ANYBLOB="3a59bfd5e40f9e9a653d851119f4fa9faeaa12ef33ff6fb5da327d4d5ee0b48eab60abbb752604401ea86117f76a9148a81598b8e4aff86b5ef4d7c5ded29ff84d57754929e11cb223faedc9165aff5a2751f09e64a53837d9bf753a5b5f8595dd4da9c2d3334695a24cc11efd42c0704a6d829cd5ee6517e803796326a3551faf880089f50a399465d8382659f39d3e482053b2ffd44a718726c986b79b96124c3625f8095d78a3653e63210b0e29d96ef3d344179ed98953a8b1a444efd9f3"], 0xca) write(r3, &(0x7f0000000180)="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", 0xfc) 20:56:01 executing program 0 (fault-call:27 fault-nth:7): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:01 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 738.391947] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.516415] audit: type=1800 audit(1581972961.385:1043): pid=29385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17849 res=0 [ 738.540648] FAULT_INJECTION: forcing a failure. [ 738.540648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 738.552827] CPU: 0 PID: 29385 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 738.560726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 738.570184] Call Trace: [ 738.572920] dump_stack+0x142/0x197 [ 738.576575] should_fail.cold+0x10f/0x159 [ 738.580742] ? __might_sleep+0x93/0xb0 [ 738.584654] __alloc_pages_nodemask+0x1d6/0x7a0 [ 738.589347] ? __alloc_pages_slowpath+0x2930/0x2930 [ 738.594403] alloc_pages_current+0xec/0x1e0 [ 738.598737] push_pipe+0x3cb/0x780 [ 738.602293] ? sanity+0x20f/0x310 [ 738.605773] iov_iter_get_pages+0x419/0xd10 [ 738.610124] ? csum_and_copy_from_iter+0xd50/0xd50 [ 738.615103] do_blockdev_direct_IO+0x362d/0x9130 [ 738.619897] ? sb_init_dio_done_wq+0x80/0x80 [ 738.624316] ? __lock_acquire+0x5f7/0x4620 [ 738.628578] ? ext4_chunk_trans_blocks+0x30/0x30 [ 738.633370] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 738.639024] ? lock_acquire+0x16f/0x430 [ 738.643003] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 738.648637] __blockdev_direct_IO+0xa1/0xca [ 738.652988] ext4_direct_IO+0x4e7/0x18f0 [ 738.657058] ? touch_atime+0xce/0x250 [ 738.661004] generic_file_read_iter+0x2f3/0x28d0 [ 738.665798] ? save_stack+0xa9/0xd0 [ 738.669547] ? save_stack_trace+0x16/0x20 [ 738.673699] ? save_stack+0x45/0xd0 [ 738.677327] ? kasan_kmalloc+0xce/0xf0 [ 738.681420] ? __kmalloc+0x15d/0x7a0 [ 738.685287] ? alloc_pipe_info+0x15c/0x380 [ 738.689525] ? do_splice_direct+0x18d/0x230 [ 738.693856] ? do_sendfile+0x4db/0xbd0 [ 738.697752] ? do_syscall_64+0x1e8/0x640 [ 738.701832] ? filemap_range_has_page+0x2d0/0x2d0 [ 738.706689] ? __lock_is_held+0xb6/0x140 [ 738.710879] ? save_trace+0x290/0x290 [ 738.714692] ? fsnotify+0x92f/0x11e0 [ 738.718426] ext4_file_read_iter+0x14e/0x340 [ 738.722957] generic_file_splice_read+0x37d/0x600 [ 738.727816] ? fsnotify+0x11e0/0x11e0 [ 738.731641] ? add_to_pipe+0x340/0x340 [ 738.735663] ? rw_verify_area+0xea/0x2b0 [ 738.739750] ? add_to_pipe+0x340/0x340 [ 738.743647] do_splice_to+0x105/0x170 [ 738.748543] splice_direct_to_actor+0x222/0x7b0 [ 738.753341] ? generic_pipe_buf_nosteal+0x10/0x10 [ 738.758198] ? do_splice_to+0x170/0x170 [ 738.762181] ? rw_verify_area+0xea/0x2b0 [ 738.766259] do_splice_direct+0x18d/0x230 [ 738.770417] ? splice_direct_to_actor+0x7b0/0x7b0 [ 738.775282] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 738.780101] ? __sb_start_write+0x153/0x2f0 [ 738.784441] do_sendfile+0x4db/0xbd0 [ 738.788169] ? do_compat_pwritev64+0x140/0x140 [ 738.792884] ? fput+0xd4/0x150 [ 738.796086] SyS_sendfile64+0x102/0x110 [ 738.800065] ? SyS_sendfile+0x130/0x130 [ 738.804174] ? do_syscall_64+0x53/0x640 [ 738.808157] ? SyS_sendfile+0x130/0x130 [ 738.812484] do_syscall_64+0x1e8/0x640 [ 738.816386] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 738.821369] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 738.826559] RIP: 0033:0x45c6c9 [ 738.829783] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 738.837641] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 738.844924] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 738.852231] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 738.859771] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 20:56:01 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:01 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:01 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:01 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) keyctl$session_to_parent(0x12) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:01 executing program 4: ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x7, 0x6, 0x4, 0x40, 0x80000001, {}, {0x2, 0xc, 0x7, 0xdb, 0x0, 0x3, "d0ac8b55"}, 0x5, 0x3, @userptr=0x26, 0x9, 0x0, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f00000003c0)=""/65, 0x41}], 0x6, &(0x7f00000004c0)=""/11, 0xb}, 0x40000000) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f00000006c0)={0x7f, 0x6, 0x10, 0x1, 0x30b3}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x34, 0x3, 0x8, 0x101, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8848}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x4) r3 = socket(0x9, 0x802, 0xfd) write(r3, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000540)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x2}) [ 738.867051] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000007 [ 739.031500] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 739.038453] BFS-fs: bfs_fill_super(): Last block not available: 109 20:56:02 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:02 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:02 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) accept4(0xffffffffffffffff, &(0x7f0000000040)=@caif=@util, &(0x7f0000000140)=0x80, 0x80800) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) sendto$netrom(r3, &(0x7f0000000300)="f6a4cfd453c807778be32784dae38a2294a0a8721eb7f28c73fc06027a1c523a10bddda98cfd5cf2356e2e92bce718e6eeb4923ecd1b16096acc355e3a65e148844652756979672f8699e87fac3da7cf97a84bd7518c606d27f6eb803f39c3b20c55484dfb25c3f3edf62dd508a49250356c135dfefec6dad01f67891c5cbe4c72dab1653e8b187a02a171cf84e7627af9e2efefa16667237e486d12d9953b272eb294f6687af81758a2df2099b896861e98d17c13e7beb6ebd299c4d37892ac75fe9ae6032363847af280", 0xcb, 0x4a555896edf0576a, &(0x7f0000000400)={{0x3, @bcast, 0x6}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x38, r4, 0x4, 0x70bd2c, 0x25dfdbf9, {}, [@NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x2400c001) 20:56:02 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000000)=0x7f) r1 = socket(0x10, 0x802, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x9, 0x2, 0xe0, &(0x7f0000ffc000/0x4000)=nil, 0x3}) write(r1, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 20:56:02 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:02 executing program 0 (fault-call:27 fault-nth:8): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:02 executing program 4: r0 = socket(0x9, 0x802, 0x1) write(r0, &(0x7f0000000180)="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", 0xfc) socket(0x21, 0x1, 0x7f) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r4 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x8, 0x6, 0x4, 0x1000000, 0x0, {r2, r3/1000+10000}, {0x5, 0x1, 0x4, 0xb2, 0x3f, 0x5, "8216b21d"}, 0x5, 0x4, @offset=0x5, 0x7, 0x0, r4}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, {0x5, 0x1f, 0x9, 0xfffffffc}}) 20:56:02 executing program 2: r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000040)={0x8001, 0x2, 0x4, 0x7fff, 0xe4, "b60a646dbad359598adb1710119642c6d16b34", 0x20, 0x63b2}) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x4c) timerfd_create(0x8, 0x800) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000140)={{0x7, 0x1}, {0x9, 0x20}, 0x7, 0x4, 0x3}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x1a8002015}) 20:56:02 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000040)={0x9d0000, 0x101, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x9f0901, 0x4, [], @ptr=0x1}}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x315800, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xc, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2004}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1040}, 0x4000804) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:02 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:02 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x10002, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x1b1}) write(0xffffffffffffffff, &(0x7f0000000180)="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", 0xfc) 20:56:02 executing program 2: r0 = epoll_create1(0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000011c0)={[0xdc, 0x9, 0x6, 0x6, 0x5, 0x1f, 0x8, 0x0, 0x5, 0xd47, 0x2, 0x6, 0x7441, 0x8, 0x2, 0x26c7], 0xf000, 0x25800}) write$vhost_msg(r1, &(0x7f0000001140)={0x1, {&(0x7f0000000140)=""/4096, 0x1000, &(0x7f0000000000)=""/67, 0x1, 0x2}}, 0x48) r4 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000001280)={0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000000c0)={0x128000013}) [ 739.526400] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 739.572980] audit: type=1800 audit(1581972962.445:1044): pid=29460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17666 res=0 [ 739.596934] FAULT_INJECTION: forcing a failure. [ 739.596934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 739.608864] CPU: 1 PID: 29460 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 739.616963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 739.626587] Call Trace: [ 739.629223] dump_stack+0x142/0x197 [ 739.633050] should_fail.cold+0x10f/0x159 [ 739.637261] ? __might_sleep+0x93/0xb0 [ 739.641178] __alloc_pages_nodemask+0x1d6/0x7a0 [ 739.645874] ? __alloc_pages_slowpath+0x2930/0x2930 [ 739.650921] alloc_pages_current+0xec/0x1e0 [ 739.655262] push_pipe+0x3cb/0x780 [ 739.658922] ? sanity+0x20f/0x310 [ 739.662406] iov_iter_get_pages+0x419/0xd10 [ 739.666729] ? csum_and_copy_from_iter+0xd50/0xd50 [ 739.671743] do_blockdev_direct_IO+0x362d/0x9130 [ 739.676530] ? sb_init_dio_done_wq+0x80/0x80 [ 739.680937] ? __lock_acquire+0x5f7/0x4620 [ 739.685170] ? ext4_chunk_trans_blocks+0x30/0x30 [ 739.689961] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 739.695593] ? lock_acquire+0x16f/0x430 [ 739.699566] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 739.705194] __blockdev_direct_IO+0xa1/0xca [ 739.709521] ext4_direct_IO+0x4e7/0x18f0 [ 739.713599] ? touch_atime+0xce/0x250 [ 739.717422] generic_file_read_iter+0x2f3/0x28d0 [ 739.722168] ? save_stack+0xa9/0xd0 [ 739.725791] ? save_stack_trace+0x16/0x20 [ 739.729940] ? save_stack+0x45/0xd0 [ 739.733568] ? kasan_kmalloc+0xce/0xf0 [ 739.737512] ? __kmalloc+0x15d/0x7a0 [ 739.741263] ? alloc_pipe_info+0x15c/0x380 [ 739.745616] ? do_splice_direct+0x18d/0x230 [ 739.749936] ? do_sendfile+0x4db/0xbd0 [ 739.753831] ? do_syscall_64+0x1e8/0x640 [ 739.757911] ? filemap_range_has_page+0x2d0/0x2d0 [ 739.762837] ? __lock_is_held+0xb6/0x140 [ 739.766914] ? save_trace+0x290/0x290 [ 739.770731] ? fsnotify+0x92f/0x11e0 [ 739.774443] ext4_file_read_iter+0x14e/0x340 [ 739.778847] generic_file_splice_read+0x37d/0x600 [ 739.783691] ? fsnotify+0x11e0/0x11e0 [ 739.787612] ? add_to_pipe+0x340/0x340 [ 739.791505] ? rw_verify_area+0xea/0x2b0 [ 739.795554] ? add_to_pipe+0x340/0x340 [ 739.799435] do_splice_to+0x105/0x170 [ 739.803245] splice_direct_to_actor+0x222/0x7b0 [ 739.808098] ? generic_pipe_buf_nosteal+0x10/0x10 [ 739.812942] ? do_splice_to+0x170/0x170 [ 739.817045] ? rw_verify_area+0xea/0x2b0 [ 739.821196] do_splice_direct+0x18d/0x230 [ 739.825460] ? splice_direct_to_actor+0x7b0/0x7b0 [ 739.830315] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 739.835067] ? __sb_start_write+0x153/0x2f0 [ 739.839395] do_sendfile+0x4db/0xbd0 [ 739.843220] ? do_compat_pwritev64+0x140/0x140 [ 739.847821] ? fput+0xd4/0x150 [ 739.851006] SyS_sendfile64+0x102/0x110 [ 739.854989] ? SyS_sendfile+0x130/0x130 [ 739.858965] ? do_syscall_64+0x53/0x640 [ 739.862944] ? SyS_sendfile+0x130/0x130 [ 739.866927] do_syscall_64+0x1e8/0x640 [ 739.870915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 739.875768] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 739.880960] RIP: 0033:0x45c6c9 [ 739.884160] RSP: 002b:00007fa5d1684c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 739.891878] RAX: ffffffffffffffda RBX: 00007fa5d16856d4 RCX: 000000000045c6c9 [ 739.899161] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 739.906437] RBP: 000000000076c118 R08: 0000000000000000 R09: 0000000000000000 [ 739.913708] R10: 02008000fffffffe R11: 0000000000000246 R12: 000000000000000a [ 739.920975] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000008 20:56:03 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:03 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e10100"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:03 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESOCT=0x0, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f0000000400)=ANY=[@ANYBLOB="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"/377], @ANYPTR]], 0x26) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x6, 0x8, 0x4, 0x100, 0xfff, {0x77359400}, {0x1, 0x6, 0x3f, 0x3, 0x5, 0xff, "fff4b192"}, 0x2, 0x2, @userptr=0x2, 0x4, 0x0, r1}) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x3ff, &(0x7f0000000100)={[0x8]}, 0x8) 20:56:03 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x4000001e}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x802, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000040), &(0x7f0000000140)=0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:03 executing program 0 (fault-call:27 fault-nth:9): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 740.613525] audit: type=1800 audit(1581972963.485:1045): pid=29482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17855 res=0 [ 740.637726] FAULT_INJECTION: forcing a failure. [ 740.637726] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 740.649668] CPU: 1 PID: 29482 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 20:56:03 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x4000) syz_emit_ethernet(0xfb, &(0x7f0000000280)={@broadcast, @empty, @val={@val={0x9100, 0x6}, {0x8100, 0x0, 0x0, 0x1}}, {@generic={0x1a, "6229ecf2eab1408299df93388a1375a41116b49338f470ef20ced8c398c5b96f9195448cd11341d81545493e1f43209a514b66b886d16f7025645ad104e391a2a458aa47a27c656160492d9f4c4462da386a715c73f3d4f0935c5f74c5e692e3bec024f274fcf030437dd94111cd9927e654900775f1dd22a53926c0038eb8ac916ea490faa8f6a377aa7e7dcc6029f30ea0cb574555b56a2f0eb43aa0073b0c3345dbbe5a37771092a180f673dbfecff9438792423999f8cde347da7498d6870066e33a1edc06f5adb8c21d90836a8186461517f56c83acb5d8fd5b7f4f6c3ef490949ba8"}}}, &(0x7f0000000080)={0x0, 0x3, [0x865, 0x9e4, 0xaea, 0xa26]}) r0 = socket(0x10, 0x802, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2a, "736d41e7cb948812387ae302eb03608e111a2442f7bfa125fba176dfeaaf33b10f08c07431d17d09c4a0"}, &(0x7f0000000140)=0x4e) r2 = socket$isdn(0x22, 0x3, 0x24) bind$isdn(r2, &(0x7f0000000380)={0x22, 0xfb, 0x0, 0x9, 0x8}, 0x6) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:03 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000240)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr="1cdf6d8a14318249b54a8d6de41c045d"}}}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r4, 0x2, 0xfffb, 0xba, 0x1, 0x9}, &(0x7f0000000040)=0x14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x1}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 20:56:03 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x10002, 0x0, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0xfffffffffffffff9, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 740.657824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 740.667364] Call Trace: [ 740.670060] dump_stack+0x142/0x197 [ 740.673854] should_fail.cold+0x10f/0x159 [ 740.678036] ? __might_sleep+0x93/0xb0 [ 740.681952] __alloc_pages_nodemask+0x1d6/0x7a0 [ 740.686640] ? __alloc_pages_slowpath+0x2930/0x2930 [ 740.691680] alloc_pages_current+0xec/0x1e0 [ 740.696021] push_pipe+0x3cb/0x780 [ 740.699687] ? sanity+0x20f/0x310 [ 740.703182] iov_iter_get_pages+0x419/0xd10 [ 740.707677] ? csum_and_copy_from_iter+0xd50/0xd50 20:56:03 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e10100"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 740.712886] do_blockdev_direct_IO+0x362d/0x9130 [ 740.717893] ? sb_init_dio_done_wq+0x80/0x80 [ 740.722310] ? __lock_acquire+0x5f7/0x4620 [ 740.726558] ? ext4_chunk_trans_blocks+0x30/0x30 [ 740.731342] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 740.736991] ? lock_acquire+0x16f/0x430 [ 740.740977] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 740.746613] __blockdev_direct_IO+0xa1/0xca [ 740.750999] ext4_direct_IO+0x4e7/0x18f0 [ 740.755135] ? touch_atime+0xce/0x250 [ 740.758998] generic_file_read_iter+0x2f3/0x28d0 [ 740.763765] ? save_stack+0xa9/0xd0 [ 740.767420] ? save_stack_trace+0x16/0x20 [ 740.771581] ? save_stack+0x45/0xd0 [ 740.775215] ? kasan_kmalloc+0xce/0xf0 [ 740.779108] ? __kmalloc+0x15d/0x7a0 [ 740.782947] ? alloc_pipe_info+0x15c/0x380 [ 740.787190] ? do_splice_direct+0x18d/0x230 [ 740.791518] ? do_sendfile+0x4db/0xbd0 [ 740.795413] ? do_syscall_64+0x1e8/0x640 [ 740.799504] ? filemap_range_has_page+0x2d0/0x2d0 [ 740.804368] ? __lock_is_held+0xb6/0x140 [ 740.808439] ? save_trace+0x290/0x290 [ 740.812260] ? fsnotify+0x92f/0x11e0 [ 740.815990] ext4_file_read_iter+0x14e/0x340 [ 740.820411] generic_file_splice_read+0x37d/0x600 [ 740.825358] ? fsnotify+0x11e0/0x11e0 [ 740.829170] ? add_to_pipe+0x340/0x340 [ 740.833076] ? rw_verify_area+0xea/0x2b0 [ 740.837147] ? add_to_pipe+0x340/0x340 [ 740.841099] do_splice_to+0x105/0x170 [ 740.845007] splice_direct_to_actor+0x222/0x7b0 [ 740.849691] ? generic_pipe_buf_nosteal+0x10/0x10 [ 740.854568] ? do_splice_to+0x170/0x170 [ 740.858648] ? rw_verify_area+0xea/0x2b0 [ 740.862844] do_splice_direct+0x18d/0x230 [ 740.867006] ? splice_direct_to_actor+0x7b0/0x7b0 [ 740.871867] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 740.876721] ? __sb_start_write+0x153/0x2f0 [ 740.881297] do_sendfile+0x4db/0xbd0 [ 740.885036] ? do_compat_pwritev64+0x140/0x140 [ 740.889779] ? fput+0xd4/0x150 [ 740.892985] SyS_sendfile64+0x102/0x110 [ 740.896996] ? SyS_sendfile+0x130/0x130 [ 740.901007] ? do_syscall_64+0x53/0x640 [ 740.905165] ? SyS_sendfile+0x130/0x130 [ 740.909151] do_syscall_64+0x1e8/0x640 [ 740.913057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 740.917914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 740.923110] RIP: 0033:0x45c6c9 [ 740.926485] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 740.934549] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 740.941848] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 740.949231] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 740.956514] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 740.963788] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000009 20:56:03 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e10100"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:03 executing program 4: msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x7) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) [ 741.113227] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:04 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x9, &(0x7f0000000180)=[{0x8, 0x9, 0x40, 0x7}, {0x4, 0x9, 0x5, 0x9}, {0x92e, 0x6, 0x40, 0x8}, {0xc81f, 0x8, 0xff, 0x1}, {0x1ff, 0x2, 0x7, 0x7ff}, {0x1000, 0x7, 0x2b, 0xd471}, {0x3, 0x5, 0xd3, 0x7}, {0x4, 0x8, 0xfb, 0x1}, {0xff1a, 0x9, 0xa1}]}) write$P9_RREADLINK(r0, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r4}}, 0x48) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x48682, 0x0) sync_file_range(r5, 0x2, 0x3ebe, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r4, 0xa}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @mcast1}, {0xa, 0x0, 0x0, @dev}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x5c4, @empty}, {0xa, 0x4e23, 0x10001, @rand_addr="39e363ecc0cd37884490713545799888", 0x6}, r2, 0x1ff}}, 0x48) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x3]}, 0x0, 0x8) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f00000005c0)="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"/391, 0x187) [ 741.346572] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.428173] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 741.511367] selinux_nlmsg_perm: 457 callbacks suppressed [ 741.511384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.531976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.555363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.569471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.584104] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.598198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.612515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.626581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.642208] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 [ 741.656322] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29499 comm=syz-executor.1 20:56:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:04 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e10100000014"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:04 executing program 0 (fault-call:27 fault-nth:10): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:04 executing program 4: r0 = socket(0x8, 0x8000f, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') r4 = socket$inet(0x2, 0x3, 0x4) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000001c0)={0x0, @local, @local}, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x1c, r3, 0x711, 0x0, 0x0, {0xc}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2c000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0c0) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000080)="c714ab0b85e15931ae995be3b86dd05e1f1124fdc629c3b3fbfdf397e2529edad1668a", 0x23) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x80, r7, 0x500, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x54, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff6d}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4baa4569}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3165}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x4e20, @loopback}}) 20:56:04 executing program 2: r0 = epoll_create1(0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x404400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000fddbdf251100000006001401040000000c0099007f000000b7471f36250d837827f3d40334a55fd7ed88c72bc7a32e18116ae37a0ab0aef8d192da5951febee93e1cdb2bb8165c5abcd433c0d76096d099841f1bfcc0825764538d1e8b692a29e4"], 0x3}, 0x1, 0x0, 0x0, 0x884}, 0x400c801) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2e3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xf133}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ea}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf9}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000000) r4 = timerfd_create(0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r5, &(0x7f0000000000)={0x9976faffe7f45eae}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r4, &(0x7f00000000c0)={0x1b8000014}) 20:56:04 executing program 4: r0 = socket(0xa, 0x802, 0x7) write(r0, &(0x7f0000000180)="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", 0xfc) socketpair(0x1, 0x0, 0x7c, &(0x7f0000000000)) 20:56:04 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 741.979697] audit: type=1800 audit(1581972964.845:1046): pid=29541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18625 res=0 [ 742.004286] FAULT_INJECTION: forcing a failure. [ 742.004286] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 742.016274] CPU: 1 PID: 29541 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 742.024170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.033901] Call Trace: [ 742.036514] dump_stack+0x142/0x197 [ 742.040169] should_fail.cold+0x10f/0x159 [ 742.044425] ? __might_sleep+0x93/0xb0 [ 742.048331] __alloc_pages_nodemask+0x1d6/0x7a0 [ 742.053181] ? __alloc_pages_slowpath+0x2930/0x2930 [ 742.058242] alloc_pages_current+0xec/0x1e0 [ 742.062703] push_pipe+0x3cb/0x780 [ 742.066257] ? sanity+0x20f/0x310 [ 742.069727] iov_iter_get_pages+0x419/0xd10 [ 742.074058] ? csum_and_copy_from_iter+0xd50/0xd50 [ 742.079001] do_blockdev_direct_IO+0x362d/0x9130 [ 742.083796] ? sb_init_dio_done_wq+0x80/0x80 [ 742.088217] ? __lock_acquire+0x5f7/0x4620 [ 742.092472] ? ext4_chunk_trans_blocks+0x30/0x30 [ 742.097259] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 742.102905] ? lock_acquire+0x16f/0x430 [ 742.106888] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 742.112544] __blockdev_direct_IO+0xa1/0xca [ 742.116960] ext4_direct_IO+0x4e7/0x18f0 [ 742.121033] ? touch_atime+0xce/0x250 [ 742.124869] generic_file_read_iter+0x2f3/0x28d0 [ 742.129639] ? save_stack+0xa9/0xd0 [ 742.133280] ? save_stack_trace+0x16/0x20 [ 742.137539] ? save_stack+0x45/0xd0 [ 742.141172] ? kasan_kmalloc+0xce/0xf0 [ 742.145089] ? __kmalloc+0x15d/0x7a0 [ 742.148809] ? alloc_pipe_info+0x15c/0x380 [ 742.153060] ? do_splice_direct+0x18d/0x230 [ 742.157387] ? do_sendfile+0x4db/0xbd0 [ 742.161286] ? do_syscall_64+0x1e8/0x640 [ 742.165512] ? filemap_range_has_page+0x2d0/0x2d0 [ 742.170368] ? __lock_is_held+0xb6/0x140 [ 742.174435] ? save_trace+0x290/0x290 [ 742.178258] ? fsnotify+0x92f/0x11e0 [ 742.182012] ext4_file_read_iter+0x14e/0x340 [ 742.186467] generic_file_splice_read+0x37d/0x600 [ 742.191332] ? fsnotify+0x11e0/0x11e0 [ 742.195175] ? add_to_pipe+0x340/0x340 [ 742.199181] ? rw_verify_area+0xea/0x2b0 [ 742.203284] ? add_to_pipe+0x340/0x340 [ 742.207183] do_splice_to+0x105/0x170 [ 742.210998] splice_direct_to_actor+0x222/0x7b0 [ 742.215968] ? generic_pipe_buf_nosteal+0x10/0x10 [ 742.220965] ? do_splice_to+0x170/0x170 [ 742.224955] ? rw_verify_area+0xea/0x2b0 [ 742.229035] do_splice_direct+0x18d/0x230 [ 742.233322] ? splice_direct_to_actor+0x7b0/0x7b0 [ 742.238183] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 742.242994] ? __sb_start_write+0x153/0x2f0 [ 742.247418] do_sendfile+0x4db/0xbd0 [ 742.251152] ? do_compat_pwritev64+0x140/0x140 [ 742.255758] ? fput+0xd4/0x150 [ 742.258968] SyS_sendfile64+0x102/0x110 [ 742.262962] ? SyS_sendfile+0x130/0x130 [ 742.266958] ? do_syscall_64+0x53/0x640 [ 742.270948] ? SyS_sendfile+0x130/0x130 [ 742.274931] do_syscall_64+0x1e8/0x640 20:56:05 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e10100000014"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:05 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x4) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 742.278826] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 742.283692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 742.289005] RIP: 0033:0x45c6c9 [ 742.292218] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 742.300182] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 742.307695] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 742.314970] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 742.322331] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 742.329609] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000000a 20:56:05 executing program 4: r0 = socket(0x22, 0x800, 0x3f) write(r0, &(0x7f0000000280)="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", 0xfc) 20:56:05 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e10100000014"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:05 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r2) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) r3 = add_key(&(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="2274d66b9dcd3d79d9ace26a462910a8696163417737d68ffb8a4356e6889225ef54e8b19e9bf0487e1abf4ff32bed2a297a016168e6196e4de5feb0f076b92ac2934dbe2b70b36db999acbdc85d3cb6fccb2a9b5e675f2d6c16a0748d3d28a9d443c22e2d14db36b97366b11437a1dd7bc0849fecdb6126a0120976e81c2b", 0x7f, 0xfffffffffffffffa) r4 = add_key(&(0x7f0000000400)='.dead\x00', 0x0, 0x0, 0x0, r3) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x10400, 0x0) write$sndseq(r5, &(0x7f0000000140)=[{0x3, 0x6, 0x2, 0x5, @time={0x3, 0x8001}, {0x80, 0x9}, {0x1b, 0x5}, @queue={0x0, {0x8, 0x7}}}], 0x1c) keyctl$link(0x8, 0x0, r4) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bind$isdn_base(r6, &(0x7f0000000440)={0x22, 0x6, 0xf1, 0x3, 0x75}, 0x6) keyctl$assume_authority(0x10, r4) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x50000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r7, 0xae03, 0x3ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r9, 0xc0385720, &(0x7f0000000280)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r10 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/access\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r10, &(0x7f0000000480)={0x1a8002015}) [ 742.858726] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:06 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:06 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x106) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000000)) write(r0, &(0x7f0000000280)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000ec210b2e0d2d55000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d4500000dee5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4accd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0721e55901690c16d37759882f7d8dede761955b37c620a8021da56152400d9d7344d34283c8d6e43a55da22f9138", 0x125) 20:56:06 executing program 2: r0 = epoll_create1(0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000000c0)={0x1a8002015}) 20:56:06 executing program 0 (fault-call:27 fault-nth:11): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:06 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e1010000001400"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:06 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001000)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}, {{&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000900)=[{&(0x7f00000003c0)=""/78, 0x4e}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000240)=""/15, 0xf}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f00000002c0)=""/22, 0x16}, {&(0x7f00000005c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/134, 0x86}, {&(0x7f0000000840)=""/174, 0xae}], 0xa, &(0x7f0000000340)=""/60, 0x3c}, 0x6c1}, {{&(0x7f00000009c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000a40)=""/241, 0xf1}, {&(0x7f0000000b40)=""/149, 0x95}, {&(0x7f0000000c00)=""/230, 0xe6}, {&(0x7f0000000d00)=""/243, 0xf3}, {&(0x7f0000000e00)=""/188, 0xbc}], 0x5}}], 0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) dup3(r1, r2, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x90) [ 743.576397] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. 20:56:06 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000040)) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 743.665717] audit: type=1800 audit(1581972966.535:1047): pid=29600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18705 res=0 [ 743.689823] FAULT_INJECTION: forcing a failure. [ 743.689823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.701701] CPU: 0 PID: 29600 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 743.709790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.719278] Call Trace: [ 743.721885] dump_stack+0x142/0x197 [ 743.725534] should_fail.cold+0x10f/0x159 [ 743.729842] ? __might_sleep+0x93/0xb0 [ 743.733797] __alloc_pages_nodemask+0x1d6/0x7a0 [ 743.738483] ? __alloc_pages_slowpath+0x2930/0x2930 [ 743.743532] alloc_pages_current+0xec/0x1e0 [ 743.748056] push_pipe+0x3cb/0x780 [ 743.751602] ? sanity+0x20f/0x310 [ 743.755076] iov_iter_get_pages+0x419/0xd10 [ 743.759426] ? csum_and_copy_from_iter+0xd50/0xd50 [ 743.764379] do_blockdev_direct_IO+0x362d/0x9130 [ 743.769324] ? sb_init_dio_done_wq+0x80/0x80 [ 743.773747] ? __lock_acquire+0x5f7/0x4620 [ 743.778127] ? ext4_chunk_trans_blocks+0x30/0x30 [ 743.783100] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 743.788961] ? lock_acquire+0x16f/0x430 [ 743.792954] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 743.798594] __blockdev_direct_IO+0xa1/0xca [ 743.802951] ext4_direct_IO+0x4e7/0x18f0 [ 743.807027] ? touch_atime+0xce/0x250 [ 743.810973] generic_file_read_iter+0x2f3/0x28d0 [ 743.815742] ? save_stack+0xa9/0xd0 [ 743.819379] ? save_stack_trace+0x16/0x20 [ 743.823636] ? save_stack+0x45/0xd0 [ 743.827276] ? kasan_kmalloc+0xce/0xf0 [ 743.831317] ? __kmalloc+0x15d/0x7a0 [ 743.835905] ? alloc_pipe_info+0x15c/0x380 [ 743.840155] ? do_splice_direct+0x18d/0x230 [ 743.844469] ? do_sendfile+0x4db/0xbd0 [ 743.848460] ? do_syscall_64+0x1e8/0x640 [ 743.852550] ? filemap_range_has_page+0x2d0/0x2d0 [ 743.857406] ? __lock_is_held+0xb6/0x140 [ 743.861506] ? save_trace+0x290/0x290 20:56:06 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e1010000001400"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:06 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) renameat(0xffffffffffffffff, &(0x7f0000000340)='./bus\x00', r1, &(0x7f0000000380)='./bus\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr="1cdf6d8a14318249b54a8d6de41c045d"}}}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={r5, 0x5}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={r6, 0x78, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x10000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x42f}, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x8}, @in6={0xa, 0x4e24, 0xffff23bc, @dev={0xfe, 0x80, [], 0x2d}, 0x9}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000140)=0x10) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:06 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e1010000001400"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 743.865317] ? fsnotify+0x92f/0x11e0 [ 743.869047] ext4_file_read_iter+0x14e/0x340 [ 743.873491] generic_file_splice_read+0x37d/0x600 [ 743.878445] ? fsnotify+0x11e0/0x11e0 [ 743.882261] ? add_to_pipe+0x340/0x340 [ 743.886292] ? rw_verify_area+0xea/0x2b0 [ 743.890368] ? add_to_pipe+0x340/0x340 [ 743.894276] do_splice_to+0x105/0x170 [ 743.898102] splice_direct_to_actor+0x222/0x7b0 [ 743.902787] ? generic_pipe_buf_nosteal+0x10/0x10 [ 743.907643] ? do_splice_to+0x170/0x170 [ 743.908825] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 743.911632] ? rw_verify_area+0xea/0x2b0 [ 743.911648] do_splice_direct+0x18d/0x230 [ 743.911661] ? splice_direct_to_actor+0x7b0/0x7b0 [ 743.911677] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 743.911686] ? __sb_start_write+0x153/0x2f0 [ 743.911696] do_sendfile+0x4db/0xbd0 [ 743.911713] ? do_compat_pwritev64+0x140/0x140 [ 743.911727] ? fput+0xd4/0x150 [ 743.911738] SyS_sendfile64+0x102/0x110 [ 743.911747] ? SyS_sendfile+0x130/0x130 [ 743.911756] ? do_syscall_64+0x53/0x640 [ 743.911765] ? SyS_sendfile+0x130/0x130 [ 743.911777] do_syscall_64+0x1e8/0x640 [ 743.974302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.979192] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 743.984402] RIP: 0033:0x45c6c9 [ 743.987599] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 743.995317] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 744.002698] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 744.009987] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 20:56:06 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:06 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000c6b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 744.017412] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 744.024918] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000000b 20:56:07 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:07 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003bc0)='/dev/autofs\x00', 0x100000, 0x0) sendto$ax25(r3, &(0x7f0000003c00)="3c7a8d5e7fa8da6e1b4244306c93ce5da46adc353825ea6a27c8bd77e1649f237ddf019a3826d4e3a7d8d9b57dac1284dcb71437766d345ad6fabc9e1bf424fb85fb1bddecde6515ce6af54f1a01bbb24464f2ca3f20e173a448fa8bdc33c3d62c8a094818b4a2b86a7560fceec7e146a914cc8c8363e89bd27b568d9ec51b0d7217f89ceacb4e57a2ad83cf8862ae878e0f4e0893dd364eda5c4c632c4c6ce40ff1390111802966be55ba74d057ee3bb51bf411e230aaca72ed35a05dd55709cbba78536ba356563686c9548b5dc8f99e1981", 0xd3, 0x1, 0x0, 0x0) 20:56:07 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:07 executing program 0 (fault-call:27 fault-nth:12): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:07 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000001600)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}, {{&(0x7f0000000000)=@alg, 0x80, &(0x7f00000001c0)=[{&(0x7f00000016c0)=""/45, 0x2d}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000100)}, {&(0x7f0000001700)=""/128, 0x80}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001840)=""/259, 0x103}, 0x200}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000340)=""/19, 0x13}, {&(0x7f0000001980)=""/138, 0x8a}, {&(0x7f00000013c0)=""/5, 0x5}], 0x3, &(0x7f0000001540)=""/162, 0xa2}, 0x10000}], 0x3, 0x40000044, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2, 0x0) accept4$rose(r1, 0x0, &(0x7f0000000100), 0x80000) 20:56:07 executing program 4: r0 = socket(0x10, 0x4, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x70000, 0x4000) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000003c0)={0x1, 0x1, 0x1000, 0xc4, &(0x7f00000002c0)="47932b45301fcfa25ca58887a6ddd5d6085299f5fad5f77689fcaf21be1288f293523b685389e913a712f0c08003543807b457e2c702e1e330aeac07bd1a13bac87a9710c207544e23abf72ce6c99a5c99e5bc34f63f2605cf0b8590c38ed3ea032b6b7b6eb53c481288f5de84fa29556134ac77e4a7dd75e3c0ca5eaef6fb9bc39abf61dc4abcf43dd0029b711ce8e7eb6a2586688fe45c1afdc9236069ce6a0c3b74ce72ff2afbeffb9a3851b06db168c80efeeda47711701ae3e0f7c3fe98e87c2038", 0x2e, 0x0, &(0x7f0000000140)="28276c4410e06b29331e5f1e7741397ffaf9deb3a89a42f07cd9383c91feb6ddc1eea16f7a2e9d8cb21ab995c7a5"}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_setattr(r4, &(0x7f0000000080)={0x38, 0x0, 0x35, 0x8000, 0x1000, 0x9531, 0x7, 0x100000000, 0x9, 0x4}, 0x0) 20:56:07 executing program 5: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001200)={0x3, 0x0, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=""/149, &(0x7f00000000c0)=""/8, 0x1000}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') sync_file_range(r1, 0x80, 0x800, 0x0) r3 = socket$isdn_base(0x22, 0x3, 0x0) open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8e000000020000006a17e49f40023d30277ea33f67aa899ce9ec78f8be1c1e792adcf454115ce288b67e08be59c359aa1b5517eb5bb8e2102b3e33516e0282befec1b62504b51449f3cb3e9d3b3c0b6e797fb8dd826cfb5c616cb0e66aa12a59b9143eb88fae292f0dd1d9ad0b8a52a24586f3e4148eab7307c485f002d6cf86e08410fe0ab20f1cd1fc64a081db"], 0x402000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:07 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fadvise64(r0, 0x2, 0x6, 0x4) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) getdents64(0xffffffffffffff9c, &(0x7f0000000000)=""/37, 0x25) [ 744.789917] audit: type=1800 audit(1581972967.655:1048): pid=29653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18715 res=0 [ 744.814410] FAULT_INJECTION: forcing a failure. [ 744.814410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 744.826380] CPU: 1 PID: 29653 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 744.834431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 744.843795] Call Trace: [ 744.846403] dump_stack+0x142/0x197 [ 744.850070] should_fail.cold+0x10f/0x159 [ 744.854392] ? __might_sleep+0x93/0xb0 [ 744.858300] __alloc_pages_nodemask+0x1d6/0x7a0 [ 744.863104] ? __alloc_pages_slowpath+0x2930/0x2930 [ 744.868149] alloc_pages_current+0xec/0x1e0 [ 744.872501] push_pipe+0x3cb/0x780 [ 744.876075] ? sanity+0x20f/0x310 [ 744.879550] iov_iter_get_pages+0x419/0xd10 [ 744.883894] ? csum_and_copy_from_iter+0xd50/0xd50 [ 744.889062] do_blockdev_direct_IO+0x362d/0x9130 [ 744.893959] ? sb_init_dio_done_wq+0x80/0x80 [ 744.898374] ? __lock_acquire+0x5f7/0x4620 [ 744.903115] ? ext4_chunk_trans_blocks+0x30/0x30 [ 744.908022] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 744.913679] ? lock_acquire+0x16f/0x430 [ 744.917666] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 744.923396] __blockdev_direct_IO+0xa1/0xca [ 744.927751] ext4_direct_IO+0x4e7/0x18f0 [ 744.931851] ? touch_atime+0xce/0x250 [ 744.935678] generic_file_read_iter+0x2f3/0x28d0 20:56:07 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 744.940444] ? save_stack+0xa9/0xd0 [ 744.944216] ? save_stack_trace+0x16/0x20 [ 744.948373] ? save_stack+0x45/0xd0 [ 744.952010] ? kasan_kmalloc+0xce/0xf0 [ 744.956045] ? __kmalloc+0x15d/0x7a0 [ 744.959905] ? alloc_pipe_info+0x15c/0x380 [ 744.964178] ? do_splice_direct+0x18d/0x230 [ 744.968508] ? do_sendfile+0x4db/0xbd0 [ 744.972426] ? do_syscall_64+0x1e8/0x640 [ 744.976507] ? filemap_range_has_page+0x2d0/0x2d0 [ 744.981457] ? __lock_is_held+0xb6/0x140 [ 744.985522] ? save_trace+0x290/0x290 20:56:07 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x100000001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 744.989334] ? fsnotify+0x92f/0x11e0 [ 744.995671] ext4_file_read_iter+0x14e/0x340 [ 745.000093] generic_file_splice_read+0x37d/0x600 [ 745.005075] ? fsnotify+0x11e0/0x11e0 [ 745.008886] ? add_to_pipe+0x340/0x340 [ 745.012794] ? rw_verify_area+0xea/0x2b0 [ 745.016869] ? add_to_pipe+0x340/0x340 [ 745.020768] do_splice_to+0x105/0x170 [ 745.024620] splice_direct_to_actor+0x222/0x7b0 [ 745.029303] ? generic_pipe_buf_nosteal+0x10/0x10 [ 745.030191] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 745.034293] ? do_splice_to+0x170/0x170 [ 745.034304] ? rw_verify_area+0xea/0x2b0 [ 745.034319] do_splice_direct+0x18d/0x230 [ 745.034333] ? splice_direct_to_actor+0x7b0/0x7b0 [ 745.034351] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 745.034362] ? __sb_start_write+0x153/0x2f0 [ 745.034372] do_sendfile+0x4db/0xbd0 [ 745.034389] ? do_compat_pwritev64+0x140/0x140 [ 745.077408] ? fput+0xd4/0x150 [ 745.080619] SyS_sendfile64+0x102/0x110 [ 745.084717] ? SyS_sendfile+0x130/0x130 [ 745.088720] ? do_syscall_64+0x53/0x640 [ 745.092841] ? SyS_sendfile+0x130/0x130 [ 745.096838] do_syscall_64+0x1e8/0x640 [ 745.100738] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 745.105818] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 745.111015] RIP: 0033:0x45c6c9 [ 745.114823] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 745.122542] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 745.129938] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 745.137347] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 745.144798] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 745.152226] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000000c 20:56:08 executing program 4: socket(0x10, 0x802, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040)) write$eventfd(r3, &(0x7f0000000000)=0x9, 0x8) write(r2, &(0x7f0000000180)="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", 0xfffffffffffffd5f) 20:56:08 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_ivalue=0x4}) ioctl$FS_IOC_GETFLAGS(r3, 0x80086601, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:08 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:08 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = gettid() getpgid(r1) ptrace$cont(0xe, r1, 0xa4, 0x8) write(r0, &(0x7f0000000180)="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", 0xfc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) ioctl$SIOCNRDECOBS(r2, 0x89e2) ftruncate(0xffffffffffffffff, 0x7) 20:56:08 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000070000000100000000000007000000000e000000080400000010000000050000060400000005000000010001000d0000000300000009000000050000000e0000000000008006000000b9f800000500000005000005fbffffff0900000003000000ff0f00000b00000001000000fbffffff0f0000000000000001000000070000000400000008000000000000000400000000000000090000000000000e03000000000000000f000000000000090400000000000000000000030000000002000000040000001501384a005f5f30306100"/243], &(0x7f0000000240)=""/107, 0xf3, 0x6b, 0x1}, 0x20) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f00000002c0)={0x80002012}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:08 executing program 0 (fault-call:27 fault-nth:13): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:08 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', r6}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xcf2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7f}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x39}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x404000, 0x62) write$P9_RREADLINK(r7, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200080, 0x0) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f0000000200)="e429b83e09d8695acc5d") sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68040000", @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf2501000000140008006e72300000000000000000000000000005000d000100000008000c0000000000060001000700000008001700", @ANYRES32=r7, @ANYBLOB="050013000100000008000a000300000005001300090000000500050001000000"], 0x68}, 0x1, 0x0, 0x0, 0x8081}, 0x4000090) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:08 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0xaa9a}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x81}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:08 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$P9_RAUTH(r1, &(0x7f0000000000)={0x9, 0x67, 0x2, {0x8, 0x1, 0x10000000004}}, 0x14) r3 = openat$binder_debug(0xffffffffffffff9c, 0xfffffffffffffffd, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={&(0x7f0000000280)="786c282726e712873b102eed765ecbdd4a3ebdeafcacd305676ca98a08f9e554a40f2d17c5a0f072cdaba26989b17f28ac3d0e4f36afb560b25bfd3cd34a5bffb14c88d346e5202365ee657eb928f633cc14765b3c1a49be32a120a9096a6b3ad0703cc8e03b8d3d8699fc5911d42effe066bfdd981ee29c38bc1c50d7bfdaaa69db692c79084f842ad20df75adb652578909d789f0a4ffb91e72bf001f311cec95c4c44aac899dafbc98a42ad971360727c6b96ade2890c75c6af47fc6442f60d647a1750e2cd374681d4d1c06d4a8a463cf1", &(0x7f0000000040)=""/160, &(0x7f0000000380)="1909e36362080ffca05640621619eac4eadccc7e476b535055135fcccd2c716e00800f1d4c1d3eb6b120257bc675b4e41f5c3d840e263d5950b4b6c8d9af6a406c2fbf645b375decd5ccf931fc8c9300442dcc82f378d0d54ac5ae03ca1dac9e2ec5bc26cc57238fe5c57f1a2b86497b68d0ff1e062de5ca76cbd14c008710b0ddfb4b5c1817e6ac338b873d9e3336eaf2525b816f4df5a26d039429b45e899eac6ef8216ce566640d68b4344c1fcab41bf75f8ce4404537170ce43025a15125bf090588ee46e398f409cb6d733bf90023da13ce2e", &(0x7f0000000480)="f666d276347a128c61040cd60df44c11dc914514e41e44139eddda19ccd7fd3e79e0ddf531c6d3d68a21d18501b0f87a7ea730025f04e156c0ba9f5426048d149542e258751499e2610b3172575594bb723c23c58569b340015bfee788e837282723edf3b68bf12c0f880f78bb7c2b26964bd2320e010a697bfaa7a9ea642063375313d65ff134709a88d927ec82cd3b8e30fe8c648d608594abf88fd937cbe5550b1cdb0a64ac0daa473b8606daa552f29df1b85f88c220de", 0x1, r3}, 0x38) [ 745.803191] audit: type=1800 audit(1581972968.675:1049): pid=29704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18716 res=0 [ 745.827592] FAULT_INJECTION: forcing a failure. [ 745.827592] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 745.839542] CPU: 1 PID: 29704 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 745.847560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 745.857041] Call Trace: [ 745.859681] dump_stack+0x142/0x197 [ 745.863336] should_fail.cold+0x10f/0x159 [ 745.867500] ? __might_sleep+0x93/0xb0 [ 745.871509] __alloc_pages_nodemask+0x1d6/0x7a0 [ 745.876321] ? __alloc_pages_slowpath+0x2930/0x2930 [ 745.881473] alloc_pages_current+0xec/0x1e0 [ 745.885807] push_pipe+0x3cb/0x780 [ 745.889565] ? sanity+0x20f/0x310 [ 745.893146] iov_iter_get_pages+0x419/0xd10 [ 745.897581] ? csum_and_copy_from_iter+0xd50/0xd50 [ 745.902646] do_blockdev_direct_IO+0x362d/0x9130 [ 745.907435] ? sb_init_dio_done_wq+0x80/0x80 [ 745.911944] ? __lock_acquire+0x5f7/0x4620 [ 745.916305] ? ext4_chunk_trans_blocks+0x30/0x30 [ 745.921147] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 745.926798] ? lock_acquire+0x16f/0x430 [ 745.930782] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 745.936594] __blockdev_direct_IO+0xa1/0xca [ 745.940933] ext4_direct_IO+0x4e7/0x18f0 [ 745.945005] ? touch_atime+0xce/0x250 [ 745.948844] generic_file_read_iter+0x2f3/0x28d0 [ 745.953612] ? save_stack+0xa9/0xd0 [ 745.957250] ? save_stack_trace+0x16/0x20 [ 745.961431] ? save_stack+0x45/0xd0 [ 745.965068] ? kasan_kmalloc+0xce/0xf0 [ 745.968984] ? __kmalloc+0x15d/0x7a0 [ 745.972709] ? alloc_pipe_info+0x15c/0x380 [ 745.976957] ? do_splice_direct+0x18d/0x230 [ 745.981389] ? do_sendfile+0x4db/0xbd0 [ 745.985291] ? do_syscall_64+0x1e8/0x640 [ 745.989540] ? filemap_range_has_page+0x2d0/0x2d0 [ 745.994410] ? __lock_is_held+0xb6/0x140 [ 745.998483] ? save_trace+0x290/0x290 [ 746.002388] ? fsnotify+0x92f/0x11e0 [ 746.006117] ext4_file_read_iter+0x14e/0x340 [ 746.010538] generic_file_splice_read+0x37d/0x600 [ 746.015513] ? fsnotify+0x11e0/0x11e0 [ 746.019327] ? add_to_pipe+0x340/0x340 [ 746.023236] ? rw_verify_area+0xea/0x2b0 [ 746.027315] ? add_to_pipe+0x340/0x340 [ 746.031213] do_splice_to+0x105/0x170 [ 746.035024] splice_direct_to_actor+0x222/0x7b0 [ 746.039717] ? generic_pipe_buf_nosteal+0x10/0x10 [ 746.044578] ? do_splice_to+0x170/0x170 [ 746.048561] ? rw_verify_area+0xea/0x2b0 20:56:08 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000300)={0x0, @reserved}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000040)={0x8021, 0x3}) r6 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xf32, 0x20000) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000180)) [ 746.052634] do_splice_direct+0x18d/0x230 [ 746.056792] ? splice_direct_to_actor+0x7b0/0x7b0 [ 746.062260] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 746.067028] ? __sb_start_write+0x153/0x2f0 [ 746.071519] do_sendfile+0x4db/0xbd0 [ 746.075251] ? do_compat_pwritev64+0x140/0x140 [ 746.079867] ? fput+0xd4/0x150 [ 746.083178] SyS_sendfile64+0x102/0x110 [ 746.087391] ? SyS_sendfile+0x130/0x130 [ 746.091370] ? do_syscall_64+0x53/0x640 [ 746.095360] ? SyS_sendfile+0x130/0x130 [ 746.099345] do_syscall_64+0x1e8/0x640 [ 746.103243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 746.108309] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 746.113503] RIP: 0033:0x45c6c9 [ 746.116719] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 746.124434] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 746.132002] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 746.139531] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 746.146810] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 20:56:09 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 746.154088] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000000d 20:56:09 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 20:56:09 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @any, 0x5}, 0xa) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xac, r5, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8935}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x25}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="f30faa4630b25946ea5004ab1fb08f0a"}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x20040000) [ 746.464802] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 746.552338] selinux_nlmsg_perm: 903 callbacks suppressed [ 746.552349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.595810] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.616215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.641998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.662054] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.681638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.700516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.725407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.746003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 [ 746.762180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29726 comm=syz-executor.1 20:56:10 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000)='NLBL_UNLBL\x00') epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:10 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:10 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) 20:56:10 executing program 0 (fault-call:27 fault-nth:14): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:10 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[]}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:10 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = gettid() tkill(r2, 0x1000000000016) write$P9_RGETLOCK(r1, &(0x7f00000000c0)={0x25, 0x37, 0x1, {0x2, 0x2, 0x2, r2, 0x7, '%vmnet0'}}, 0x25) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000080)=0x6) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x13, 0x20, 0x8}) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:10 executing program 4: socket(0x10, 0x802, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x2}) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000080)={0x4, 0x0, [0x800, 0x9, 0x1f30, 0xa11, 0x2, 0x3f, 0xc1b6, 0xe93f]}) write$P9_RREADLINK(r2, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) write(r2, &(0x7f0000000200)="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", 0x22e) [ 747.314083] audit: type=1800 audit(1581972970.185:1050): pid=29753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18742 res=0 [ 747.338836] FAULT_INJECTION: forcing a failure. [ 747.338836] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 747.352017] CPU: 0 PID: 29753 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 747.359985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 747.369353] Call Trace: [ 747.371960] dump_stack+0x142/0x197 [ 747.375622] should_fail.cold+0x10f/0x159 [ 747.380368] ? __might_sleep+0x93/0xb0 [ 747.384277] __alloc_pages_nodemask+0x1d6/0x7a0 [ 747.388970] ? __alloc_pages_slowpath+0x2930/0x2930 [ 747.394018] alloc_pages_current+0xec/0x1e0 [ 747.398379] push_pipe+0x3cb/0x780 [ 747.401942] ? sanity+0x20f/0x310 [ 747.405417] iov_iter_get_pages+0x419/0xd10 [ 747.409760] ? csum_and_copy_from_iter+0xd50/0xd50 [ 747.414709] do_blockdev_direct_IO+0x362d/0x9130 [ 747.419523] ? sb_init_dio_done_wq+0x80/0x80 [ 747.423943] ? __lock_acquire+0x5f7/0x4620 [ 747.428185] ? ext4_chunk_trans_blocks+0x30/0x30 [ 747.433068] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 747.438814] ? lock_acquire+0x16f/0x430 [ 747.442962] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 747.448859] __blockdev_direct_IO+0xa1/0xca [ 747.453206] ext4_direct_IO+0x4e7/0x18f0 [ 747.457281] ? touch_atime+0xce/0x250 [ 747.461092] generic_file_read_iter+0x2f3/0x28d0 [ 747.465733] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 747.465989] ? save_stack+0xa9/0xd0 [ 747.466001] ? save_stack_trace+0x16/0x20 [ 747.466009] ? save_stack+0x45/0xd0 [ 747.466017] ? kasan_kmalloc+0xce/0xf0 [ 747.466025] ? __kmalloc+0x15d/0x7a0 [ 747.466034] ? alloc_pipe_info+0x15c/0x380 [ 747.466045] ? do_splice_direct+0x18d/0x230 [ 747.466053] ? do_sendfile+0x4db/0xbd0 [ 747.466065] ? do_syscall_64+0x1e8/0x640 [ 747.466083] ? filemap_range_has_page+0x2d0/0x2d0 [ 747.515403] ? __lock_is_held+0xb6/0x140 [ 747.519474] ? save_trace+0x290/0x290 [ 747.523460] ? fsnotify+0x92f/0x11e0 [ 747.527207] ext4_file_read_iter+0x14e/0x340 [ 747.531634] generic_file_splice_read+0x37d/0x600 [ 747.536492] ? fsnotify+0x11e0/0x11e0 [ 747.540310] ? add_to_pipe+0x340/0x340 [ 747.544214] ? rw_verify_area+0xea/0x2b0 [ 747.548305] ? add_to_pipe+0x340/0x340 [ 747.552212] do_splice_to+0x105/0x170 [ 747.556032] splice_direct_to_actor+0x222/0x7b0 [ 747.560711] ? generic_pipe_buf_nosteal+0x10/0x10 [ 747.565872] ? do_splice_to+0x170/0x170 [ 747.569852] ? rw_verify_area+0xea/0x2b0 [ 747.573928] do_splice_direct+0x18d/0x230 [ 747.578188] ? splice_direct_to_actor+0x7b0/0x7b0 [ 747.583057] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 747.587821] ? __sb_start_write+0x153/0x2f0 [ 747.592325] do_sendfile+0x4db/0xbd0 [ 747.596063] ? do_compat_pwritev64+0x140/0x140 [ 747.600828] ? fput+0xd4/0x150 [ 747.604029] SyS_sendfile64+0x102/0x110 [ 747.608382] ? SyS_sendfile+0x130/0x130 [ 747.612371] ? do_syscall_64+0x53/0x640 [ 747.616358] ? SyS_sendfile+0x130/0x130 [ 747.620366] do_syscall_64+0x1e8/0x640 [ 747.624260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 747.629125] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 747.634445] RIP: 0033:0x45c6c9 [ 747.637637] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 747.645495] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 747.652790] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 20:56:10 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:10 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x0, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 747.660213] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 747.667492] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 747.674773] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000000e 20:56:10 executing program 4: socket(0x26, 0x802, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)) sendfile(r0, r1, 0x0, 0x4000000000010046) write(r0, &(0x7f0000000280)="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", 0xfd25) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f0000000040)) 20:56:10 executing program 2: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r1 = accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) accept$nfc_llcp(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x60) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x1a8002015}) 20:56:10 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in={0x2, 0x4e24, @rand_addr=0x2}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x4, @remote, 0x20}, @in6={0xa, 0x4e24, 0x2, @ipv4={[], [], @multicast1}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @remote}], 0x98) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000180)="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", 0xfc) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000280)=0x8) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000340)={0x2, 0x7f}, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x4000000000010046) ioctl$RTC_AIE_OFF(r3, 0x7002) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000040)={0xc0000000, 0x100, "148e9ccb22c5a7dad66434f73b756602b9b424beb66252dcdc90523faea2dd62", 0x2, 0x2, 0x9, 0x9, 0x8, 0x65, 0x0, 0x4c8, [0x10000, 0x91, 0xb36, 0x9]}) 20:56:10 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x0, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:10 executing program 2: r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x10001}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r1, @in6={{0xa, 0x4e20, 0x5, @rand_addr="cd1180b624c961488db16c5374ae70ba", 0x4e3}}}, 0x84) r2 = epoll_create1(0x0) r3 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x2001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2100, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000380)='team\x00') r9 = socket(0x11, 0x800000003, 0x0) bind(r9, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r11 = socket(0x11, 0x800000003, 0x0) bind(r11, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r12, @ANYBLOB="ffff00"/12], 0x24}}, 0x0) r13 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r14 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r13, r14, 0x0, 0x4000000000010046) getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000000480)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000580)=0xe8) r16 = socket(0x11, 0x800000003, 0x0) bind(r16, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r16, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) getpeername$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) r19 = socket(0x11, 0x800000003, 0x0) bind(r19, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r19, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x3, {0x0, 0x0, 0x0, r20, {0xfff3, 0x2}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'macvlan0\x00', 0x0}) r22 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r22, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) getsockopt$inet_mreqn(r22, 0x0, 0x20, &(0x7f0000000700)={@dev, @rand_addr, 0x0}, &(0x7f0000000740)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000780)={0x2b0, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r18}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r21}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0xc801}, 0x810) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="00ff00e93db667e902bfc7c4363fbe6f0dfaf6cc62f3a6c706a3abe16b4b8d7211a9fcff4bec36f9b6a885057b0662cee6f1773701a84affeb62bfad0002b8cc503820fd872ab45fece7f25643d6ce9fb98e733a620f2ac10621552fbd6ab36ea10ee415d6aa95867c3609"], 0x8) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x1a8002015}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) 20:56:10 executing program 0 (fault-call:27 fault-nth:15): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:11 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x0, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 748.217243] audit: type=1800 audit(1581972971.085:1051): pid=29802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18755 res=0 [ 748.241154] FAULT_INJECTION: forcing a failure. [ 748.241154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 748.253311] CPU: 0 PID: 29802 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 748.261204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 748.270564] Call Trace: [ 748.273167] dump_stack+0x142/0x197 [ 748.276818] should_fail.cold+0x10f/0x159 [ 748.280980] ? __might_sleep+0x93/0xb0 [ 748.284887] __alloc_pages_nodemask+0x1d6/0x7a0 [ 748.289574] ? __alloc_pages_slowpath+0x2930/0x2930 [ 748.294621] alloc_pages_current+0xec/0x1e0 [ 748.298957] push_pipe+0x3cb/0x780 [ 748.302596] ? sanity+0x20f/0x310 [ 748.306071] iov_iter_get_pages+0x419/0xd10 [ 748.310419] ? csum_and_copy_from_iter+0xd50/0xd50 20:56:11 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 748.315484] do_blockdev_direct_IO+0x362d/0x9130 [ 748.320303] ? sb_init_dio_done_wq+0x80/0x80 [ 748.324721] ? __lock_acquire+0x5f7/0x4620 [ 748.329005] ? ext4_chunk_trans_blocks+0x30/0x30 [ 748.333918] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 748.339701] ? lock_acquire+0x16f/0x430 [ 748.343687] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 748.349323] __blockdev_direct_IO+0xa1/0xca [ 748.353668] ext4_direct_IO+0x4e7/0x18f0 [ 748.357748] ? touch_atime+0xce/0x250 [ 748.361591] generic_file_read_iter+0x2f3/0x28d0 [ 748.366360] ? save_stack+0xa9/0xd0 [ 748.370476] ? save_stack_trace+0x16/0x20 [ 748.374640] ? save_stack+0x45/0xd0 [ 748.378273] ? kasan_kmalloc+0xce/0xf0 [ 748.382166] ? __kmalloc+0x15d/0x7a0 [ 748.385875] ? alloc_pipe_info+0x15c/0x380 [ 748.390117] ? do_splice_direct+0x18d/0x230 [ 748.394494] ? do_sendfile+0x4db/0xbd0 [ 748.398484] ? do_syscall_64+0x1e8/0x640 [ 748.402660] ? filemap_range_has_page+0x2d0/0x2d0 [ 748.407512] ? __lock_is_held+0xb6/0x140 [ 748.411570] ? save_trace+0x290/0x290 [ 748.415376] ? fsnotify+0x92f/0x11e0 [ 748.419104] ext4_file_read_iter+0x14e/0x340 [ 748.423865] generic_file_splice_read+0x37d/0x600 [ 748.428826] ? fsnotify+0x11e0/0x11e0 [ 748.432848] ? add_to_pipe+0x340/0x340 [ 748.436842] ? rw_verify_area+0xea/0x2b0 [ 748.440912] ? add_to_pipe+0x340/0x340 [ 748.442479] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 748.444917] do_splice_to+0x105/0x170 [ 748.444931] splice_direct_to_actor+0x222/0x7b0 [ 748.444944] ? generic_pipe_buf_nosteal+0x10/0x10 [ 748.444959] ? do_splice_to+0x170/0x170 [ 748.444970] ? rw_verify_area+0xea/0x2b0 [ 748.444983] do_splice_direct+0x18d/0x230 [ 748.444994] ? splice_direct_to_actor+0x7b0/0x7b0 [ 748.445010] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 748.489191] ? __sb_start_write+0x153/0x2f0 [ 748.493647] do_sendfile+0x4db/0xbd0 [ 748.497379] ? do_compat_pwritev64+0x140/0x140 [ 748.501979] ? fput+0xd4/0x150 [ 748.505184] SyS_sendfile64+0x102/0x110 [ 748.509186] ? SyS_sendfile+0x130/0x130 [ 748.513170] ? do_syscall_64+0x53/0x640 [ 748.517153] ? SyS_sendfile+0x130/0x130 [ 748.521143] do_syscall_64+0x1e8/0x640 [ 748.525041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 748.529910] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 748.535103] RIP: 0033:0x45c6c9 [ 748.538299] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 748.546168] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 748.553618] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 748.560900] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 748.568265] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 748.575547] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000000f 20:56:13 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x0, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:13 executing program 4: r0 = msgget$private(0x0, 0x17b) r1 = msgget$private(0x0, 0x53d) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/106) msgrcv(r0, &(0x7f0000000040)={0x0, ""/45}, 0x35, 0x3, 0x800) r2 = socket(0x1d, 0x802, 0x65) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001700)={r4}) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) r9 = dup3(r6, r7, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001740)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)="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", 0xfc) getresuid(&(0x7f00000015c0)=0x0, &(0x7f0000001600), &(0x7f0000001640)) r11 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r13 = add_key(&(0x7f0000000200)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r13) r14 = request_key(&(0x7f00000017c0)='id_resolver\x00', &(0x7f0000001800)={'syz', 0x0}, &(0x7f0000001840)='uid', r13) r15 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r16, 0x0, 0x0) r17 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r18}}]}) keyctl$chown(0x4, r14, r16, r18) sendfile(r11, r12, 0x0, 0x4000000000010046) ioctl$VIDIOC_S_STD(r11, 0x40085618, &(0x7f0000001780)=0xff) syz_mount_image$btrfs(&(0x7f0000000140)='btrfs\x00', &(0x7f0000000280)='./file0\x00', 0x4, 0x5, &(0x7f0000001540)=[{&(0x7f00000002c0)="732580368c633f8d0c82c9de965afc6cd6034cd57f6e07f2a75106e54eb4d958b683dc16ba28311a9c7b7db3d762ea0cbdff3bd5b18ca1356c46d48807388adbad1228af90cd1c1e390c708c8c5ad467ac1f381f970dfef80f32a89c57491d6259865c640731b7fb9cf5ef288201d8451f45ffda495170c864464455a7e1f78234904d0a908a4cfe281c2e352415", 0x8e, 0x3ff}, {&(0x7f0000000380)="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", 0x1000, 0xffffffff00000001}, {&(0x7f0000001380)="3d52f1cf862e5fc47367042db2583f410b4081b16b939804d5d0c74714195c04955ab3334579b62732d5f49425414e2e361bee2fc9f3d4c9c35c", 0x3a, 0x7}, {&(0x7f00000013c0)="b23b798d3b230b1c81dfa0c10215f4041c48d5b864a4e4e65dc66878658b01e309b0de5c1ddcf477aeca0a915772438da23ea77fb5baf1de64041e1de3db498dd996b8d7c08854e727ea38cabe3f6a32ea3e4d5726f1e9b454878809eed4d8868215a8ecbc778b19f89aa089c98146271da2f102914ca4f5c8c7d5f95788268da167e15764ca75c3f883a8db907f269c66cee09abea2d70483d13c80347e", 0x9e, 0x100000000}, {&(0x7f0000001480)="b886c04fe0498f9cb9a5ecb6d50517a1ac946410f2b5630339afd9a07738e122f340c939ab64a6007781beb25c9f62783d9f704b78a986b0cf97c8c85173b866ed718a2b3023faa77fd73939af4cde30414732c18f7a04fbd0673a7a5fe79362f65c7c636bcd09e5069c7d35222c70bbe57357e0129691ccc9635e0dd169992e673cf664fb8b3a33efb6c3b49936331501b12bbfc9b6bef596fa417863814fb725a59dba7168d3bab6e43156b2579db3a7cadb5be320704be7f8cf8405", 0xbd, 0x10001}], 0x40, &(0x7f0000001680)={[{@space_cache_v1='space_cache=v1'}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/video1\x00'}}, {@uid_eq={'uid', 0x3d, r10}}]}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x41, 0x3, 0x3}, 0x10) 20:56:13 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) prctl$PR_MCE_KILL_GET(0x22) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:13 executing program 0 (fault-call:27 fault-nth:16): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:13 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:13 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8001) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 750.333487] hfsplus: gid requires an argument [ 750.338170] hfsplus: unable to parse mount options [ 750.362197] audit: type=1800 audit(1581972973.235:1052): pid=29830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18765 res=0 [ 750.386199] FAULT_INJECTION: forcing a failure. [ 750.386199] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 750.398753] CPU: 0 PID: 29830 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 750.406672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.416138] Call Trace: [ 750.418744] dump_stack+0x142/0x197 [ 750.422420] should_fail.cold+0x10f/0x159 [ 750.426637] ? __might_sleep+0x93/0xb0 20:56:13 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x54, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gre0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_macvtap\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x88, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3f}}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x2e}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:crond_exec_t:s0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x7}]}, 0x30}}, 0x240480c0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 750.430573] __alloc_pages_nodemask+0x1d6/0x7a0 [ 750.435324] ? __alloc_pages_slowpath+0x2930/0x2930 [ 750.440387] alloc_pages_current+0xec/0x1e0 [ 750.444816] push_pipe+0x3cb/0x780 [ 750.448381] ? sanity+0x20f/0x310 [ 750.451860] iov_iter_get_pages+0x419/0xd10 [ 750.456200] ? csum_and_copy_from_iter+0xd50/0xd50 [ 750.461151] do_blockdev_direct_IO+0x362d/0x9130 [ 750.465947] ? sb_init_dio_done_wq+0x80/0x80 [ 750.470370] ? __lock_acquire+0x5f7/0x4620 [ 750.474676] ? ext4_chunk_trans_blocks+0x30/0x30 20:56:13 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x0, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 750.479462] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 750.485111] ? lock_acquire+0x16f/0x430 [ 750.489095] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 750.494853] __blockdev_direct_IO+0xa1/0xca [ 750.499198] ext4_direct_IO+0x4e7/0x18f0 [ 750.503286] ? touch_atime+0xce/0x250 [ 750.507113] generic_file_read_iter+0x2f3/0x28d0 [ 750.511886] ? save_stack+0xa9/0xd0 [ 750.515667] ? save_stack_trace+0x16/0x20 [ 750.520528] ? save_stack+0x45/0xd0 [ 750.524192] ? kasan_kmalloc+0xce/0xf0 [ 750.528090] ? __kmalloc+0x15d/0x7a0 [ 750.531953] ? alloc_pipe_info+0x15c/0x380 [ 750.536200] ? do_splice_direct+0x18d/0x230 [ 750.538218] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 750.540537] ? do_sendfile+0x4db/0xbd0 [ 750.540550] ? do_syscall_64+0x1e8/0x640 [ 750.540571] ? filemap_range_has_page+0x2d0/0x2d0 [ 750.540587] ? __lock_is_held+0xb6/0x140 [ 750.540596] ? save_trace+0x290/0x290 [ 750.540606] ? fsnotify+0x92f/0x11e0 [ 750.540622] ext4_file_read_iter+0x14e/0x340 [ 750.540636] generic_file_splice_read+0x37d/0x600 [ 750.540644] ? fsnotify+0x11e0/0x11e0 [ 750.540655] ? add_to_pipe+0x340/0x340 [ 750.540676] ? rw_verify_area+0xea/0x2b0 [ 750.540685] ? add_to_pipe+0x340/0x340 [ 750.540695] do_splice_to+0x105/0x170 [ 750.540707] splice_direct_to_actor+0x222/0x7b0 [ 750.540718] ? generic_pipe_buf_nosteal+0x10/0x10 [ 750.540732] ? do_splice_to+0x170/0x170 [ 750.540744] ? rw_verify_area+0xea/0x2b0 [ 750.620388] do_splice_direct+0x18d/0x230 [ 750.624556] ? splice_direct_to_actor+0x7b0/0x7b0 [ 750.629504] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 750.634282] ? __sb_start_write+0x153/0x2f0 [ 750.638639] do_sendfile+0x4db/0xbd0 [ 750.642373] ? do_compat_pwritev64+0x140/0x140 [ 750.646986] ? fput+0xd4/0x150 [ 750.650189] SyS_sendfile64+0x102/0x110 [ 750.654177] ? SyS_sendfile+0x130/0x130 [ 750.658158] ? do_syscall_64+0x53/0x640 [ 750.662165] ? SyS_sendfile+0x130/0x130 [ 750.666151] do_syscall_64+0x1e8/0x640 [ 750.670057] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 750.674914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 750.680230] RIP: 0033:0x45c6c9 [ 750.683540] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 750.691376] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 750.698762] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 750.706151] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 750.713428] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 750.720825] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000010 20:56:13 executing program 4: r0 = socket(0x21, 0x802, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000400)={0x3, 0x2, 0x6, "72b5d799cfc35f8417149860fc729a72a536874f4c8e4ba02349df9b25dd697d", 0x2036315a}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@broadcast, @broadcast}, &(0x7f0000000140)=0xc) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, &(0x7f00000002c0)="c8f8cdf98918d15a556cf4414c69600e11c7228caa429d38f776c920b9734a13f2fa1a3bc2d8360ca3ff10c23750adf91ee2200338629b11a372cf7a39a91f1d20c0609ea041f3c8ad68b6ba3a39f1be1af803bddfce61d66ecf4ee9f1c7549a47d594aaab84fbe391937ac605cbeb349cd35ea68c3640c2b7e509b9582d99d0cd2bc6f84e07ef0636a05d35e73e2ee453f01a36579e603e95fdf14a0eee87b6b9a1580924236ec0988c", &(0x7f0000000380)=""/15}, 0x20) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f00000000c0)=0x5) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040)=0x420, 0x4) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:13 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000000)={0x4, 0x4, 0x3ff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) setpriority(0x0, r4, 0x81) 20:56:13 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x0, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:13 executing program 4: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000180)="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", 0xfc) 20:56:13 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$P9_RREAD(r3, &(0x7f0000000140)={0xe7, 0x75, 0x2, {0xdc, "e430b53a7a6c9088f7f653f7469cb7b5cba20c7f23a0fe42bacca330fca1065382700a8629cd59a46f3b23638c7cc7518a8fd9dd29c9e63a2313fc40d7f4ff300c71aeca8a500f21cb9df1e0d80883328e8129aee31a42edf74353b5db99315ba563198a124beb22dccc3b0d67ef11d44603d1e271bc745e219353704d013412bccdfc46d3758aefe763a146d73fc7b93a65329e5aa8192a406e7b80222ca52fa682730ada7341272f5e4746327335da8e203242dc4769baf27aae237ba39b122e4ad46905fbc2409044f1188837860bf422a09f303d3a5939708549"}}, 0xe7) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:13 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 20:56:13 executing program 0 (fault-call:27 fault-nth:17): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:14 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 751.257533] audit: type=1800 audit(1581972974.125:1053): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18784 res=0 [ 751.281558] FAULT_INJECTION: forcing a failure. [ 751.281558] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 751.293599] CPU: 1 PID: 29889 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 751.301495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 751.310863] Call Trace: [ 751.313479] dump_stack+0x142/0x197 [ 751.317131] should_fail.cold+0x10f/0x159 [ 751.321293] ? __might_sleep+0x93/0xb0 [ 751.325205] __alloc_pages_nodemask+0x1d6/0x7a0 [ 751.329888] ? __alloc_pages_slowpath+0x2930/0x2930 [ 751.334922] alloc_pages_current+0xec/0x1e0 [ 751.339326] push_pipe+0x3cb/0x780 [ 751.342870] ? sanity+0x20f/0x310 [ 751.346349] iov_iter_get_pages+0x419/0xd10 [ 751.350801] ? csum_and_copy_from_iter+0xd50/0xd50 [ 751.355759] do_blockdev_direct_IO+0x362d/0x9130 [ 751.360563] ? sb_init_dio_done_wq+0x80/0x80 [ 751.364982] ? __lock_acquire+0x5f7/0x4620 [ 751.369240] ? ext4_chunk_trans_blocks+0x30/0x30 [ 751.374028] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 751.379795] ? lock_acquire+0x16f/0x430 [ 751.383782] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 751.389528] __blockdev_direct_IO+0xa1/0xca [ 751.393968] ext4_direct_IO+0x4e7/0x18f0 [ 751.398049] ? touch_atime+0xce/0x250 [ 751.401872] generic_file_read_iter+0x2f3/0x28d0 [ 751.406640] ? save_stack+0xa9/0xd0 [ 751.410287] ? save_stack_trace+0x16/0x20 [ 751.414641] ? save_stack+0x45/0xd0 [ 751.418276] ? kasan_kmalloc+0xce/0xf0 [ 751.422176] ? __kmalloc+0x15d/0x7a0 [ 751.425919] ? alloc_pipe_info+0x15c/0x380 [ 751.430345] ? do_splice_direct+0x18d/0x230 [ 751.434676] ? do_sendfile+0x4db/0xbd0 [ 751.438580] ? do_syscall_64+0x1e8/0x640 [ 751.442746] ? filemap_range_has_page+0x2d0/0x2d0 [ 751.447604] ? __lock_is_held+0xb6/0x140 [ 751.451723] ? save_trace+0x290/0x290 [ 751.455541] ? fsnotify+0x92f/0x11e0 [ 751.459277] ext4_file_read_iter+0x14e/0x340 [ 751.464482] generic_file_splice_read+0x37d/0x600 [ 751.469430] ? fsnotify+0x11e0/0x11e0 [ 751.473249] ? add_to_pipe+0x340/0x340 [ 751.477160] ? rw_verify_area+0xea/0x2b0 [ 751.481257] ? add_to_pipe+0x340/0x340 [ 751.485362] do_splice_to+0x105/0x170 [ 751.489327] splice_direct_to_actor+0x222/0x7b0 [ 751.494012] ? generic_pipe_buf_nosteal+0x10/0x10 [ 751.499153] ? do_splice_to+0x170/0x170 [ 751.503137] ? rw_verify_area+0xea/0x2b0 [ 751.507318] do_splice_direct+0x18d/0x230 [ 751.511655] ? splice_direct_to_actor+0x7b0/0x7b0 [ 751.516518] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 751.521393] ? __sb_start_write+0x153/0x2f0 [ 751.525723] do_sendfile+0x4db/0xbd0 [ 751.529581] ? do_compat_pwritev64+0x140/0x140 [ 751.534177] ? fput+0xd4/0x150 [ 751.537385] SyS_sendfile64+0x102/0x110 [ 751.541387] ? SyS_sendfile+0x130/0x130 [ 751.545369] ? do_syscall_64+0x53/0x640 [ 751.549359] ? SyS_sendfile+0x130/0x130 [ 751.553368] do_syscall_64+0x1e8/0x640 [ 751.557286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 751.562260] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 751.567468] RIP: 0033:0x45c6c9 [ 751.570814] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 751.578555] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 751.585855] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 751.593243] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 751.600539] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 20:56:14 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x0, 0xa, 0x4, 0x1000000, 0xeb, {r3, r4/1000+10000}, {0x1, 0xc, 0x4, 0x1f, 0x0, 0x6, "025c3b34"}, 0x9, 0x3, @offset=0x8001, 0xd2a, 0x0, r1}) socket$isdn_base(0x22, 0x3, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='veth1_to_hsr\x00', 0x10) 20:56:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000000c0603000000000000000000090000040900020073ff0730000000000900020073797a32000000000900020073797a31c9cdc5d077d61573f142c85d08b6af806a65a68f9faf054b1d44a7bcd46ecb47d154c64519250c1f3535e1e865d43fc9bcaaff6078a4307e9a5e994c5d3f9db1b0e6b19163c73f804a26ab3e7c3da585f9491acad1"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 20:56:14 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d92) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = gettid() tkill(r1, 0x1000000000016) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:14 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'netpci0\x00', 0x1000}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10, 0x30, r1, 0xc43f000) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 20:56:14 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 751.607824] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000011 20:56:14 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xc0000001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x1}, &(0x7f0000000040)=0x28) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:14 executing program 4: socket(0x10, 0x802, 0x0) eventfd(0x3) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) 20:56:14 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 751.968414] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 751.984546] selinux_nlmsg_perm: 1362 callbacks suppressed [ 751.984553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 20:56:14 executing program 0 (fault-call:27 fault-nth:18): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:14 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002011}) 20:56:14 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000000)={'rose0\x00', 0x8}) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:14 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 752.011837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.128272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.163215] audit: type=1800 audit(1581972975.035:1054): pid=29952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18783 res=0 [ 752.180523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.199413] FAULT_INJECTION: forcing a failure. [ 752.199413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 752.202919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.211329] CPU: 1 PID: 29952 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 752.211338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 752.211342] Call Trace: [ 752.211364] dump_stack+0x142/0x197 [ 752.211384] should_fail.cold+0x10f/0x159 [ 752.211393] ? __might_sleep+0x93/0xb0 [ 752.211408] __alloc_pages_nodemask+0x1d6/0x7a0 [ 752.211424] ? __alloc_pages_slowpath+0x2930/0x2930 [ 752.211446] alloc_pages_current+0xec/0x1e0 [ 752.231262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.231796] push_pipe+0x3cb/0x780 [ 752.231805] ? sanity+0x20f/0x310 [ 752.231821] iov_iter_get_pages+0x419/0xd10 [ 752.243173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.243785] ? csum_and_copy_from_iter+0xd50/0xd50 [ 752.243803] do_blockdev_direct_IO+0x362d/0x9130 [ 752.249324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.251685] ? sb_init_dio_done_wq+0x80/0x80 [ 752.251698] ? __lock_acquire+0x5f7/0x4620 [ 752.251715] ? ext4_chunk_trans_blocks+0x30/0x30 [ 752.251746] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 752.251765] ? lock_acquire+0x16f/0x430 [ 752.251777] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 752.258070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.260454] __blockdev_direct_IO+0xa1/0xca [ 752.260475] ext4_direct_IO+0x4e7/0x18f0 [ 752.260488] ? touch_atime+0xce/0x250 [ 752.260507] generic_file_read_iter+0x2f3/0x28d0 [ 752.260517] ? save_stack+0xa9/0xd0 [ 752.260529] ? save_stack_trace+0x16/0x20 [ 752.267417] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=29931 comm=syz-executor.1 [ 752.269877] ? save_stack+0x45/0xd0 [ 752.269886] ? kasan_kmalloc+0xce/0xf0 [ 752.269894] ? __kmalloc+0x15d/0x7a0 [ 752.269902] ? alloc_pipe_info+0x15c/0x380 [ 752.269914] ? do_splice_direct+0x18d/0x230 [ 752.269922] ? do_sendfile+0x4db/0xbd0 [ 752.269933] ? do_syscall_64+0x1e8/0x640 [ 752.269953] ? filemap_range_has_page+0x2d0/0x2d0 [ 752.438167] ? __lock_is_held+0xb6/0x140 [ 752.442237] ? save_trace+0x290/0x290 [ 752.446045] ? fsnotify+0x92f/0x11e0 [ 752.449912] ext4_file_read_iter+0x14e/0x340 [ 752.454340] generic_file_splice_read+0x37d/0x600 [ 752.459309] ? fsnotify+0x11e0/0x11e0 [ 752.463136] ? add_to_pipe+0x340/0x340 [ 752.467046] ? rw_verify_area+0xea/0x2b0 [ 752.471118] ? add_to_pipe+0x340/0x340 [ 752.475237] do_splice_to+0x105/0x170 [ 752.479052] splice_direct_to_actor+0x222/0x7b0 [ 752.483729] ? generic_pipe_buf_nosteal+0x10/0x10 [ 752.488598] ? do_splice_to+0x170/0x170 [ 752.492584] ? rw_verify_area+0xea/0x2b0 [ 752.496819] do_splice_direct+0x18d/0x230 [ 752.501115] ? splice_direct_to_actor+0x7b0/0x7b0 [ 752.506323] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 752.511091] ? __sb_start_write+0x153/0x2f0 [ 752.515426] do_sendfile+0x4db/0xbd0 [ 752.519157] ? do_compat_pwritev64+0x140/0x140 [ 752.523749] ? fput+0xd4/0x150 [ 752.527010] SyS_sendfile64+0x102/0x110 [ 752.530993] ? SyS_sendfile+0x130/0x130 [ 752.534988] ? do_syscall_64+0x53/0x640 [ 752.538981] ? SyS_sendfile+0x130/0x130 [ 752.543141] do_syscall_64+0x1e8/0x640 [ 752.547037] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 752.551895] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 752.557092] RIP: 0033:0x45c6c9 [ 752.560408] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 752.568126] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 752.575402] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 752.582679] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 752.590072] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 752.597353] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000012 20:56:17 executing program 4: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, 0xfffffffffffffffd) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x0, &(0x7f00000000c0)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) accept4$llc(r1, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x800) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000280)="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", 0x135) creat(&(0x7f0000000080)='./file0/bus\x00', 0x40) 20:56:17 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x8001, 0x2, 0x1}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:17 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:17 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000000100"/17], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:17 executing program 0 (fault-call:27 fault-nth:19): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:17 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}) ioctl$SIOCRSACCEPT(r0, 0x89e3) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:17 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r4 = dup3(0xffffffffffffffff, r3, 0x80000) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x640, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$KDSKBLED(r5, 0x4b65, 0x4) 20:56:17 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0x6, 0x0, [0x2, 0x13]}, {0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000100), &(0x7f0000000140)=0x4) write(r0, &(0x7f0000000180)="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", 0xfc) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000300)=0x4) [ 754.584806] audit: type=1800 audit(1581972977.455:1055): pid=29973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17044 res=0 [ 754.609148] FAULT_INJECTION: forcing a failure. [ 754.609148] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 754.621020] CPU: 0 PID: 29973 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 754.629049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 754.638514] Call Trace: [ 754.641126] dump_stack+0x142/0x197 [ 754.644777] should_fail.cold+0x10f/0x159 [ 754.648961] ? __might_sleep+0x93/0xb0 [ 754.652866] __alloc_pages_nodemask+0x1d6/0x7a0 [ 754.657547] ? __alloc_pages_slowpath+0x2930/0x2930 [ 754.662580] ? find_held_lock+0x35/0x130 [ 754.666679] alloc_pages_current+0xec/0x1e0 [ 754.671152] push_pipe+0x3cb/0x780 [ 754.674695] ? sanity+0x20f/0x310 [ 754.678161] iov_iter_get_pages+0x419/0xd10 20:56:17 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 754.682496] ? csum_and_copy_from_iter+0xd50/0xd50 [ 754.687539] do_blockdev_direct_IO+0x362d/0x9130 [ 754.692319] ? sb_init_dio_done_wq+0x80/0x80 [ 754.696828] ? __lock_acquire+0x5f7/0x4620 [ 754.701077] ? ext4_chunk_trans_blocks+0x30/0x30 [ 754.705943] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 754.711590] ? lock_acquire+0x16f/0x430 [ 754.715575] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 754.721212] __blockdev_direct_IO+0xa1/0xca [ 754.723926] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.725583] ext4_direct_IO+0x4e7/0x18f0 [ 754.725597] ? touch_atime+0xce/0x250 [ 754.725619] generic_file_read_iter+0x2f3/0x28d0 [ 754.725630] ? save_stack+0xa9/0xd0 [ 754.725641] ? save_stack_trace+0x16/0x20 [ 754.725652] ? save_stack+0x45/0xd0 [ 754.758413] ? kasan_kmalloc+0xce/0xf0 [ 754.762551] ? __kmalloc+0x15d/0x7a0 [ 754.766284] ? alloc_pipe_info+0x15c/0x380 [ 754.770640] ? do_splice_direct+0x18d/0x230 [ 754.774978] ? do_sendfile+0x4db/0xbd0 [ 754.778969] ? do_syscall_64+0x1e8/0x640 [ 754.783042] ? filemap_range_has_page+0x2d0/0x2d0 [ 754.787897] ? __lock_is_held+0xb6/0x140 [ 754.792013] ? save_trace+0x290/0x290 [ 754.795820] ? fsnotify+0x92f/0x11e0 [ 754.799543] ext4_file_read_iter+0x14e/0x340 [ 754.803962] generic_file_splice_read+0x37d/0x600 [ 754.808812] ? fsnotify+0x11e0/0x11e0 [ 754.812630] ? add_to_pipe+0x340/0x340 [ 754.816537] ? rw_verify_area+0xea/0x2b0 [ 754.820631] ? add_to_pipe+0x340/0x340 [ 754.824532] do_splice_to+0x105/0x170 [ 754.828343] splice_direct_to_actor+0x222/0x7b0 [ 754.833145] ? generic_pipe_buf_nosteal+0x10/0x10 [ 754.838001] ? do_splice_to+0x170/0x170 [ 754.841990] ? rw_verify_area+0xea/0x2b0 [ 754.846063] do_splice_direct+0x18d/0x230 [ 754.850230] ? splice_direct_to_actor+0x7b0/0x7b0 [ 754.855085] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 754.860140] ? __sb_start_write+0x153/0x2f0 [ 754.864476] do_sendfile+0x4db/0xbd0 [ 754.868202] ? do_compat_pwritev64+0x140/0x140 [ 754.872963] ? fput+0xd4/0x150 [ 754.876166] SyS_sendfile64+0x102/0x110 [ 754.880146] ? SyS_sendfile+0x130/0x130 [ 754.884130] ? do_syscall_64+0x53/0x640 [ 754.888117] ? SyS_sendfile+0x130/0x130 [ 754.892098] do_syscall_64+0x1e8/0x640 [ 754.896000] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 754.900858] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 754.906147] RIP: 0033:0x45c6c9 [ 754.909340] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 754.917055] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 754.924327] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 20:56:17 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 754.931746] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 754.939044] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 754.946319] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000013 20:56:17 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000084) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000003c0)={{0x0, 0x1, 0x648, 0x10000, 'syz0\x00', 0xffffffff}, 0x0, [0xffffffffffff8001, 0x3ff, 0x2, 0x100000000, 0x5, 0x4e, 0x8, 0x4, 0x11c, 0xfd, 0x81, 0x80000000, 0x1f, 0x3, 0x8, 0x24, 0x0, 0x2, 0x3, 0x2, 0x81, 0x8, 0x800000, 0x8000, 0xa85d, 0x4e4, 0x800, 0xff, 0x40, 0xff, 0x4, 0x2, 0x7a4, 0x4, 0x4, 0x1, 0x5, 0x0, 0x101, 0x2, 0x7, 0x100000001, 0x7fff, 0x4, 0x9e4f, 0xff, 0x2, 0xffff, 0xff, 0x121, 0x1, 0x80000001, 0x7fffffff, 0x7, 0x100, 0x25, 0x101, 0x707, 0x0, 0xff, 0xe01, 0x4e, 0x2, 0x7b, 0x5, 0x2, 0x1, 0x20, 0x7, 0x9, 0x4, 0x1ff, 0xd52, 0x6, 0x0, 0x7fffffff, 0x9, 0x50000000000, 0x1, 0x65, 0x3, 0x9, 0x8001, 0x335067a9, 0x3ff, 0x401, 0x4, 0x4faa109a, 0x0, 0x6, 0x7, 0xbab, 0x8, 0x3, 0x7fffffff, 0xe1b, 0x4, 0x7, 0x100000000, 0x7f, 0x7f, 0x6, 0x75a, 0x5, 0x7, 0x0, 0x3, 0xd2, 0xc8, 0x100, 0x1f, 0xff, 0x6, 0xffff, 0xf7, 0xffff, 0x5, 0x8000000000000, 0xbff8, 0x4, 0x7, 0xfff, 0xae, 0x1, 0x1, 0x736, 0x5, 0xb00]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0xc008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x180}, 0x400, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000000b0102000000000000000001000009080002400000000108000340000000001200034000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x800) 20:56:17 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) socket$inet6_dccp(0xa, 0x6, 0x0) 20:56:17 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x4, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2400204) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x400c0) 20:56:18 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'bond_slave_0\x00', {}, 0x8}) 20:56:18 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:18 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000000100"/17], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:18 executing program 0 (fault-call:27 fault-nth:20): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:18 executing program 4: r0 = socket(0x10, 0x802, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 20:56:18 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:18 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) r5 = open(&(0x7f0000000500)='./bus\x00', 0x583143, 0x11e) write$P9_RREADLINK(r5, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r7 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r9 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r9, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$P9_RREADLINK(r2, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="b0068065f2be5839ceb5ae916c0672a3189102c754a2daaee11b5133d77f7381ff807648b10f0c3cfdf2697c71450d061c7397db8947fa5014d8b2a2dd8985d8a2fdd8df56f6907afa97566fdc8982b47cbedc39e722ae54b9407662d863e156da375984910fe07765946299d788fde3902736136123992a76ddb0769622d39f97897b1acf8980dfb47bcbcf8a91144c446c2c2a2893176317e3083da3b1b400a45523a07bf1b4e9c4945814d88f243dd0abb2caf933aab3ce422a41ef21d080b0b076b198eec1686d85", @ANYRES32=r3, @ANYBLOB="cca86192e1815401995b229f5674cb341d77a17c9259f0612e408c03d0810e5fe06737c38d78ebfc0eaf684bfc9309f14524cbe82daad5bb4c542cc09a5e116a1852e53f54de744ab6322662ce1cf64acfce49e4", @ANYRESDEC=r5, @ANYRES32=r1, @ANYRESDEC=0x0, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYPTR, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRESOCT=r7, @ANYRESDEC=r8, @ANYBLOB="79897f5bef4a45e2a061c70441fe9ffc2b075914a7da1732d05b794168150e88e1f39eade80c2698112e705f465bd67f43e5bfd181c3b0b4d4bb0e97a21d0b000f8dd38aeaff0a7f"], @ANYRES16=r9], @ANYRESDEC, @ANYRESDEC], 0x32) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r10, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0xc01, &(0x7f0000000040)={[0x3]}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 755.720661] audit: type=1800 audit(1581972978.595:1056): pid=30035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17331 res=0 [ 755.745360] FAULT_INJECTION: forcing a failure. [ 755.745360] name failslab, interval 1, probability 0, space 0, times 0 [ 755.757552] CPU: 0 PID: 30035 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 755.765449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 755.774962] Call Trace: [ 755.777564] dump_stack+0x142/0x197 [ 755.782202] should_fail.cold+0x10f/0x159 [ 755.786550] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 755.791495] should_failslab+0xdb/0x130 [ 755.795479] kmem_cache_alloc+0x47/0x780 [ 755.799554] __es_insert_extent+0x26c/0xe60 [ 755.803897] ext4_es_insert_extent+0x1f0/0x590 [ 755.808489] ? check_preemption_disabled+0x3c/0x250 [ 755.813654] ? ext4_es_find_delayed_extent_range+0x960/0x960 20:56:18 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') syz_extract_tcp_res(&(0x7f0000000140), 0x94f, 0x80000003) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf251100000006001401040000000c0099007f000000b7471f36250d837827f3d40334a55fd7ed88c72bc7a32e18116ae37a0ab0aef8d192da5951febee93e1cdb2bb8165c5abcd433c0d76096d099841f1bfcc0825764538d1e8b692a29e4"], 0x3}, 0x1, 0x0, 0x0, 0x884}, 0x400c801) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x290, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SCAN_SUPP_RATES={0x238, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xb3, 0x3, "3b9446e89591e91e7fc18e9d18f867cdf3ed312029dccda11554ebe0e13426f904cd560b63c30d4f972780611761b25570fd845e742d883bf9befeca79b5b5c12d5c9e4325b8afb7696b4e40147805f3676aa56b79ed329ee22a94dc1bdd5888b0440cd41bea903fce926d833e6b0da401f5d4b4a2a3fa5a3166ebbdbc4b8bc9b0a0e737ac1bd6699e1ac8deca86cd31ec39f22194028d7be3a4dd1ebee45837325ffab2f108167989516842f1d811"}, @NL80211_BAND_60GHZ={0x6f, 0x2, "1e23ff22af551e0de7725e76abf685742a5151453551a8ea321b76bc4f172f1967c2fc305779169d124b07a346e7d7b48772e2dc89e2e07385a4a7de8a9a3345f2dc0cdda4f19760dfcfd809c0498ce346a75c43b61fdbae9dd35aba00ddf9a6f337c35bcce924f273cc99"}, @NL80211_BAND_5GHZ={0xd, 0x1, "87af6e4032f2258bc9"}, @NL80211_BAND_60GHZ={0xfd, 0x2, "ba2e9978b888e537dbfeef53075f7f417d3f5ff3ba09bce155c36ee31c48276623b8b7c84f356945c752070da695b88db4e05c1688b316a5fb2e02cecd14fbd50fc01aa59860d351df88fc602a9c517a5ba1dbfbd729d2c830aa02caa36a9dd81b320558db2f88a795b0b8581a8ff89e703558183d273b22947af5d2cb2b336015e03ded937e84d5241f65a7b076cb731e32b04bae94aac0fc819f4bd6c9dec482894ff7bf37ef5b95bfdd0255e190b366aca0f496a52ff5bdd149d4614692fdf65c57c9843edbef6b0a1a26b605c37645114543376b9a5daed937660c1677f1842cd8dce09b716a0576172d1dfc79e19aca3a7212f4c06177"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_IE={0x27, 0x2a, "008631a36abbe2dfec595950070e01cdaa82b96787ba586ee3d8d9df5e9d5b2905ff02"}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000850}, 0x2000c001) [ 755.819461] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 755.824927] ? ext4_es_find_delayed_extent_range+0x31d/0x960 [ 755.830735] ? find_held_lock+0x35/0x130 [ 755.834807] ext4_ext_put_gap_in_cache+0xcb/0x110 [ 755.839664] ? ext4_zeroout_es+0x170/0x170 [ 755.843915] ? ext4_find_extent+0x64c/0x960 [ 755.848256] ext4_ext_map_blocks+0x1d4b/0x4fa0 [ 755.852887] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 755.857923] ? perf_trace_lock+0x500/0x500 [ 755.862172] ? lock_acquire+0x16f/0x430 [ 755.866179] ? ext4_map_blocks+0x402/0x17c0 20:56:18 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 755.870519] ext4_map_blocks+0xd3c/0x17c0 [ 755.874782] ? ext4_issue_zeroout+0x160/0x160 [ 755.879327] ? alloc_pages_current+0xf4/0x1e0 [ 755.883835] ? push_pipe+0x3e6/0x780 [ 755.887560] _ext4_get_block+0x1a0/0x590 [ 755.891633] ? ext4_map_blocks+0x17c0/0x17c0 [ 755.896176] ? iov_iter_advance+0x218/0xc60 [ 755.900517] ext4_dio_get_block+0x9a/0xb0 [ 755.904805] do_blockdev_direct_IO+0x1f68/0x9130 [ 755.909592] ? sb_init_dio_done_wq+0x80/0x80 [ 755.914130] ? __lock_acquire+0x5f7/0x4620 [ 755.918381] ? ext4_chunk_trans_blocks+0x30/0x30 [ 755.923188] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 755.928900] ? lock_acquire+0x16f/0x430 [ 755.932883] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 755.938536] __blockdev_direct_IO+0xa1/0xca [ 755.942877] ext4_direct_IO+0x4e7/0x18f0 [ 755.947089] ? touch_atime+0xce/0x250 [ 755.950906] generic_file_read_iter+0x2f3/0x28d0 [ 755.955667] ? save_stack+0xa9/0xd0 [ 755.959446] ? save_stack_trace+0x16/0x20 [ 755.963614] ? save_stack+0x45/0xd0 [ 755.967247] ? kasan_kmalloc+0xce/0xf0 [ 755.971144] ? __kmalloc+0x15d/0x7a0 [ 755.974873] ? alloc_pipe_info+0x15c/0x380 [ 755.979117] ? do_splice_direct+0x18d/0x230 [ 755.983471] ? do_sendfile+0x4db/0xbd0 [ 755.987366] ? do_syscall_64+0x1e8/0x640 [ 755.991448] ? filemap_range_has_page+0x2d0/0x2d0 [ 755.996306] ? __lock_is_held+0xb6/0x140 [ 756.000383] ? save_trace+0x290/0x290 [ 756.004193] ? fsnotify+0x92f/0x11e0 [ 756.007926] ext4_file_read_iter+0x14e/0x340 [ 756.012355] generic_file_splice_read+0x37d/0x600 [ 756.017205] ? fsnotify+0x11e0/0x11e0 [ 756.021211] ? add_to_pipe+0x340/0x340 [ 756.025118] ? rw_verify_area+0xea/0x2b0 [ 756.029315] ? add_to_pipe+0x340/0x340 [ 756.033320] do_splice_to+0x105/0x170 [ 756.037165] splice_direct_to_actor+0x222/0x7b0 [ 756.041868] ? generic_pipe_buf_nosteal+0x10/0x10 [ 756.046752] ? do_splice_to+0x170/0x170 [ 756.050760] ? rw_verify_area+0xea/0x2b0 [ 756.054847] do_splice_direct+0x18d/0x230 [ 756.059129] ? splice_direct_to_actor+0x7b0/0x7b0 [ 756.064035] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 756.068951] ? __sb_start_write+0x153/0x2f0 [ 756.073288] do_sendfile+0x4db/0xbd0 [ 756.077126] ? do_compat_pwritev64+0x140/0x140 [ 756.081722] ? fput+0xd4/0x150 [ 756.085004] SyS_sendfile64+0x102/0x110 [ 756.088987] ? SyS_sendfile+0x130/0x130 [ 756.092996] ? do_syscall_64+0x53/0x640 [ 756.097110] ? SyS_sendfile+0x130/0x130 [ 756.101196] do_syscall_64+0x1e8/0x640 [ 756.105095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 756.109953] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 756.115149] RIP: 0033:0x45c6c9 [ 756.118340] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 756.126057] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 756.133447] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 756.140723] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 756.148000] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 756.156226] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000014 [ 756.570227] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:19 executing program 0 (fault-call:27 fault-nth:21): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:19 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 756.902590] audit: type=1800 audit(1581972979.775:1057): pid=30061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17278 res=0 [ 756.926995] FAULT_INJECTION: forcing a failure. [ 756.926995] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.939108] CPU: 1 PID: 30061 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 756.947128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 756.956495] Call Trace: [ 756.959102] dump_stack+0x142/0x197 [ 756.962752] should_fail.cold+0x10f/0x159 [ 756.966915] ? __might_sleep+0x93/0xb0 [ 756.970817] __alloc_pages_nodemask+0x1d6/0x7a0 [ 756.975500] ? __alloc_pages_slowpath+0x2930/0x2930 [ 756.980667] ? __do_page_cache_readahead+0x28e/0xa20 [ 756.985786] alloc_pages_current+0xec/0x1e0 [ 756.990122] __page_cache_alloc+0x248/0x3e0 [ 756.994469] __do_page_cache_readahead+0x2d9/0xa20 [ 756.999554] ? save_trace+0x290/0x290 [ 757.003375] ? read_cache_pages+0x6b0/0x6b0 [ 757.007828] ? lock_downgrade+0x740/0x740 [ 757.012096] ondemand_readahead+0x50a/0xb40 [ 757.016535] ? ondemand_readahead+0x50a/0xb40 [ 757.021051] page_cache_sync_readahead+0xab/0x100 [ 757.025913] generic_file_read_iter+0x128a/0x28d0 [ 757.030893] ? do_sendfile+0x4db/0xbd0 [ 757.034794] ? do_syscall_64+0x1e8/0x640 [ 757.038873] ? filemap_range_has_page+0x2d0/0x2d0 [ 757.043730] ? __lock_is_held+0xb6/0x140 [ 757.047803] ? save_trace+0x290/0x290 [ 757.051767] ? fsnotify+0x92f/0x11e0 [ 757.055497] ext4_file_read_iter+0x14e/0x340 [ 757.059929] generic_file_splice_read+0x37d/0x600 [ 757.064780] ? fsnotify+0x11e0/0x11e0 [ 757.068595] ? add_to_pipe+0x340/0x340 [ 757.072506] ? rw_verify_area+0xea/0x2b0 [ 757.076689] ? add_to_pipe+0x340/0x340 [ 757.081029] do_splice_to+0x105/0x170 [ 757.084853] splice_direct_to_actor+0x222/0x7b0 [ 757.089537] ? generic_pipe_buf_nosteal+0x10/0x10 [ 757.094408] ? do_splice_to+0x170/0x170 [ 757.098391] ? rw_verify_area+0xea/0x2b0 [ 757.102569] do_splice_direct+0x18d/0x230 [ 757.106733] ? splice_direct_to_actor+0x7b0/0x7b0 [ 757.111595] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 757.116502] ? __sb_start_write+0x153/0x2f0 [ 757.120838] do_sendfile+0x4db/0xbd0 [ 757.124576] ? do_compat_pwritev64+0x140/0x140 [ 757.129177] ? fput+0xd4/0x150 [ 757.132382] SyS_sendfile64+0x102/0x110 [ 757.136520] ? SyS_sendfile+0x130/0x130 [ 757.140504] ? do_syscall_64+0x53/0x640 [ 757.144489] ? SyS_sendfile+0x130/0x130 [ 757.148479] do_syscall_64+0x1e8/0x640 [ 757.152374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 757.157233] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 757.162431] RIP: 0033:0x45c6c9 [ 757.165630] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 757.173471] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 757.180755] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 757.188044] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 757.195324] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 20:56:20 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)={0x1200000, 0x3, 0x4, 0x100000, 0x3f, {0x0, 0x2710}, {0x2, 0x8, 0xff, 0x25, 0x8, 0x0, "47d161b9"}, 0xfffffffa, 0x1, @planes=&(0x7f0000000080)={0x3, 0x4, @userptr=0x8, 0x8}, 0x2, 0x0, 0xffffffffffffffff}) r5 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, r5) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, r5) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000, r5) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000140)={0x3, 0x7, 0x1, 0x84800, r4}) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0x7) 20:56:20 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 757.202738] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000015 [ 757.214590] selinux_nlmsg_perm: 537 callbacks suppressed [ 757.214598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 [ 757.297848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 20:56:20 executing program 4: r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000000)) r1 = socket(0x10, 0xa, 0x81) write(r1, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) [ 757.561794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 [ 757.761965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 [ 757.833381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 [ 757.852043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 [ 757.869953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 20:56:20 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000000100"/17], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 757.888816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 [ 757.908035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 [ 757.926886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30053 comm=syz-executor.1 20:56:20 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:20 executing program 0 (fault-call:27 fault-nth:22): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:20 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x95, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000000) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x70, 0x2, 0xf8, 0x1, 0x0, 0x0, 0x8, 0x2, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x111, 0x7, 0x90, 0x6, 0x3, 0x4, 0x3}, r1, 0x1, r0, 0x4) 20:56:20 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = getpid() r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x61381fe64009b7e5}, 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x80000001]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7a}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x30, 0xfff, 0xdb2, 0xd2, 0x3]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1c}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1f}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) prctl$PR_SET_PTRACER(0x59616d61, r1) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = gettid() r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"/368]}, 0x1e8) ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x5) wait4(0x0, 0x0, 0x0, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004890) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r9, 0x0, 0x4000000000010046) write$cgroup_subtree(r9, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$RNDGETENTCNT(r9, 0x80045200, &(0x7f0000000000)) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) [ 758.075947] audit: type=1800 audit(1581972980.945:1058): pid=30090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17460 res=0 [ 758.100878] FAULT_INJECTION: forcing a failure. [ 758.100878] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 758.112960] CPU: 1 PID: 30090 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 758.123903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 758.133387] Call Trace: [ 758.135987] dump_stack+0x142/0x197 [ 758.139635] should_fail.cold+0x10f/0x159 [ 758.143906] ? __might_sleep+0x93/0xb0 [ 758.147843] __alloc_pages_nodemask+0x1d6/0x7a0 [ 758.152529] ? __alloc_pages_slowpath+0x2930/0x2930 [ 758.157648] ? __do_page_cache_readahead+0x28e/0xa20 [ 758.162767] alloc_pages_current+0xec/0x1e0 [ 758.167340] __page_cache_alloc+0x248/0x3e0 [ 758.171680] __do_page_cache_readahead+0x2d9/0xa20 [ 758.176619] ? save_trace+0x290/0x290 [ 758.180548] ? read_cache_pages+0x6b0/0x6b0 [ 758.184888] ? lock_downgrade+0x740/0x740 [ 758.189058] ondemand_readahead+0x50a/0xb40 [ 758.193490] ? ondemand_readahead+0x50a/0xb40 [ 758.198003] page_cache_sync_readahead+0xab/0x100 [ 758.202857] generic_file_read_iter+0x128a/0x28d0 [ 758.207717] ? do_sendfile+0x4db/0xbd0 [ 758.211612] ? do_syscall_64+0x1e8/0x640 [ 758.215808] ? filemap_range_has_page+0x2d0/0x2d0 [ 758.220671] ? __lock_is_held+0xb6/0x140 [ 758.224743] ? save_trace+0x290/0x290 [ 758.228561] ? fsnotify+0x92f/0x11e0 [ 758.232292] ext4_file_read_iter+0x14e/0x340 [ 758.236828] generic_file_splice_read+0x37d/0x600 [ 758.238007] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 758.241941] ? fsnotify+0x11e0/0x11e0 [ 758.242009] ? add_to_pipe+0x340/0x340 [ 758.242029] ? rw_verify_area+0xea/0x2b0 [ 758.242037] ? add_to_pipe+0x340/0x340 [ 758.242048] do_splice_to+0x105/0x170 [ 758.242063] splice_direct_to_actor+0x222/0x7b0 [ 758.275146] ? generic_pipe_buf_nosteal+0x10/0x10 [ 758.280008] ? do_splice_to+0x170/0x170 [ 758.283997] ? rw_verify_area+0xea/0x2b0 [ 758.288136] do_splice_direct+0x18d/0x230 [ 758.292436] ? splice_direct_to_actor+0x7b0/0x7b0 [ 758.297301] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 758.302193] ? __sb_start_write+0x153/0x2f0 [ 758.306536] do_sendfile+0x4db/0xbd0 [ 758.310268] ? do_compat_pwritev64+0x140/0x140 [ 758.315064] ? fput+0xd4/0x150 [ 758.318266] SyS_sendfile64+0x102/0x110 [ 758.326305] ? SyS_sendfile+0x130/0x130 [ 758.330283] ? do_syscall_64+0x53/0x640 [ 758.334369] ? SyS_sendfile+0x130/0x130 [ 758.338361] do_syscall_64+0x1e8/0x640 [ 758.342516] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 758.347375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 758.352680] RIP: 0033:0x45c6c9 [ 758.355871] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 758.363585] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 20:56:21 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:21 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 758.370864] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 758.378143] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 758.385422] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 758.392705] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000016 20:56:21 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='statm\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:21 executing program 4: r0 = socket(0x1407945890423ca0, 0x1, 0x0) write(r0, &(0x7f0000000380)="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", 0x1f4) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e) ioctl$IMCTRLREQ(r3, 0x80044945, &(0x7f0000000080)={0x4408, 0x2, 0x40, 0x4}) 20:56:21 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:21 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x443, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) accept4$tipc(r2, &(0x7f0000000080)=@id, &(0x7f00000000c0)=0x10, 0x800) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000050601042000000000000000030000050900020073797a32000000000900020073797a32000000000900030073797a30000000000900030073797a31000000000500010007000000050001000700000057074734827dbea72731382920d521deac08d114ab43a2dbee12aa161f035e7cc47addd0adc8ad0bee3ab4b9237b4c5ccb30dc8f678ae9f7c03e5cbb253c8b90d32e252c6ad55a118187371d47fffd04cae61e5cf892154923a6aeb3ea2973494bac56a5c58c7d5e412719d355141b3507d9e2c539b784b9103d21bae9c745a3378b71b78eeed9f94cabadedaa717594fdb754e508dd1fb0d5c60346958e722913ebe36542ff0eaabeee28162ad4526515e370491c44a9c8d5eca6ba63607dd228d739b75a84ed7881f6e67f74df1a0c82e9bc4efbcc73b0ff9a7a474d9e32ecfa52befcfe29ba65c2a53e7b3e6104294b003f00a9c8960a1d88c61d54280f4400b2f9535ee655b3a4bbe6064c820d5a9d4eb5b48ead7a7889aa96d9a0b44fd087eeaf09c4a097701b50c0038851e7aa3ad8f9f85490de96767e11d5fec179c67753981913ae0cb1c963f25b62d8c9588bcfef80fcffa356b1aeb823a3b912eeb98ad94759a2eed3fd67ab4338460a1790762b748db1985016aaaeec00b32b071fc67612000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000800) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f00000017c0), 0x3da, 0xffffff7f) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000001c0)={0x3, 0xffffffff, 0x2, 0x8}, 0x10) 20:56:21 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) 20:56:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:22 executing program 0 (fault-call:27 fault-nth:23): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:22 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:22 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0xe}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) [ 759.257639] audit: type=1800 audit(1581972982.125:1059): pid=30143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17651 res=0 [ 759.283400] FAULT_INJECTION: forcing a failure. [ 759.283400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 759.295406] CPU: 0 PID: 30143 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 759.303466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 759.312834] Call Trace: [ 759.315444] dump_stack+0x142/0x197 [ 759.319211] should_fail.cold+0x10f/0x159 [ 759.323373] ? __might_sleep+0x93/0xb0 [ 759.327275] __alloc_pages_nodemask+0x1d6/0x7a0 [ 759.332087] ? __alloc_pages_slowpath+0x2930/0x2930 [ 759.337121] ? __do_page_cache_readahead+0x28e/0xa20 [ 759.342412] alloc_pages_current+0xec/0x1e0 [ 759.346773] __page_cache_alloc+0x248/0x3e0 [ 759.351135] __do_page_cache_readahead+0x2d9/0xa20 [ 759.356155] ? save_trace+0x290/0x290 [ 759.360213] ? read_cache_pages+0x6b0/0x6b0 [ 759.364548] ? lock_downgrade+0x740/0x740 [ 759.368704] ondemand_readahead+0x50a/0xb40 [ 759.373033] ? ondemand_readahead+0x50a/0xb40 [ 759.377545] page_cache_sync_readahead+0xab/0x100 [ 759.382399] generic_file_read_iter+0x128a/0x28d0 [ 759.387260] ? do_sendfile+0x4db/0xbd0 [ 759.391156] ? do_syscall_64+0x1e8/0x640 [ 759.395234] ? filemap_range_has_page+0x2d0/0x2d0 [ 759.400219] ? __lock_is_held+0xb6/0x140 [ 759.404288] ? fsnotify+0x92f/0x11e0 20:56:22 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) connect$rose(r1, &(0x7f0000000000)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) [ 759.408016] ext4_file_read_iter+0x14e/0x340 [ 759.412581] generic_file_splice_read+0x37d/0x600 [ 759.417431] ? fsnotify+0x11e0/0x11e0 [ 759.421367] ? add_to_pipe+0x340/0x340 [ 759.425286] ? rw_verify_area+0xea/0x2b0 [ 759.429351] ? add_to_pipe+0x340/0x340 [ 759.433249] do_splice_to+0x105/0x170 [ 759.437061] splice_direct_to_actor+0x222/0x7b0 [ 759.441742] ? generic_pipe_buf_nosteal+0x10/0x10 [ 759.446610] ? do_splice_to+0x170/0x170 [ 759.450599] ? rw_verify_area+0xea/0x2b0 [ 759.454678] do_splice_direct+0x18d/0x230 [ 759.458845] ? splice_direct_to_actor+0x7b0/0x7b0 [ 759.463706] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 759.468473] ? __sb_start_write+0x153/0x2f0 [ 759.472866] do_sendfile+0x4db/0xbd0 [ 759.476606] ? do_compat_pwritev64+0x140/0x140 [ 759.481392] ? fput+0xd4/0x150 [ 759.484596] SyS_sendfile64+0x102/0x110 [ 759.488708] ? SyS_sendfile+0x130/0x130 [ 759.492683] ? do_syscall_64+0x53/0x640 [ 759.496837] ? SyS_sendfile+0x130/0x130 [ 759.500982] do_syscall_64+0x1e8/0x640 [ 759.504873] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 759.509718] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 759.514895] RIP: 0033:0x45c6c9 [ 759.518217] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 759.525925] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 759.534588] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 759.541871] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 759.549266] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 759.556535] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000017 20:56:22 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:22 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r1, 0x25, &(0x7f0000000040)={0x2, 0x7, 0xfffffffffffffffa, 0x200}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x44, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:22 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:22 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x4b0c01, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000040)={'macvlan1\x00', 0x9, 0x1}) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000180)="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", 0xfc) 20:56:22 executing program 0 (fault-call:27 fault-nth:24): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 760.158406] audit: type=1800 audit(1581972983.025:1060): pid=30173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17685 res=0 [ 760.187512] FAULT_INJECTION: forcing a failure. [ 760.187512] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.199467] CPU: 0 PID: 30173 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 760.207364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 760.216735] Call Trace: [ 760.219353] dump_stack+0x142/0x197 [ 760.223487] should_fail.cold+0x10f/0x159 [ 760.227740] ? __might_sleep+0x93/0xb0 [ 760.231646] __alloc_pages_nodemask+0x1d6/0x7a0 [ 760.236401] ? __alloc_pages_slowpath+0x2930/0x2930 [ 760.241584] ? __do_page_cache_readahead+0x28e/0xa20 [ 760.247225] alloc_pages_current+0xec/0x1e0 [ 760.251912] __page_cache_alloc+0x248/0x3e0 [ 760.256737] __do_page_cache_readahead+0x2d9/0xa20 [ 760.261677] ? save_trace+0x290/0x290 [ 760.265503] ? read_cache_pages+0x6b0/0x6b0 [ 760.269846] ? lock_downgrade+0x740/0x740 [ 760.274010] ondemand_readahead+0x50a/0xb40 [ 760.278343] ? ondemand_readahead+0x50a/0xb40 [ 760.282906] page_cache_sync_readahead+0xab/0x100 [ 760.287773] generic_file_read_iter+0x128a/0x28d0 [ 760.292638] ? do_sendfile+0x4db/0xbd0 [ 760.296536] ? do_syscall_64+0x1e8/0x640 [ 760.300626] ? filemap_range_has_page+0x2d0/0x2d0 [ 760.305486] ? __lock_is_held+0xb6/0x140 [ 760.309737] ? save_trace+0x290/0x290 [ 760.314514] ? fsnotify+0x92f/0x11e0 [ 760.318282] ext4_file_read_iter+0x14e/0x340 [ 760.322921] generic_file_splice_read+0x37d/0x600 [ 760.327869] ? fsnotify+0x11e0/0x11e0 [ 760.331791] ? add_to_pipe+0x340/0x340 [ 760.335962] ? rw_verify_area+0xea/0x2b0 [ 760.340029] ? add_to_pipe+0x340/0x340 [ 760.343925] do_splice_to+0x105/0x170 [ 760.347747] splice_direct_to_actor+0x222/0x7b0 [ 760.352433] ? generic_pipe_buf_nosteal+0x10/0x10 [ 760.357292] ? do_splice_to+0x170/0x170 [ 760.361290] ? rw_verify_area+0xea/0x2b0 [ 760.365363] do_splice_direct+0x18d/0x230 [ 760.369520] ? splice_direct_to_actor+0x7b0/0x7b0 [ 760.374376] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 760.379149] ? __sb_start_write+0x153/0x2f0 [ 760.383593] do_sendfile+0x4db/0xbd0 [ 760.387342] ? do_compat_pwritev64+0x140/0x140 [ 760.391941] ? fput+0xd4/0x150 [ 760.395147] SyS_sendfile64+0x102/0x110 [ 760.399132] ? SyS_sendfile+0x130/0x130 [ 760.403405] ? do_syscall_64+0x53/0x640 [ 760.407391] ? SyS_sendfile+0x130/0x130 [ 760.411398] do_syscall_64+0x1e8/0x640 [ 760.414443] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 760.415374] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 760.415395] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 760.415404] RIP: 0033:0x45c6c9 [ 760.415409] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 760.445268] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 760.452779] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 760.460183] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 760.467862] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 760.475520] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000018 20:56:23 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x6bb6, 0x200000) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:23 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x0) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:23 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:23 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x411902, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$KDDISABIO(r4, 0x4b37) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000000)={0x1f, 0xe, 0x4, 0x4, 0x8001, {}, {0x3, 0x2, 0x7f, 0x7, 0xbe, 0xb6, "dc4ffb1f"}, 0x1, 0x2, @offset=0x6, 0x10001, 0x0, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r5, &(0x7f0000000080)="c26662bd3f6fd8f786dbc78d462359659d99a25ad6dd2c047da449258ee6c24b2d147c56f790c94d483b4f6794beb3e212dec9d89f26940ecaf36edc39de244ff6d51c2a0bcb310bdd32adf33da17e53d868a8e7dafa673b", &(0x7f0000000100)=""/63}, 0x20) write(r0, &(0x7f0000000180)="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", 0xfc) bind(0xffffffffffffffff, &(0x7f00000002c0)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23}}, 0x80) 20:56:23 executing program 0 (fault-call:27 fault-nth:25): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:23 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 761.228219] audit: type=1800 audit(1581972984.095:1061): pid=30197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17752 res=0 [ 761.252410] FAULT_INJECTION: forcing a failure. [ 761.252410] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.264558] CPU: 1 PID: 30197 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 761.272508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 761.281876] Call Trace: [ 761.284483] dump_stack+0x142/0x197 [ 761.291268] should_fail.cold+0x10f/0x159 [ 761.295553] ? __might_sleep+0x93/0xb0 [ 761.299470] __alloc_pages_nodemask+0x1d6/0x7a0 [ 761.304188] ? __alloc_pages_slowpath+0x2930/0x2930 [ 761.309312] ? __do_page_cache_readahead+0x28e/0xa20 [ 761.314616] alloc_pages_current+0xec/0x1e0 [ 761.318990] __page_cache_alloc+0x248/0x3e0 [ 761.323333] __do_page_cache_readahead+0x2d9/0xa20 [ 761.328278] ? save_trace+0x290/0x290 [ 761.332099] ? read_cache_pages+0x6b0/0x6b0 [ 761.336477] ? lock_downgrade+0x740/0x740 [ 761.340742] ondemand_readahead+0x50a/0xb40 [ 761.345432] ? ondemand_readahead+0x50a/0xb40 [ 761.349959] page_cache_sync_readahead+0xab/0x100 [ 761.354823] generic_file_read_iter+0x128a/0x28d0 [ 761.359684] ? do_sendfile+0x4db/0xbd0 [ 761.363584] ? do_syscall_64+0x1e8/0x640 [ 761.367667] ? filemap_range_has_page+0x2d0/0x2d0 [ 761.372534] ? __lock_is_held+0xb6/0x140 [ 761.376699] ? save_trace+0x290/0x290 [ 761.380516] ? fsnotify+0x92f/0x11e0 [ 761.384321] ext4_file_read_iter+0x14e/0x340 [ 761.388745] generic_file_splice_read+0x37d/0x600 [ 761.393768] ? fsnotify+0x11e0/0x11e0 [ 761.397683] ? add_to_pipe+0x340/0x340 [ 761.401594] ? rw_verify_area+0xea/0x2b0 [ 761.405821] ? add_to_pipe+0x340/0x340 [ 761.409726] do_splice_to+0x105/0x170 [ 761.413594] splice_direct_to_actor+0x222/0x7b0 [ 761.418292] ? generic_pipe_buf_nosteal+0x10/0x10 [ 761.423158] ? do_splice_to+0x170/0x170 [ 761.427166] ? rw_verify_area+0xea/0x2b0 [ 761.431254] do_splice_direct+0x18d/0x230 [ 761.435420] ? splice_direct_to_actor+0x7b0/0x7b0 [ 761.440280] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 761.445050] ? __sb_start_write+0x153/0x2f0 [ 761.449500] do_sendfile+0x4db/0xbd0 [ 761.453293] ? do_compat_pwritev64+0x140/0x140 [ 761.457992] ? fput+0xd4/0x150 [ 761.461322] SyS_sendfile64+0x102/0x110 [ 761.465389] ? SyS_sendfile+0x130/0x130 [ 761.469524] ? do_syscall_64+0x53/0x640 [ 761.473517] ? SyS_sendfile+0x130/0x130 [ 761.477514] do_syscall_64+0x1e8/0x640 [ 761.481415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 761.486276] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 761.491469] RIP: 0033:0x45c6c9 [ 761.494662] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 761.502392] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 761.509667] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 761.517068] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 20:56:24 executing program 4: socket(0x10, 0x802, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) write(r0, &(0x7f0000000180)="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", 0xfc) [ 761.524348] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 761.531836] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000019 20:56:24 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:24 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0xb7) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000080)={{0xffffffffffffffff, 0x0, 0xbb8, 0x2, 0x19}, 0xfff, 0xffff, 0x6}) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0xfffffffffffffffd, 0x0) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 20:56:24 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:24 executing program 0 (fault-call:27 fault-nth:26): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 761.890997] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 762.078039] audit: type=1800 audit(1581972984.945:1062): pid=30222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17780 res=0 [ 762.103006] FAULT_INJECTION: forcing a failure. [ 762.103006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 762.114988] CPU: 1 PID: 30222 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 762.122891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 762.132256] Call Trace: [ 762.135125] dump_stack+0x142/0x197 [ 762.138777] should_fail.cold+0x10f/0x159 [ 762.142943] ? __might_sleep+0x93/0xb0 [ 762.146851] __alloc_pages_nodemask+0x1d6/0x7a0 [ 762.151543] ? __alloc_pages_slowpath+0x2930/0x2930 [ 762.156724] ? __do_page_cache_readahead+0x28e/0xa20 [ 762.161848] alloc_pages_current+0xec/0x1e0 [ 762.166222] __page_cache_alloc+0x248/0x3e0 [ 762.170568] __do_page_cache_readahead+0x2d9/0xa20 [ 762.175514] ? save_trace+0x290/0x290 [ 762.179338] ? read_cache_pages+0x6b0/0x6b0 [ 762.183805] ? lock_downgrade+0x740/0x740 [ 762.188092] ondemand_readahead+0x50a/0xb40 [ 762.192426] ? ondemand_readahead+0x50a/0xb40 [ 762.197270] page_cache_sync_readahead+0xab/0x100 [ 762.202133] generic_file_read_iter+0x128a/0x28d0 [ 762.206996] ? do_sendfile+0x4db/0xbd0 [ 762.210894] ? do_syscall_64+0x1e8/0x640 [ 762.214977] ? filemap_range_has_page+0x2d0/0x2d0 [ 762.219838] ? __lock_is_held+0xb6/0x140 [ 762.223912] ? save_trace+0x290/0x290 [ 762.227861] ? fsnotify+0x92f/0x11e0 [ 762.231623] ext4_file_read_iter+0x14e/0x340 [ 762.236045] generic_file_splice_read+0x37d/0x600 [ 762.240900] ? fsnotify+0x11e0/0x11e0 [ 762.244717] ? add_to_pipe+0x340/0x340 [ 762.248637] ? rw_verify_area+0xea/0x2b0 [ 762.252714] ? add_to_pipe+0x340/0x340 [ 762.256750] do_splice_to+0x105/0x170 [ 762.260566] splice_direct_to_actor+0x222/0x7b0 [ 762.265251] ? generic_pipe_buf_nosteal+0x10/0x10 [ 762.270368] ? do_splice_to+0x170/0x170 [ 762.274358] ? rw_verify_area+0xea/0x2b0 [ 762.278431] do_splice_direct+0x18d/0x230 [ 762.282789] ? splice_direct_to_actor+0x7b0/0x7b0 [ 762.287754] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 762.292525] ? __sb_start_write+0x153/0x2f0 [ 762.296861] do_sendfile+0x4db/0xbd0 [ 762.300620] ? do_compat_pwritev64+0x140/0x140 [ 762.305326] ? fput+0xd4/0x150 [ 762.308687] SyS_sendfile64+0x102/0x110 [ 762.312877] ? SyS_sendfile+0x130/0x130 [ 762.316981] ? do_syscall_64+0x53/0x640 [ 762.321110] ? SyS_sendfile+0x130/0x130 [ 762.325162] do_syscall_64+0x1e8/0x640 [ 762.329249] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 762.334255] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 762.339476] RIP: 0033:0x45c6c9 [ 762.342676] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 762.350394] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 762.357671] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 762.364991] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 762.372276] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 762.379556] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000001a [ 762.414359] selinux_nlmsg_perm: 102 callbacks suppressed 20:56:25 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 762.414370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 [ 762.900451] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 20:56:25 executing program 0 (fault-call:27 fault-nth:27): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:25 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) clock_getres(0x2, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f0000000040)="d7b4ce0d7b9bc2e6eddbef227a3c98af4d926ca6042b2ca9f665dbf25a638050f8ad5d5de1986fbdfd89dc4cc494181cee6459444a6be2ddef23f0c6326e59e80d5fbbde9006125600bbe85a4d229baa89156868f3d798d7b14b", &(0x7f00000000c0)=""/176, &(0x7f0000000180)='@', &(0x7f00000001c0)="a594f59a8156759cfc97310f226da5c506a682dab7800d9f4777589a2dacf6043ba5de4847975ae676b97cfa25e9a3f2b35122049281ffb427ae2ead2808486b015f477646cb65015495491b4af79568a24a2849d615f77ffe788c92f224452b78bc1fbcfbaaba93f649a67f01bebd35e997a16818bd415d99b00f16", 0x3}, 0x38) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = openat(r1, &(0x7f0000000280)='./file0\x00', 0x8e481, 0x1) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f00000002c0), &(0x7f0000000300)=0x4) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 763.074805] audit: type=1800 audit(1581972985.945:1063): pid=30236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17619 res=0 [ 763.099229] FAULT_INJECTION: forcing a failure. [ 763.099229] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 763.111421] CPU: 1 PID: 30236 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 763.119452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 763.128970] Call Trace: [ 763.131586] dump_stack+0x142/0x197 [ 763.135240] should_fail.cold+0x10f/0x159 [ 763.139404] ? __might_sleep+0x93/0xb0 [ 763.143311] __alloc_pages_nodemask+0x1d6/0x7a0 [ 763.147996] ? __alloc_pages_slowpath+0x2930/0x2930 [ 763.153038] ? __do_page_cache_readahead+0x28e/0xa20 [ 763.158167] alloc_pages_current+0xec/0x1e0 [ 763.162514] __page_cache_alloc+0x248/0x3e0 [ 763.166858] __do_page_cache_readahead+0x2d9/0xa20 [ 763.171828] ? save_trace+0x290/0x290 [ 763.175671] ? read_cache_pages+0x6b0/0x6b0 [ 763.180125] ? lock_downgrade+0x740/0x740 [ 763.184291] ondemand_readahead+0x50a/0xb40 [ 763.188725] ? ondemand_readahead+0x50a/0xb40 [ 763.193245] page_cache_sync_readahead+0xab/0x100 [ 763.198113] generic_file_read_iter+0x128a/0x28d0 [ 763.202991] ? do_sendfile+0x4db/0xbd0 [ 763.206893] ? do_syscall_64+0x1e8/0x640 [ 763.210974] ? filemap_range_has_page+0x2d0/0x2d0 [ 763.215832] ? __lock_is_held+0xb6/0x140 [ 763.219908] ? save_trace+0x290/0x290 [ 763.223825] ? fsnotify+0x92f/0x11e0 [ 763.227557] ext4_file_read_iter+0x14e/0x340 [ 763.231987] generic_file_splice_read+0x37d/0x600 [ 763.237112] ? fsnotify+0x11e0/0x11e0 [ 763.241035] ? add_to_pipe+0x340/0x340 [ 763.244943] ? rw_verify_area+0xea/0x2b0 [ 763.249132] ? add_to_pipe+0x340/0x340 [ 763.253033] do_splice_to+0x105/0x170 [ 763.256985] splice_direct_to_actor+0x222/0x7b0 [ 763.261681] ? generic_pipe_buf_nosteal+0x10/0x10 [ 763.266541] ? do_splice_to+0x170/0x170 [ 763.270633] ? rw_verify_area+0xea/0x2b0 [ 763.276641] do_splice_direct+0x18d/0x230 [ 763.280804] ? splice_direct_to_actor+0x7b0/0x7b0 [ 763.285665] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 763.290468] ? __sb_start_write+0x153/0x2f0 [ 763.294938] do_sendfile+0x4db/0xbd0 [ 763.298715] ? do_compat_pwritev64+0x140/0x140 [ 763.303313] ? fput+0xd4/0x150 [ 763.306605] SyS_sendfile64+0x102/0x110 [ 763.310592] ? SyS_sendfile+0x130/0x130 [ 763.314578] ? do_syscall_64+0x53/0x640 [ 763.318571] ? SyS_sendfile+0x130/0x130 [ 763.322570] do_syscall_64+0x1e8/0x640 [ 763.326471] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 763.331335] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 763.336536] RIP: 0033:0x45c6c9 [ 763.339729] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 763.347447] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 763.354822] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 763.362413] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 763.369828] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 763.377253] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000001b [ 763.406722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 [ 763.503712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 [ 763.613289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 [ 763.726637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 [ 764.006879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 [ 764.226728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30206 comm=syz-executor.1 20:56:27 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:27 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:27 executing program 0 (fault-call:27 fault-nth:28): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:27 executing program 4: write(0xffffffffffffffff, &(0x7f0000000180)="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", 0xfc) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = dup(r1) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(0x0) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3100001c9aaaf01406aea07eb28c0752db6a7ae2f0c1c72840192dde1275faab", @ANYRES16=r3, @ANYBLOB="080029ffff000000000000000000080007007f000001120001007573a40fc267790c89300000000000004e6fa88c79f330cf4876ae9c32"], 0x3}, 0x1, 0x0, 0x0, 0x90}, 0x800) sendmsg$NLBL_MGMT_C_REMOVEDEF(r2, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="48057d777510b1e7149b14bca6e9000000", @ANYRES16=r3, @ANYBLOB="02002abd7000fedbdf250500000008000c0000000000080002000500000006000b00090000000800080000000004120001002f6465762f736e617073686f74000000"], 0x48}}, 0x84) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0xb20, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x800) 20:56:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) getsockopt$nfc_llcp(r1, 0x118, 0x4, &(0x7f00000000c0)=""/29, 0x1d) r2 = syz_open_procfs(r0, &(0x7f0000000080)='net/rt6_stats\x00') r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r2, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 764.571576] audit: type=1800 audit(1581972987.445:1064): pid=30246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17865 res=0 [ 764.595796] FAULT_INJECTION: forcing a failure. [ 764.595796] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 764.607875] CPU: 1 PID: 30246 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 764.616461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 764.625827] Call Trace: [ 764.628439] dump_stack+0x142/0x197 [ 764.632211] should_fail.cold+0x10f/0x159 [ 764.636386] ? __might_sleep+0x93/0xb0 [ 764.640297] __alloc_pages_nodemask+0x1d6/0x7a0 [ 764.644982] ? __alloc_pages_slowpath+0x2930/0x2930 [ 764.650012] ? __do_page_cache_readahead+0x28e/0xa20 [ 764.655167] alloc_pages_current+0xec/0x1e0 [ 764.659521] __page_cache_alloc+0x248/0x3e0 [ 764.664009] __do_page_cache_readahead+0x2d9/0xa20 [ 764.668989] ? save_trace+0x290/0x290 [ 764.672809] ? read_cache_pages+0x6b0/0x6b0 [ 764.677287] ? lock_downgrade+0x740/0x740 [ 764.681462] ondemand_readahead+0x50a/0xb40 [ 764.685800] ? ondemand_readahead+0x50a/0xb40 [ 764.690518] page_cache_sync_readahead+0xab/0x100 [ 764.695387] generic_file_read_iter+0x128a/0x28d0 [ 764.700248] ? do_sendfile+0x4db/0xbd0 [ 764.704147] ? do_syscall_64+0x1e8/0x640 [ 764.708230] ? filemap_range_has_page+0x2d0/0x2d0 [ 764.713089] ? __lock_is_held+0xb6/0x140 [ 764.717260] ? save_trace+0x290/0x290 [ 764.721243] ? fsnotify+0x92f/0x11e0 [ 764.724971] ext4_file_read_iter+0x14e/0x340 [ 764.729393] generic_file_splice_read+0x37d/0x600 [ 764.734242] ? fsnotify+0x11e0/0x11e0 [ 764.738052] ? add_to_pipe+0x340/0x340 [ 764.741964] ? rw_verify_area+0xea/0x2b0 [ 764.746037] ? add_to_pipe+0x340/0x340 [ 764.749972] do_splice_to+0x105/0x170 [ 764.753781] splice_direct_to_actor+0x222/0x7b0 [ 764.758466] ? generic_pipe_buf_nosteal+0x10/0x10 [ 764.763437] ? do_splice_to+0x170/0x170 [ 764.767415] ? rw_verify_area+0xea/0x2b0 [ 764.771486] do_splice_direct+0x18d/0x230 [ 764.775644] ? splice_direct_to_actor+0x7b0/0x7b0 [ 764.780498] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 764.785266] ? __sb_start_write+0x153/0x2f0 [ 764.789848] do_sendfile+0x4db/0xbd0 [ 764.793684] ? do_compat_pwritev64+0x140/0x140 [ 764.798389] ? fput+0xd4/0x150 [ 764.801605] SyS_sendfile64+0x102/0x110 [ 764.805587] ? SyS_sendfile+0x130/0x130 [ 764.809586] ? do_syscall_64+0x53/0x640 [ 764.813600] ? SyS_sendfile+0x130/0x130 [ 764.817586] do_syscall_64+0x1e8/0x640 [ 764.821479] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 764.826334] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 764.831531] RIP: 0033:0x45c6c9 [ 764.834725] RSP: 002b:00007fa5d16e7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 764.842439] RAX: ffffffffffffffda RBX: 00007fa5d16e86d4 RCX: 000000000045c6c9 [ 764.849840] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 764.857114] RBP: 000000000076bf20 R08: 0000000000000000 R09: 0000000000000000 [ 764.864397] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 20:56:27 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r3 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x4000) rt_sigprocmask(0x2, &(0x7f0000000080)={[0xdc]}, 0x0, 0x8) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0x7, 0x7}) [ 764.871675] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000001c 20:56:27 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001480)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x80000000, 0x4, &(0x7f0000000240)=[{&(0x7f0000000080)="b77e667a49e607983e3272377915b6b22da54e73c3c4ff23539187054ec638163a740977d50e2fd4ed01f2f1525a801f31a03dfdd92bdf9b03a43ee58766a26579cf41eea310c00713590ca3a9691b8318920a2d623abbe041e71bdad30c79ce21daa64237c0e7914b4e44895a27b42bec06706f3d61a59311ef1772e2f6d39aade46a9d73c93882ad3c9d72be07036b1e015e12893e2b1213f607e04b839b21beffc50e8fde080476c56f2d667a5862", 0xb0}, {&(0x7f0000000140)="bc4363756729ca8ab9b9d5bb30484da09280b043328c48ebe8d02bd09b4a3762ba73a95043be4cd0d9ffac07b2323ae1156e091f171bfe96e8f07464b1e9ef494040eebb1ecef9bcc3ee776bd827c7193214cee8447a2b37dcf46d5fe0ff3dd0a03b0cf3e6b4fe598119ed58d8415184009f6813b17e43f8ae3aa37efb0f6c2b94506a29f0ccdd3301e8ca", 0x8b, 0x80000001}, {&(0x7f0000000200)="0070a21055605accd460bc28a3", 0xd, 0x3}, {&(0x7f00000003c0)="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", 0x1000, 0x100000000000000}], 0x1204010, &(0x7f0000001580)={[{@nodots='nodots'}], [{@appraise='appraise'}, {@dont_hash='dont_hash'}, {@dont_measure='dont_measure'}, {@smackfsroot={'smackfsroot', 0x3d, '-\x90md5sum^'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'net/netlink\x00'}}, {@uid_eq={'uid', 0x3d, r3}}]}) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:27 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:27 executing program 0 (fault-call:27 fault-nth:29): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:28 executing program 4: r0 = socket(0x18, 0xa, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) [ 765.177677] FAT-fs (loop5): Unrecognized mount option "appraise" or missing value [ 765.190254] audit: type=1800 audit(1581972988.065:1065): pid=30273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17879 res=0 [ 765.215333] FAULT_INJECTION: forcing a failure. [ 765.215333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 765.227880] CPU: 0 PID: 30273 Comm: syz-executor.0 Not tainted 4.14.171-syzkaller #0 [ 765.235874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 765.245238] Call Trace: [ 765.247884] dump_stack+0x142/0x197 [ 765.251548] should_fail.cold+0x10f/0x159 [ 765.255725] ? __might_sleep+0x93/0xb0 [ 765.259631] __alloc_pages_nodemask+0x1d6/0x7a0 [ 765.264469] ? __alloc_pages_slowpath+0x2930/0x2930 [ 765.269498] ? __do_page_cache_readahead+0x28e/0xa20 20:56:28 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 765.274612] alloc_pages_current+0xec/0x1e0 [ 765.278949] __page_cache_alloc+0x248/0x3e0 [ 765.283286] __do_page_cache_readahead+0x2d9/0xa20 [ 765.288226] ? save_trace+0x290/0x290 [ 765.292041] ? read_cache_pages+0x6b0/0x6b0 [ 765.296587] ? lock_downgrade+0x740/0x740 [ 765.301498] ondemand_readahead+0x50a/0xb40 [ 765.305828] ? ondemand_readahead+0x50a/0xb40 [ 765.310478] page_cache_sync_readahead+0xab/0x100 [ 765.315350] generic_file_read_iter+0x128a/0x28d0 [ 765.320210] ? do_sendfile+0x4db/0xbd0 [ 765.324230] ? do_syscall_64+0x1e8/0x640 20:56:28 executing program 4: r0 = socket(0x27, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) [ 765.328319] ? filemap_range_has_page+0x2d0/0x2d0 [ 765.333177] ? __lock_is_held+0xb6/0x140 [ 765.337257] ? save_trace+0x290/0x290 [ 765.341073] ? fsnotify+0x92f/0x11e0 [ 765.344808] ext4_file_read_iter+0x14e/0x340 [ 765.349345] generic_file_splice_read+0x37d/0x600 [ 765.354310] ? fsnotify+0x11e0/0x11e0 [ 765.358565] ? add_to_pipe+0x340/0x340 [ 765.362487] ? rw_verify_area+0xea/0x2b0 [ 765.366567] ? add_to_pipe+0x340/0x340 [ 765.370573] do_splice_to+0x105/0x170 [ 765.374389] splice_direct_to_actor+0x222/0x7b0 [ 765.379078] ? generic_pipe_buf_nosteal+0x10/0x10 [ 765.383974] ? do_splice_to+0x170/0x170 [ 765.388063] ? rw_verify_area+0xea/0x2b0 [ 765.392136] do_splice_direct+0x18d/0x230 [ 765.396342] ? splice_direct_to_actor+0x7b0/0x7b0 [ 765.401306] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 765.406218] ? __sb_start_write+0x153/0x2f0 [ 765.410553] do_sendfile+0x4db/0xbd0 [ 765.414284] ? do_compat_pwritev64+0x140/0x140 [ 765.418880] ? fput+0xd4/0x150 [ 765.422116] SyS_sendfile64+0x102/0x110 [ 765.426100] ? SyS_sendfile+0x130/0x130 [ 765.430082] ? do_syscall_64+0x53/0x640 [ 765.434203] ? SyS_sendfile+0x130/0x130 [ 765.438199] do_syscall_64+0x1e8/0x640 [ 765.442094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 765.446955] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 765.452150] RIP: 0033:0x45c6c9 [ 765.456211] RSP: 002b:00007fa5d16c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 765.464202] RAX: ffffffffffffffda RBX: 00007fa5d16c76d4 RCX: 000000000045c6c9 [ 765.471604] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 765.478882] RBP: 000000000076bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 765.486170] R10: 02008000fffffffe R11: 0000000000000246 R12: 0000000000000008 [ 765.493451] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 000000000000001d [ 765.727642] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 765.887274] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30290 comm=syz-executor.1 [ 765.956286] FAT-fs (loop5): Unrecognized mount option "appraise" or missing value [ 765.989875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30290 comm=syz-executor.1 20:56:29 executing program 4: r0 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr="1cdf6d8a14318249b54a8d6de41c045d"}}}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000)=r3, 0x4) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000180)="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", 0xfc) 20:56:29 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:29 executing program 0 (fault-call:27 fault-nth:30): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:29 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = shmget$private(0x0, 0x400000, 0x10, &(0x7f0000000000/0x400000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/140) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$LOOP_SET_FD(r6, 0x4c00, r0) write$P9_RREADLINK(r4, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000040)={r7}) 20:56:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:29 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0xa8000, 0x140) ppoll(&(0x7f0000000040)=[{}, {r1, 0x4000}, {r3, 0x8000}, {0xffffffffffffffff, 0x84}, {r4, 0x450f}], 0x5, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x5]}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:29 executing program 0: r0 = creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYBLOB="dab749870de81bdc06d6221155da3e47f6edae8185ac14ec40395ad5cd311982d46c8c1bbbd4c887a7c0d25ccb4dc3777deed73d9a02fb3fcd4086b0c3591ea5e05c605eae18c730cfb06a5d6eb888ccf151", @ANYRESOCT=r7]], 0x8) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r9 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r9, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r9, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r10, 0x28007d) sendfile(r10, r10, 0x0, 0x2008000fffffffe) connect$bt_rfcomm(r0, &(0x7f0000000140)={0x1f, @any, 0xf7}, 0xa) 20:56:29 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x61, 0x1, 0x4, 0x1000000, 0x800, {}, {0x1, 0x2, 0x7f, 0x82, 0xff, 0x1, "6202b7aa"}, 0x8, 0x1, @userptr=0x7, 0x7ff, 0x0, r2}) epoll_pwait(r3, &(0x7f00000000c0)=[{}, {}], 0x2, 0x289b, &(0x7f0000000140)={[0x7]}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nvram\x00', 0x383682, 0x0) 20:56:29 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(0x0, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:29 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000140)=""/207) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)={0x7, 0x9}) openat$rtc(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/rtc0\x00', 0x440000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$inet6_opts(r3, 0x29, 0x3b, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x48) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f08040403400900ff010000400001000073c68c69002300b6674c28838e4a8100000000009d0cc9ffaf8acaa1abab974c00010000f35910074a0000000dfe80000006000000000000e89ce6a200f90000bb40000000a59fb1b350f3bdd1545b0000006bcad0964e69f9efa5c7cea88b044343f72ad8a58202df5af7b06e0904000000000000006f0a65519254231b5ed89132d5419fdc7859226d9f81d6d209538f3afac20dd72afabf79b342189fe6c8cc17a61bb664e501cb6a98038fde00000000eae0247d92dfde8b0da6bb67c20340d76e98d336d8f16552b2844e2bdd477ab5e5f1067f85020060ba03f9e99e507397cfaea9fafabf016288de11ec3589e1a0f55778aa90b6360bc0a991a247841c84a86fdaf6000000e170f56459fa25c4cef17ee95ec903d8b9ffdc21a18b2896f0fb278b49cd1ed02c58f8436b56901eef6b7ac3dd716ecf477803499b1ecf8fa96894ecc33af01cc2f5f0b090880fb9f284"], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000380)="08958fa10b18a2421366cee1bf9b7a4055fa3fd18a411a7ea62a371525aa36535b1c447725d68f51a2d0d8381c8453bc54927135f4da15770c572051954e87db8d99fff6656f30a5bc64253e030d72894a7e7410329eb2e69ca3000f2e31a59254d5fa41ffc1b96bcf5b678d15f251b1e383b6699f000c3d0dcfd9bf65c98302bf1bca9b49b4c5cf5f268dae96dfcab545af0916784c8cd50ee1e4f0eb830c6fd7bc0a6a4933eed673fac6a2bd694f7a2a615bf5764142ae47ec682dc333332e2f2ea35b4b517ea02522abd6f8237db791b38227076a24bdb7602d02e7b210bddf62ea9304b890f17948b8d22720", 0xee, 0x0, 0x0, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x3) socket(0x1000000010, 0x400000400080803, 0x0) 20:56:29 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 766.808607] audit: type=1800 audit(1581972989.675:1066): pid=30332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17927 res=0 [ 766.999598] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:30 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:30 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200, 0x0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000040)=""/114) [ 767.422952] selinux_nlmsg_perm: 349 callbacks suppressed [ 767.424981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 20:56:30 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r5 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) sendfile(r5, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00mor{`'], 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r9, 0x0, 0x0) setresuid(r7, r9, 0x0) r10 = getegid() chown(&(0x7f0000000140)='./bus\x00', r7, r10) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3, 0x0, 0x8000000}, 0x0) r11 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r11, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r11, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r12 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r12, 0x28007d) sendfile(r12, r12, 0x0, 0x2008000fffffffe) 20:56:30 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:30 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0x7, 0x6, 0x4, 0x200000, 0x0, {0x0, 0x2710}, {0x1, 0x0, 0x9, 0xf8, 0x81, 0x0, "9ec83702"}, 0x6, 0x4, @offset=0xa12, 0x100, 0x0, r3}) [ 767.802615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pig=30367 comm=syz-executor.4 [ 768.051114] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 [ 768.292856] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 [ 768.477263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 [ 768.557170] audit: type=1800 audit(1581972991.425:1067): pid=30379 uid=3327 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=17931 res=0 [ 768.591817] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 [ 768.628550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 [ 768.642244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 [ 768.664937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 20:56:31 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:31 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:31 executing program 4: r0 = socket(0x3, 0x2, 0x4) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:31 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, 0x0, 0x7, &(0x7f0000000140)="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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000001140)) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000000)=r0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 768.683887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30327 comm=syz-executor.1 20:56:31 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) recvfrom(r0, &(0x7f00000003c0)=""/228, 0xe4, 0x40, &(0x7f00000004c0)=@ax25={{0x3, @default, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r6 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) sendfile(r7, r7, 0x0, 0x2008000fffffffe) 20:56:31 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000140), 0x10, &(0x7f0000000400)={&(0x7f00000003c0)=@can={{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "db0202936734b2c0"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendfile(r1, r2, 0x0, 0x4000000000010046) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f00000001c0)=""/135, 0x87}], 0x2, 0xffffff7f) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3d, &(0x7f0000000000)=""/147, &(0x7f00000000c0)=0x93) [ 768.937352] audit: type=1800 audit(1581972991.805:1068): pid=30402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18020 res=0 20:56:31 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:32 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x40, 0x0) readlinkat(r2, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)=""/231, 0xe7) write$P9_RREADLINK(r1, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd7d, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) fsync(0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) 20:56:32 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="00e5a96300f5b2e8"], 0x8) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000140)=0x80, 0x4) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000000)={0x0, 0x0, {0x7, 0x80000000, 0x3003, 0x5, 0x3, 0x3, 0x0, 0x2}}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x7ff) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) name_to_handle_at(r6, &(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)={0x62, 0x6, "57c0ecac3a67f1c88de295959281b9f649670168c4d5183615cff19647eb76316ad82a08a1d98cc260a347aa61cb248fbf07241f27bddd4963c7287f097ff67cc287dd5bbaec2cc3dca7d6c56d7f999e448f40814facc9f38ad3"}, &(0x7f0000000240), 0x1400) 20:56:32 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) stat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r6}}]}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[{@gid={'gid', 0x3d, r6}}]}) r7 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) write$cgroup_subtree(r8, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) fstat(r8, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r10, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) fstat(r10, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./bus\x00', 0x3f, 0x6, &(0x7f0000001540)=[{&(0x7f0000000280)="216084dca687efb79dc0aae99bf3a60767b250c752352b304cb92afcc168bc514229b4e03c08bfe21d0e2daf14caaa51c4302a641eb503297220c561f45144dc331c03265d73c32c9ac15d27a844d1bee3200d3ea2da41e776f038bedffd40f6fab27721cb72d1be236e31eac22f30c6f3781dd68f5d6088f18b5c10369d78985fb6d68c625d2ab12fa098872e82ac11e6bfb55aee1351b609197544ee8bf39f", 0xa0, 0x6}, {&(0x7f0000000340)="ba7a1a6873d6d7893f174fc2b821f207ba24fe2795f278f9594ae46216bec24f7e30427fa2185ef3592104de2ed98dd008b1a01ffee38c24e5abc5f4633d56bdb54de05085837aa4916d9ae2d671903df31d8bf699c6ffff475b0e898e19daee46974b9081e3a730326218600a22699fcaa810ec709ba07484591cad5490eb0c5970b53d4e9f33d654d1ef0ce86d000b417c971f5da035f1a8ebb6d1a86fc8a5e850d3ff22513198a9a293a569ef4f70799947bc3f339804a5f1ee52a51c722a38863f03424d15598142b67c96f6ce34e4606e59c3", 0xd5, 0x5}, {&(0x7f0000000440)="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", 0x1000, 0x80}, {&(0x7f0000000080)="ef59ee6958cfe2046b30d6fb3bdca0047be8d6cde244b155dafd8147536d90c5eedef7a3dda0e9ee76f84f89ca46cc7d1bccbe4ffc7b90a66a06b2f5078ae3", 0x3f, 0x30}, {&(0x7f0000001440)="389de7fac1b56c1195e2f630ccb911fe1f63f9c7f2272821fb3bd46b6e8c736ddeffa91c3685aeadcbff0ef574896fa59cd9af77d955244b3707f8fdc02b49deb274e525e4c8e1090ee73a67c58e402497197ac98b4a284207093b2898fcb89ea8605998b05a617dbfc018", 0x6b, 0x8}, {&(0x7f00000014c0)="207ee0199d933681378df0c4eee8a5a9755dc622e8ec30dbaf1d954195a146ad6b32b92f10142261885b938acada6ec86d8f931dd49eb53dbbf0e3fcf78fb6dc7a3f1b25fa16c61780882276444edb155240752a", 0x54}], 0x40, &(0x7f0000001780)={[{@gid={'gid', 0x3d, r2}}, {@gid={'gid', 0x3d, r4}}], [{@euid_gt={'euid>', r9}}, {@fowner_eq={'fowner', 0x3d, r11}}]}) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r12, 0x0, 0x4000000000010046) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) 20:56:32 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) 20:56:32 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 769.398547] hfsplus: gid requires an argument [ 769.431877] hfsplus: unable to parse mount options [ 769.497296] hfsplus: gid requires an argument [ 769.514641] hfsplus: unable to parse mount options [ 769.526155] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.616088] audit: type=1800 audit(1581972992.485:1069): pid=30435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18020 res=0 20:56:33 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:33 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x4000000000010046) write$cgroup_subtree(r3, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000000), 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) 20:56:33 executing program 0: r0 = creat(&(0x7f0000000600)='./file0\x00', 0x1fd) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000003c0)={0xfffffffe, 0x5, 0x4, 0x2, 0x1, {r3, r4/1000+10000}, {0x4, 0x8, 0xfd, 0x8, 0x4, 0x1f, "c567700e"}, 0x40, 0x0, @offset=0x3ff, 0x4, 0x0, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000008c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000009c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000a00)={'batadv0\x00', r6}) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r7 = getpid() sched_setattr(r7, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r8, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x81, 0x440) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r11, 0x0, 0x4000000000010046) write$cgroup_subtree(r11, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r11, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r12 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r12, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r12, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r13 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r13, 0x28007d) sendfile(r13, r13, 0x0, 0x2008000fffffffe) 20:56:33 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:33 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x90400, 0x120) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) 20:56:33 executing program 4: ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000040)={0xa20000, 0x7, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990997, 0x1, [], @ptr=0x9}}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000180)="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", 0xfc) 20:56:33 executing program 2: r0 = epoll_create1(0x0) r1 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000013}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000000c0)={0x1a8002015}) [ 770.396646] audit: type=1800 audit(1581972993.265:1070): pid=30465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18360 res=0 20:56:33 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:33 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000180)="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", 0xfc) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r3 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r6, 0x2}, 0x8) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r7 = fcntl$dupfd(r0, 0x406, r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r1, r2, 0x3, 0x1, r7}, 0x14) 20:56:33 executing program 2: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:33 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') r3 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) fcntl$setpipe(r4, 0x407, 0x9) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x210d40, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ddffa4f4f5e27c46344dc34b06f8dbda00042abd7000fddbdf251100000006001401040000000c0099007f000000b7471f36250d837827f3d4c7a318116ae37a0ab0aef8d192da5951febee93e1cdb2bb8165c5abcd433c0d76096d09900"/103], 0x3}, 0x1, 0x0, 0x0, 0x884}, 0x400c801) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x40) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10890}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:33 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 770.741395] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 771.169226] audit: type=1800 audit(1581972994.035:1071): pid=30502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18360 res=0 20:56:34 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c000100140003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:34 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) geteuid() openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video2\x00', 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r0, r3}) r4 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r4, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r4, 0xb) shmctl$SHM_UNLOCK(r4, 0xc) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000080)=""/178) 20:56:34 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r8, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r8, 0xb) shmctl$SHM_UNLOCK(r8, 0xc) shmctl$SHM_UNLOCK(r8, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r7, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:34 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000280)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x24) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000002c0)) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0x46b6dd4b3299285c, &(0x7f00000003c0)={0x8, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x309842, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) ioctl$SIOCPNADDRESOURCE(r7, 0x89e0, &(0x7f0000000400)=0x10000) sendfile(0xffffffffffffffff, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="2d6d656d6f33a772792086423a09e994119f826eb61c0cdc37a670db0a32d6ab50c5f0b2c8e358e187079c118f771114eea8fa76013f91e8fb517fa6bcc8ecd7b39bbfd19718f87244597f6bf7e7e685257cec0c7fb42bdea359c4748f98c24b25cad5a1c724c9e87a038981879b419417ca74d7b4f33b8d7ae6c3f2be07902dd1405eeeea549026d66143a86d51a56348a5eb83d4874a8fe83a73"], 0x8) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r8 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r8, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r9, 0x28007d) sendfile(r9, r9, 0x0, 0x2008000fffffffe) 20:56:34 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:34 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x900, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x8001, 0xd6d6, 0x5, 0x0, [], [], [], 0x7, 0x2, 0x7f, 0x7fffffff, "bbb14f85cb9c4fc0cdaf5d8b706d60d5"}) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x1000, 0x9, 0xf460, 0x200, 0x3f}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r3, 0x7ff}, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x280, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 771.575562] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. 20:56:34 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000400)={0x28, 0x4, 0x0, {0x3, 0x8}}, 0x28) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r3, 0x0, 0x4000000000010046) write(r1, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb900000000000000040200000300f12fbe780196370dd18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd24362942aca72f295ed94e0ad917d67013375533417ed83df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a883", 0xea) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) r6 = accept(r4, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) connect(r0, &(0x7f0000000380)=@isdn={0x22, 0x0, 0x11, 0x7f, 0x5}, 0x80) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000180), 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r8, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) connect$rose(r8, &(0x7f0000000340)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @default}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000240)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr="1cdf6d8a14318249b54a8d6de41c045d"}}}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000000c0)={r9, 0xcef3}, &(0x7f0000000100)=0x8) write(r7, &(0x7f0000000140)="d351d0466f1e54a970d14cc6e5fd3d433ba93dc67baeb5996ab70b34", 0x1c) [ 771.703726] audit: type=1800 audit(1581972994.575:1072): pid=30525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18110 res=0 [ 771.735557] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:34 executing program 4: r0 = socket(0x10, 0x802, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write(r0, &(0x7f0000000180)="fc0000004800071fab092504090007000aab6000000000000000e293210001c0000000000000000000000000000000ea05001ec28656aaa79bb94b46fe000000bc000200000300f12fbe780196370d1151ffd633d450000000e5d18064b1ed548d59c40a366c57c6a55e00008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70cce190a60aa47e988399ddef2fe082038f4f8b29d97f391064e763b6f380f5bd92c83170e5bba4a463a1e00d66f91cfded815b2ccd243f295ed94e0ad91bd0734babc7c737d67013375533417e583df0200000000000000a6b567b4d5715587e6d8a1ad0a4f0108a8835d731d05b0", 0xfc) 20:56:35 executing program 4: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x0, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:35 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 772.401912] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 772.440991] selinux_nlmsg_perm: 605 callbacks suppressed 20:56:35 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2d6dd7f6a266a965"], 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xfd}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5, 0x11, 0x1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x3f}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004040) [ 772.441000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30522 comm=syz-executor.2 [ 772.465879] audit: type=1800 audit(1581972995.335:1073): pid=30545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18110 res=0 [ 772.501413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30522 comm=syz-executor.2 [ 772.548078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30522 comm=syz-executor.2 [ 772.572787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30522 comm=syz-executor.2 [ 772.595728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30538 comm=syz-executor.1 [ 772.601103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30522 comm=syz-executor.2 [ 772.615864] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30538 comm=syz-executor.1 [ 772.636319] audit: type=1800 audit(1581972995.515:1074): pid=30554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18370 res=0 [ 772.646537] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30538 comm=syz-executor.1 [ 772.671358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30522 comm=syz-executor.2 [ 772.679244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30538 comm=syz-executor.1 20:56:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 772.886526] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:36 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c000100140003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:36 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@mcast2, 0x4e23, 0x1000, 0x4e20, 0x0, 0xa, 0x20, 0xa0, 0x2c, 0x0, r1}, {0x800, 0x7, 0x3, 0x9, 0x0, 0x5, 0x9, 0x1}, {0x401, 0x4, 0xfc0, 0x6}, 0x80, 0x0, 0x0, 0x1, 0x5}, {{@in=@multicast1, 0x4d2, 0x32}, 0x0, @in=@broadcast, 0x3502, 0x0, 0x2, 0x6, 0x729b32da, 0xfff, 0x1ff}}, 0xe8) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) preadv(r2, &(0x7f00000017c0), 0x3da, 0xffffff7f) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) 20:56:36 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x900, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0x8001, 0xd6d6, 0x5, 0x0, [], [], [], 0x7, 0x2, 0x7f, 0x7fffffff, "bbb14f85cb9c4fc0cdaf5d8b706d60d5"}) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x1000, 0x9, 0xf460, 0x200, 0x3f}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r3, 0x7ff}, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x280, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:36 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000140), &(0x7f00000002c0)=0x4) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:36 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r3, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r5, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 773.568523] audit: type=1800 audit(1581972996.435:1075): pid=30579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18154 res=0 20:56:36 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 773.839742] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 773.910890] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:37 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r3, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r5, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:56:37 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='-me`\x00ry '], 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 774.384772] audit: type=1800 audit(1581972997.255:1076): pid=30591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18154 res=0 20:56:37 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c000100140003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 774.637402] audit: type=1800 audit(1581972997.505:1077): pid=30600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18531 res=0 20:56:37 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) 20:56:37 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', r6}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x60, r4, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xcf2}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x7f}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x39}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x8}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x2}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x0) r7 = open(&(0x7f00000001c0)='./bus\x00', 0x404000, 0x62) write$P9_RREADLINK(r7, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x200080, 0x0) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f0000000200)="e429b83e09d8695acc5d") sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2002000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="68040000", @ANYRES16=r3, @ANYBLOB="00022abd7000fedbdf2501000000140008006e72300000000000000000000000000005000d000100000008000c0000000000060001000700000008001700", @ANYRES32=r7, @ANYBLOB="050013000100000008000a000300000005001300090000000500050001000000"], 0x68}, 0x1, 0x0, 0x0, 0x8081}, 0x4000090) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 774.943476] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:37 executing program 5: syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x200) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x2, @local, 0x2}}, 0x3f, 0xbd, 0x0, 0x8278, 0xe0, 0xfff, 0x8}, &(0x7f0000000100)=0x9c) 20:56:38 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r3, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r5, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 775.415142] audit: type=1800 audit(1581972998.285:1078): pid=30620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18531 res=0 20:56:38 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000001000000000000407"], 0xb) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r6}}, 0x18) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3, 0x0, 0x8000000000}, 0x0) r7 = creat(0x0, 0x6857b21ff1155d90) r8 = gettid() tkill(r8, 0x1000000000016) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r9, &(0x7f0000000600)=ANY=[@ANYRES16, @ANYPTR, @ANYRESDEC, @ANYRESDEC], 0x32) r10 = getpgid(r0) fcntl$lock(r9, 0x26, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x8, r10}) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r11 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r3, 0x28007d) sendfile(r11, r11, 0x0, 0x2008000fffffffe) 20:56:38 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) 20:56:38 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014000300"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:39 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000c6b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 20:56:39 executing program 5: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x80000, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x40010062, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r2 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x4000000000010046) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f00000000c0)={0x2, 0x0, [{0x1f, 0x4, 0x0, 0x0, @sint={0x7, 0x9}}, {0xc0000, 0x4, 0x0, 0x0, @adapter={0x7, 0x0, 0xfffffffffffff676, 0x7, 0x8a08}}]}) syz_open_procfs(r3, &(0x7f0000000080)='net/vlan/vlan1\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:39 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 776.306390] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:39 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r3, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) 20:56:39 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000c6b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 20:56:40 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:40 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014000300"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:40 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 777.623051] selinux_nlmsg_perm: 743 callbacks suppressed [ 777.623063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.666328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.683752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.700401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.717034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.733619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.750974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.766617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.784683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.816983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30665 comm=syz-executor.2 [ 777.927066] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:41 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) r3 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FICLONE(r2, 0x40049409, r3) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x0, 0x16, "24bc1cb3530b5ee3fad0fc0470843b32bb00eaadc71a"}) 20:56:41 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="2d6d650108000000"], 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000140)={0x1, 0x6, 0x6, 0x3, 0x1b4, &(0x7f0000000640)}) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) sendfile(r7, r7, 0x0, 0x2008000fffffffe) 20:56:41 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 20:56:41 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000c6b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 20:56:41 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:41 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014000300"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 778.722216] audit: type=1800 audit(1581973001.595:1079): pid=30689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18545 res=0 [ 779.286902] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. 20:56:42 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r3, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r5, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:56:42 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2fbd0b209a2baac157edb0b38d6a5c252d6d616d02000000"], 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) 20:56:42 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:42 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x400, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0x0, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) [ 779.657649] audit: type=1800 audit(1581973002.525:1080): pid=30714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18467 res=0 [ 779.806317] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 779.823063] BFS-fs: bfs_fill_super(): Last block not available: 109 20:56:43 executing program 5: ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:43 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:43 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r3, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r5, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:56:43 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) r6 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) recvmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000480)=@tipc=@id, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)=""/79, 0x4f}], 0x1, &(0x7f0000000580)=""/105, 0x69}, 0x20) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) getsockopt$nfc_llcp(r4, 0x118, 0x6, &(0x7f00000003c0)=""/173, 0xad) prctl$PR_SET_FPEMU(0xa, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) sendfile(r7, r7, 0x0, 0x2008000fffffffe) [ 780.436600] audit: type=1800 audit(1581973003.305:1081): pid=30732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18467 res=0 20:56:43 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 780.666165] audit: type=1800 audit(1581973003.535:1082): pid=30745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18080 res=0 [ 780.698087] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:43 executing program 4: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2fbd0b209a2baac157edb0b38d6a5c252d6d616d02000000"], 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 780.985508] audit: type=1800 audit(1581973003.855:1083): pid=30752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18561 res=0 20:56:44 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r3, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r6, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r6, 0xb) shmctl$SHM_UNLOCK(r6, 0xc) shmctl$SHM_UNLOCK(r6, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r5, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x4ffe0, 0x0) 20:56:44 executing program 0: r0 = creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x4000000000010046) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="a658cbb14e4719ed0e6de221a6024064d22bdc93b40700c0205411fffa41b03b333ee05bf447f42df801009fceffd07de763857f524c03622634364e019a1a388921ecca91d8263db417555f57f109ab71f9b357cfd9fa19183dd10b1367acd9819c3485a31ae748ebb3035653e956a8002773a3badd78c2d4655c0ed82ba5648bf1f1348dad6ee255cd39902ddcbda9277ba846fb4401e546ef3d1f6e32e6cd9367c0e646dd"], 0x8) ioctl$GIO_UNISCRNMAP(r5, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r6 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r7, 0x28007d) sendfile(r7, r7, 0x0, 0x2008000fffffffe) [ 781.496599] audit: type=1800 audit(1581973004.365:1084): pid=30764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18080 res=0 20:56:44 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:44 executing program 4: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r9, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r9, 0xb) shmctl$SHM_UNLOCK(r9, 0xc) shmctl$SHM_UNLOCK(r9, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r8, 0x7004) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="00042dbd7000000000000d000000"], 0x3}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 781.684386] audit: type=1800 audit(1581973004.555:1085): pid=30772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18401 res=0 [ 781.715956] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. 20:56:44 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:45 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x20, 0xb, 0x4, 0x40000000, 0x4, {0x0, 0x7530}, {0x4, 0xb2b7f699f0389265, 0x1, 0x4, 0x7, 0x20, "82bd1b37"}, 0x7, 0x3, @planes=&(0x7f0000000000)={0x0, 0x9, @mem_offset=0xac0, 0x3ff}, 0x3, 0x0, 0xffffffffffffffff}) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000000c0)=0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:45 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 20:56:45 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:45 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)=""/79, 0x4f}, {&(0x7f00000020c0)=""/189, 0xbd}, {&(0x7f0000002000)=""/40, 0x28}, {&(0x7f0000000500)=""/179, 0xb3}, {&(0x7f0000000640)=""/184, 0xb8}, {&(0x7f0000000700)=""/178, 0xb2}, {&(0x7f00000007c0)=""/183, 0xb7}], 0x7, &(0x7f00000002c0)=""/9, 0x9}, 0x6}, {{&(0x7f0000000900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000002040)=""/65, 0x41}, {&(0x7f0000000a00)=""/149, 0x95}, {&(0x7f00000005c0)=""/3, 0x3}, {&(0x7f0000000ac0)=""/90, 0x5a}, {&(0x7f0000000b40)=""/208, 0xd0}, {&(0x7f0000000c40)=""/18, 0x12}], 0x6, &(0x7f0000000d00)=""/143, 0x8f}, 0x1}, {{&(0x7f0000000dc0)=@alg, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e40)=""/190, 0xbe}], 0x1, &(0x7f0000000f40)=""/4096, 0x1000}, 0x3106}], 0x3, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) [ 782.467436] audit: type=1800 audit(1581973005.335:1086): pid=30794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18401 res=0 20:56:45 executing program 4 (fault-call:29 fault-nth:0): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') r0 = gettid() tkill(r0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r7 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}, r8}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r9, 0x28007d) sendfile(r9, r9, 0x0, 0x2008000fffffffe) [ 782.625460] audit: type=1800 audit(1581973005.495:1087): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=18689 res=0 [ 782.642481] selinux_nlmsg_perm: 1452 callbacks suppressed [ 782.642490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30786 comm=syz-executor.1 [ 782.670847] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 782.697437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.729711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.747411] devpts: called with bogus options [ 782.756696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.771391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.785811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.804123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.818579] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.833155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.850407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=30798 comm=syz-executor.2 [ 782.918642] audit: type=1800 audit(1581973005.785:1088): pid=30810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=18721 res=0 [ 782.945042] FAULT_INJECTION: forcing a failure. [ 782.945042] name failslab, interval 1, probability 0, space 0, times 0 [ 782.956870] CPU: 0 PID: 30810 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 782.964989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.974352] Call Trace: [ 782.976955] dump_stack+0x142/0x197 [ 782.980610] should_fail.cold+0x10f/0x159 [ 782.984780] should_failslab+0xdb/0x130 [ 782.988789] kmem_cache_alloc_trace+0x2e9/0x790 [ 782.993622] alloc_pipe_info+0xb0/0x380 [ 782.997740] splice_direct_to_actor+0x5d2/0x7b0 [ 783.002545] ? avc_policy_seqno+0x9/0x20 [ 783.006621] ? selinux_file_permission+0x85/0x480 [ 783.011483] ? generic_pipe_buf_nosteal+0x10/0x10 [ 783.016339] ? security_file_permission+0x89/0x1f0 [ 783.021282] ? do_splice_to+0x170/0x170 [ 783.025274] ? rw_verify_area+0xea/0x2b0 [ 783.029419] do_splice_direct+0x18d/0x230 [ 783.033592] ? splice_direct_to_actor+0x7b0/0x7b0 [ 783.038633] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 783.043405] ? __sb_start_write+0x153/0x2f0 [ 783.047739] do_sendfile+0x4db/0xbd0 [ 783.051595] ? do_compat_pwritev64+0x140/0x140 [ 783.056178] ? fput+0xd4/0x150 [ 783.059379] SyS_sendfile64+0x102/0x110 [ 783.063386] ? SyS_sendfile+0x130/0x130 [ 783.067358] ? do_syscall_64+0x53/0x640 [ 783.071351] ? SyS_sendfile+0x130/0x130 [ 783.075316] do_syscall_64+0x1e8/0x640 [ 783.079205] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 783.084048] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 783.089235] RIP: 0033:0x45c6c9 [ 783.092415] RSP: 002b:00007fa66c0b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 783.100131] RAX: ffffffffffffffda RBX: 00007fa66c0b36d4 RCX: 000000000045c6c9 [ 783.107403] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 783.114663] RBP: 000000000076c118 R08: 0000000000000000 R09: 0000000000000000 [ 783.121928] R10: 02008000fffffffe R11: 0000000000000246 R12: 000000000000000a [ 783.129196] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000000 20:56:46 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 20:56:46 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x44000) fallocate(r4, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r5, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) close(r3) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ff0f00006f727920"], 0x8) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) 20:56:46 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:46 executing program 4 (fault-call:29 fault-nth:1): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') r0 = gettid() tkill(r0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r7 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}, r8}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r9, 0x28007d) sendfile(r9, r9, 0x0, 0x2008000fffffffe) 20:56:46 executing program 0: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, 0x0, &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') tkill(0x0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x4000000000010046) write$cgroup_subtree(r4, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r5 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r5, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) waitid(0x1, r0, &(0x7f00000003c0), 0x40000000, &(0x7f0000000440)) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r6, 0x28007d) sendfile(r6, r6, 0x0, 0x2008000fffffffe) fallocate(r6, 0x18, 0x7, 0xfffffffffffffffd) [ 783.678530] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 783.699687] devpts: called with bogus options [ 783.879914] audit: type=1800 audit(1581973006.745:1089): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17046 res=0 [ 783.906759] FAULT_INJECTION: forcing a failure. [ 783.906759] name failslab, interval 1, probability 0, space 0, times 0 [ 783.918414] CPU: 0 PID: 30837 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 783.926314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.935790] Call Trace: [ 783.938398] dump_stack+0x142/0x197 [ 783.942053] should_fail.cold+0x10f/0x159 [ 783.946226] should_failslab+0xdb/0x130 [ 783.950372] __kmalloc+0x2f0/0x7a0 [ 783.953928] ? kmem_cache_alloc_trace+0x623/0x790 [ 783.958787] ? alloc_pipe_info+0x15c/0x380 [ 783.963038] alloc_pipe_info+0x15c/0x380 [ 783.967113] splice_direct_to_actor+0x5d2/0x7b0 [ 783.971912] ? avc_policy_seqno+0x9/0x20 [ 783.976094] ? selinux_file_permission+0x85/0x480 [ 783.982859] ? generic_pipe_buf_nosteal+0x10/0x10 [ 783.987723] ? security_file_permission+0x89/0x1f0 [ 783.992775] ? do_splice_to+0x170/0x170 [ 783.996806] ? rw_verify_area+0xea/0x2b0 [ 784.000883] do_splice_direct+0x18d/0x230 [ 784.005071] ? splice_direct_to_actor+0x7b0/0x7b0 [ 784.009927] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 784.014702] ? __sb_start_write+0x153/0x2f0 [ 784.019044] do_sendfile+0x4db/0xbd0 [ 784.022887] ? do_compat_pwritev64+0x140/0x140 [ 784.027481] ? fput+0xd4/0x150 [ 784.030686] SyS_sendfile64+0x102/0x110 [ 784.034668] ? SyS_sendfile+0x130/0x130 [ 784.038657] ? do_syscall_64+0x53/0x640 [ 784.042686] ? SyS_sendfile+0x130/0x130 [ 784.046677] do_syscall_64+0x1e8/0x640 [ 784.050570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 784.055425] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 784.060655] RIP: 0033:0x45c6c9 [ 784.063870] RSP: 002b:00007fa66c0b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 784.071584] RAX: ffffffffffffffda RBX: 00007fa66c0b36d4 RCX: 000000000045c6c9 20:56:47 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 784.078862] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 784.086139] RBP: 000000000076c118 R08: 0000000000000000 R09: 0000000000000000 [ 784.093412] R10: 02008000fffffffe R11: 0000000000000246 R12: 000000000000000a [ 784.100818] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000001 20:56:47 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 20:56:47 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netlink\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x4000000000010046) write$cgroup_subtree(r1, &(0x7f0000000340), 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x50001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000240)={r5, @in6={{0xa, 0x0, 0x0, @rand_addr="1cdf6d8a14318249b54a8d6de41c045d"}}}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r5, 0xeb}, &(0x7f0000000080)=0x8) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xc0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x3da, 0xffffff7f) 20:56:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:47 executing program 4 (fault-call:29 fault-nth:2): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') r0 = gettid() tkill(r0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r7 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}, r8}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r9, 0x28007d) sendfile(r9, r9, 0x0, 0x2008000fffffffe) [ 784.566610] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 784.571335] devpts: called with bogus options [ 784.750237] audit: type=1800 audit(1581973007.615:1090): pid=30860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17046 res=0 [ 784.776426] FAULT_INJECTION: forcing a failure. [ 784.776426] name failslab, interval 1, probability 0, space 0, times 0 [ 784.787944] CPU: 1 PID: 30860 Comm: syz-executor.4 Not tainted 4.14.171-syzkaller #0 [ 784.795845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.805209] Call Trace: [ 784.807813] dump_stack+0x142/0x197 [ 784.811467] should_fail.cold+0x10f/0x159 [ 784.815638] should_failslab+0xdb/0x130 [ 784.819631] kmem_cache_alloc+0x2d7/0x780 [ 784.823803] ? iov_iter_alignment+0x152/0x650 [ 784.828318] do_blockdev_direct_IO+0x326/0x9130 [ 784.833001] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 784.838466] ? rcu_read_lock_sched_held+0x110/0x130 [ 784.843504] ? __ext4_handle_dirty_metadata+0x125/0x470 [ 784.848895] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 784.854532] ? sb_init_dio_done_wq+0x80/0x80 [ 784.859096] ? __lock_acquire+0x5f7/0x4620 [ 784.863351] ? ext4_chunk_trans_blocks+0x30/0x30 [ 784.868153] ? lock_acquire+0x16f/0x430 [ 784.872169] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 784.877813] __blockdev_direct_IO+0xa1/0xca [ 784.882156] ext4_direct_IO+0x4e7/0x18f0 [ 784.886237] ? touch_atime+0xce/0x250 [ 784.890165] generic_file_read_iter+0x2f3/0x28d0 [ 784.894936] ? save_stack+0xa9/0xd0 [ 784.898617] ? save_stack_trace+0x16/0x20 [ 784.902775] ? save_stack+0x45/0xd0 [ 784.906409] ? kasan_kmalloc+0xce/0xf0 [ 784.910302] ? __kmalloc+0x15d/0x7a0 [ 784.914022] ? alloc_pipe_info+0x15c/0x380 [ 784.918265] ? do_splice_direct+0x18d/0x230 [ 784.922711] ? do_sendfile+0x4db/0xbd0 [ 784.926708] ? do_syscall_64+0x1e8/0x640 [ 784.930921] ? filemap_range_has_page+0x2d0/0x2d0 [ 784.935777] ? __lock_is_held+0xb6/0x140 [ 784.939847] ? save_trace+0x290/0x290 [ 784.943761] ? fsnotify+0x92f/0x11e0 [ 784.947489] ext4_file_read_iter+0x14e/0x340 [ 784.952181] generic_file_splice_read+0x37d/0x600 [ 784.957035] ? fsnotify+0x11e0/0x11e0 [ 784.960849] ? add_to_pipe+0x340/0x340 [ 784.964758] ? rw_verify_area+0xea/0x2b0 [ 784.968830] ? add_to_pipe+0x340/0x340 [ 784.972739] do_splice_to+0x105/0x170 [ 784.976609] splice_direct_to_actor+0x222/0x7b0 [ 784.981293] ? generic_pipe_buf_nosteal+0x10/0x10 [ 784.986151] ? do_splice_to+0x170/0x170 [ 784.990150] ? rw_verify_area+0xea/0x2b0 [ 784.994224] do_splice_direct+0x18d/0x230 [ 784.998381] ? splice_direct_to_actor+0x7b0/0x7b0 [ 785.003352] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 785.008120] ? __sb_start_write+0x153/0x2f0 [ 785.012483] do_sendfile+0x4db/0xbd0 [ 785.016213] ? do_compat_pwritev64+0x140/0x140 [ 785.020808] ? fput+0xd4/0x150 [ 785.024016] SyS_sendfile64+0x102/0x110 [ 785.027998] ? SyS_sendfile+0x130/0x130 [ 785.031980] ? do_syscall_64+0x53/0x640 [ 785.035971] ? SyS_sendfile+0x130/0x130 [ 785.039956] do_syscall_64+0x1e8/0x640 [ 785.043855] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 785.048716] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 785.053909] RIP: 0033:0x45c6c9 [ 785.057104] RSP: 002b:00007fa66c0b2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 785.065534] RAX: ffffffffffffffda RBX: 00007fa66c0b36d4 RCX: 000000000045c6c9 [ 785.072808] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000009 [ 785.080104] RBP: 000000000076c118 R08: 0000000000000000 R09: 0000000000000000 [ 785.087504] R10: 02008000fffffffe R11: 0000000000000246 R12: 000000000000000a [ 785.094779] R13: 00000000000008d0 R14: 00000000004cb5e8 R15: 0000000000000002 20:56:48 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x6, &(0x7f0000000080)="08418330e91000105ab071") syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r4, 0x0, 0xfffffffffffffef5, 0x2c080001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000000)={0x0, {{0xa, 0x4e22, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001600010100000000000000e101000000140002"], 0x1}}, 0x0) socket$unix(0x1, 0x2, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)) socket(0x1a, 0x3, 0x80) socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000a000/0x3000)=nil) shmat(r7, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r7, 0xb) shmctl$SHM_UNLOCK(r7, 0xc) shmctl$SHM_UNLOCK(r7, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r6, 0x7004) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x0, 0x0) 20:56:48 executing program 4 (fault-call:29 fault-nth:3): creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') r0 = gettid() tkill(r0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r7 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}, r8}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r9, 0x28007d) sendfile(r9, r9, 0x0, 0x2008000fffffffe) 20:56:48 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c00010014"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a80000001a004b901016000263300a4102"], 0x1}}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) 20:56:48 executing program 4: r0 = creat(&(0x7f0000000480)='./bus\x00', 0x2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') r1 = gettid() tkill(r1, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000100)={0xd, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x80) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x4000000000010046) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="2d6d656d6f727920705a3c410e99d3afd17ebc38b75ef70fbdd8cf78a801b3fda0fd9723df29b72eb211d87683720061b2af235c3774835e419d480a7db7fae427097df18bb11d36b9cc4ff1852d011e8196f7f9d5786c1755e52d34bdc8e013ef44fb75c2c4ea3982a84ee5605ba16f6d59b156b238d1cf443792331ca6efd79aaf1adf6360a619265ae1377c58beef1e38ae8aad6598000000000000"], 0x8) ioctl$GIO_UNISCRNMAP(r7, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x3, 0x3}, 0x0) r8 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x2, 0x4, 0xfffffffffffffffc, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}, r9}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r10 = open(&(0x7f00000000c0)='./bus\x00', 0x109580, 0x0) ftruncate(r10, 0x28007d) sendfile(r10, r10, 0x0, 0x2008000fffffffe) [ 785.523280] devpts: called with bogus options 20:56:48 executing program 4: creat(&(0x7f0000000600)='./file0\x00', 0x1fd) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policz ') r0 = gettid() tkill(r0, 0x3c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x4) recvmmsg(r2, &(0x7f0000008880), 0x400000000000271, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) syz_open_dev$vcsa(0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./bus\x00', 0x151042, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) write$cgroup_subtree(r6, &(0x7f0000000280)={[{0x2d, 'memory'}]}, 0x8) ioctl$GIO_UNISCRNMAP(r6, 0x4b69, &(0x7f0000000340)=""/87) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="99245b2e6972731d959a35fdda251e35ceb8ee43918959f7dd7b24d017bea99bcdbbb8a6b67464cb73e2a641e8ca5f85c082b2f3692082a4a4ef49fe789ca3ca92403dc6143c6246066422fc8d18fe2d0a90e12cd6c49af49d10783a6e1a45bd59c6c6", 0x30837c0d}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x4, 0x3, 0x3, 0x2}, 0x0) r7 = creat(0x0, 0x6857b21ff1155d90) fcntl$lock(r7, 0x25, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffffa, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000300)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x1, @loopback, 0x8}, r8}}, 0x30) prctl$PR_SET_FPEMU(0xa, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1ada42, 0x0) ftruncate(r9, 0x28007d) sendfile(r9, r9, 0x0, 0x2008000fffffffe) 20:56:48 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) splice(r2, 0x0, r4, 0x0, 0x1420000a0a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000010600)={0x0, 0x0, &(0x7f00000105c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000000010000000000000000000000000000300001002c0001001400030003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) [ 785.625847] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 785.674701] devpts: called with bogus options [ 785.851848] audit: type=1800 audit(1581973008.725:1091): pid=30889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17075 res=0 [ 786.369942] devpts: called with bogus options [ 786.424178] audit: type=1800 audit(1581973009.295:1092): pid=30894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=17075 res=0 [ 788.312733] NOHZ: local_softirq_pending 08 [ 808.795208] NOHZ: local_softirq_pending 08 [ 849.752596] NOHZ: local_softirq_pending 08 [ 1001.430298] INFO: task syz-executor.0:7296 blocked for more than 140 seconds. [ 1001.438128] Not tainted 4.14.171-syzkaller #0 [ 1001.444736] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1001.453113] syz-executor.0 D24432 7296 1 0x00000004 [ 1001.459000] Call Trace: [ 1001.465677] __schedule+0x7b8/0x1cd0 [ 1001.469942] ? firmware_map_remove+0x196/0x196 [ 1001.475131] ? _raw_spin_unlock_irq+0x28/0x90 [ 1001.479805] schedule+0x92/0x1c0 [ 1001.486205] rwsem_down_write_failed+0x5ce/0xb50 [ 1001.491482] ? rwsem_down_read_failed+0x390/0x390 [ 1001.496599] ? selinux_capable+0x40/0x40 [ 1001.503954] call_rwsem_down_write_failed+0x17/0x30 [ 1001.509248] ? call_rwsem_down_write_failed+0x17/0x30 [ 1001.514994] down_write+0x53/0x90 [ 1001.518768] ? vfs_unlink+0xc6/0x480 [ 1001.522911] vfs_unlink+0xc6/0x480 [ 1001.526472] do_unlinkat+0x33d/0x600 [ 1001.530481] ? do_rmdir+0x390/0x390 [ 1001.534258] ? do_syscall_64+0x53/0x640 [ 1001.538395] ? SyS_unlinkat+0x80/0x80 [ 1001.542606] SyS_unlink+0x1b/0x20 [ 1001.546137] do_syscall_64+0x1e8/0x640 [ 1001.550147] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1001.555045] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 1001.562165] RIP: 0033:0x45c417 [ 1001.565471] RSP: 002b:00007ffd45e3b9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 1001.573575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045c417 [ 1001.581146] RDX: 00007ffd45e3ba10 RSI: 00007ffd45e3ba10 RDI: 00007ffd45e3baa0 [ 1001.588419] RBP: 0000000000000ab4 R08: 0000000000000000 R09: 0000000000000009 [ 1001.596045] R10: 0000000000000003 R11: 0000000000000246 R12: 00007ffd45e3cb30 [ 1001.603564] R13: 000000000103f940 R14: 0000000000000000 R15: 00007ffd45e3cb30 [ 1001.611320] [ 1001.611320] Showing all locks held in the system: [ 1001.617909] 1 lock held by khungtaskd/1057: [ 1001.622503] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 1001.632114] 1 lock held by rsyslogd/7126: [ 1001.636476] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 1001.644867] 2 locks held by getty/7249: [ 1001.649017] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.658968] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1001.668344] 2 locks held by getty/7250: [ 1001.672630] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.681388] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1001.691279] 2 locks held by getty/7251: [ 1001.695500] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.704464] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1001.714028] 2 locks held by getty/7252: [ 1001.717991] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.727507] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1001.737187] 2 locks held by getty/7253: [ 1001.741398] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.750872] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1001.760766] 2 locks held by getty/7254: [ 1001.764860] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.774097] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1001.783584] 2 locks held by getty/7255: [ 1001.787732] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 1001.797058] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17d0 [ 1001.807154] 3 locks held by syz-executor.0/7296: [ 1001.812397] #0: (sb_writers#4){.+.+}, at: [] mnt_want_write+0x3f/0xb0 [ 1001.820980] #1: (&type->i_mutex_dir_key#3/1){+.+.}, at: [] do_unlinkat+0x22f/0x600 [ 1001.830987] #2: (&sb->s_type->i_mutex_key#9){++++}, at: [] vfs_unlink+0xc6/0x480 [ 1001.841921] 2 locks held by syz-executor.0/30822: [ 1001.847079] #0: (sb_writers#4){.+.+}, at: [] aio_write+0x426/0x4f0 [ 1001.855783] #1: (&sb->s_type->i_mutex_key#9){++++}, at: [] ext4_file_write_iter+0x1f4/0xe90 [ 1001.866576] [ 1001.868435] ============================================= [ 1001.868435] [ 1001.875702] NMI backtrace for cpu 0 [ 1001.879626] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 4.14.171-syzkaller #0 [ 1001.887411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.897787] Call Trace: [ 1001.900387] dump_stack+0x142/0x197 [ 1001.904432] nmi_cpu_backtrace.cold+0x57/0x94 [ 1001.910022] ? irq_force_complete_move.cold+0x7d/0x7d [ 1001.915221] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 1001.920550] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1001.926058] watchdog+0x5e7/0xb90 [ 1001.930035] kthread+0x319/0x430 [ 1001.933746] ? hungtask_pm_notify+0x50/0x50 [ 1001.938326] ? kthread_create_on_node+0xd0/0xd0 [ 1001.943226] ret_from_fork+0x24/0x30 [ 1001.947565] Sending NMI from CPU 0 to CPUs 1: [ 1001.952467] NMI backtrace for cpu 1 [ 1001.952471] CPU: 1 PID: 7524 Comm: kworker/u4:6 Not tainted 4.14.171-syzkaller #0 [ 1001.952475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1001.952477] Workqueue: bat_events batadv_nc_worker [ 1001.952482] task: ffff88805661e140 task.stack: ffff888056620000 [ 1001.952485] RIP: 0010:lock_acquire+0x2e8/0x430 [ 1001.952487] RSP: 0018:ffff888056627c90 EFLAGS: 00000046 [ 1001.952492] RAX: 0000000000000000 RBX: ffff8880a4ad6d28 RCX: dffffc0000000000 [ 1001.952495] RDX: 0000000000000000 RSI: 1ffffffff0f817ad RDI: ffffffff87c0bd68 [ 1001.952498] RBP: ffff888056627cd8 R08: 0000000000000002 R09: 0000000000000000 [ 1001.952502] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87f84ee0 [ 1001.952505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 1001.952508] FS: 0000000000000000(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000 [ 1001.952511] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1001.952514] CR2: 00007fab82242140 CR3: 000000007f7f3000 CR4: 00000000001426e0 [ 1001.952517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1001.952521] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1001.952522] Call Trace: [ 1001.952524] batadv_nc_worker+0x107/0x6d0 [ 1001.952527] ? batadv_nc_worker+0xd3/0x6d0 [ 1001.952529] process_one_work+0x863/0x1600 [ 1001.952531] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 1001.952534] worker_thread+0x5d9/0x1050 [ 1001.952535] kthread+0x319/0x430 [ 1001.952538] ? process_one_work+0x1600/0x1600 [ 1001.952540] ? kthread_create_on_node+0xd0/0xd0 [ 1001.952542] ret_from_fork+0x24/0x30 [ 1001.952544] Code: ff d0 48 89 d8 5a 48 c1 e8 03 59 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 0f 85 c6 00 00 00 48 8b 03 48 85 c0 75 9c 44 8b 5d c0 <65> ff 0d 31 74 b9 7e 0f 85 2c fe ff ff e8 da c8 b7 ff e9 22 fe [ 1001.953267] Kernel panic - not syncing: hung_task: blocked tasks [ 1002.141520] CPU: 0 PID: 1057 Comm: khungtaskd Not tainted 4.14.171-syzkaller #0 [ 1002.149158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1002.158568] Call Trace: [ 1002.161428] dump_stack+0x142/0x197 [ 1002.165388] panic+0x1f9/0x42d [ 1002.168800] ? add_taint.cold+0x16/0x16 [ 1002.172939] ? ___preempt_schedule+0x16/0x18 [ 1002.177345] watchdog+0x5f8/0xb90 [ 1002.180799] kthread+0x319/0x430 [ 1002.184790] ? hungtask_pm_notify+0x50/0x50 [ 1002.189128] ? kthread_create_on_node+0xd0/0xd0 [ 1002.193808] ret_from_fork+0x24/0x30 [ 1002.200125] Kernel Offset: disabled [ 1002.203806] Rebooting in 86400 seconds..